Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/H-J9qvpXf-HE1y9mR6ZrWMNMCK8.roa
File: H-J9qvpXf-HE1y9mR6ZrWMNMCK8.roa (raw, json)
Hash identifier: EqbSxnqgwbAlPkxz7lRDXV885Q9sR35pl9jWDfCXBHU=
Subject key identifier: 1F:E2:7D:AA:FA:57:7F:E1:C4:D7:2F:66:47:A6:6B:58:C3:4C:08:AF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A0DEA2B5345DB113A9CC73EFA2510EF12
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/H-J9qvpXf-HE1y9mR6ZrWMNMCK8.roa
Signing time: Sat 19 Aug 2023 13:09:24 +0000
ROA not before: Sat 19 Aug 2023 13:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 188.240.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:ea:2b:53:45:db:11:3a:9c:c7:3e:fa:25:10:ef:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 19 13:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fe27daafa577fe1c4d72f6647a66b58c34c08af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:f0:b1:c9:90:f4:51:7c:4c:98:09:df:73:
42:4e:4e:df:a1:6d:6b:f2:79:d1:1a:9d:0f:9d:9f:
8d:51:0f:c6:e8:15:3d:ee:3b:b5:9e:46:2a:b0:be:
f6:a2:ba:5f:b3:ec:5c:e9:ed:d1:f4:fa:94:1c:c6:
fe:14:43:ac:cf:f9:9b:bd:20:2a:a3:0e:02:7f:c9:
98:a9:5e:03:a3:4a:91:70:a6:68:87:80:81:8a:43:
6d:b0:9e:bc:18:6c:c6:7b:6d:d4:7b:23:80:3d:b0:
16:8b:9e:24:5d:e0:ba:85:d6:92:65:59:99:08:49:
bb:8f:8d:88:4f:14:4e:b1:4c:ce:f2:70:d6:be:b6:
08:32:1a:37:57:57:15:13:88:93:4a:69:f2:c4:1a:
6d:0a:9c:4c:32:b5:5a:74:a8:88:67:b9:f8:32:eb:
39:77:6c:df:c9:5e:62:cb:f1:83:6d:4e:11:51:09:
7d:91:f6:e9:d4:91:45:6f:0a:f7:4a:46:f2:86:a9:
c9:8c:29:73:9f:2b:1c:77:63:66:25:5a:4f:98:b0:
6f:b8:93:3b:76:fa:ab:1f:f3:30:3d:57:f6:4c:67:
5c:91:e4:85:67:21:8a:52:c5:ea:98:5c:30:41:e7:
bb:ed:3a:5d:ea:3d:65:b7:95:6a:95:08:9e:fe:72:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E2:7D:AA:FA:57:7F:E1:C4:D7:2F:66:47:A6:6B:58:C3:4C:08:AF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/H-J9qvpXf-HE1y9mR6ZrWMNMCK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.233.0/24
Signature Algorithm: sha256WithRSAEncryption
63:77:fa:14:2f:c2:ec:fa:50:25:14:2a:3e:dd:73:c3:5f:1c:
cc:f4:ee:4e:6b:97:52:15:7e:ef:be:4b:e0:9e:64:3f:f8:c0:
4e:85:52:dc:f2:29:7d:a5:37:b2:d6:cb:ff:68:cc:a3:81:7e:
b2:2b:9c:36:ce:b3:78:32:2e:20:eb:9a:e9:1f:b6:96:0f:58:
bb:82:ba:9d:15:f2:0e:4b:56:29:00:48:10:b3:d4:77:55:95:
3d:e9:09:42:f3:3d:01:83:65:cc:6f:2e:25:cf:bc:30:5e:56:
68:ef:5d:12:09:e3:9d:ae:b0:22:b2:a3:01:4c:ac:7b:c4:71:
fe:08:03:61:8e:bd:36:4a:a0:73:d9:7c:08:6a:a2:6f:58:8a:
62:76:48:d0:5d:13:68:c5:27:02:cf:b2:f5:94:05:5a:39:c4:
02:6e:34:e8:c8:07:96:72:64:8b:3b:03:82:9c:bf:fd:d0:16:
48:2f:4d:d4:14:ab:e3:08:68:eb:63:ea:42:e0:1a:b0:96:c5:
68:c3:58:a7:7b:6b:e8:71:f5:06:43:25:d7:11:77:1b:ab:e6:
1a:d8:d2:2a:0e:78:94:d7:b2:6c:a3:76:19:ab:50:ec:de:a2:
97:c3:2d:72:51:a3:d8:0f:4f:14:26:f9:ad:f2:1f:da:06:8a:
8a:e5:48:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 09:06:13 2023 by rpki-client on console-fra.rpki-client.org