Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JXW0A1aFJOWkkg2Xm01h-mcSrRQ.roa
File: JXW0A1aFJOWkkg2Xm01h-mcSrRQ.roa (raw, json)
Hash identifier: 1VPOSMCeA4kHZ62e1w0ak9mzbnfLmtZb7Ina5XV+35A=
Subject key identifier: 25:75:B4:03:56:85:24:E5:A4:92:0D:97:9B:4D:61:FA:67:12:AD:14
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186873B9AE4194CBEAD9E5E47B73908C34E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JXW0A1aFJOWkkg2Xm01h-mcSrRQ.roa
Signing time: Sat 25 Feb 2023 06:21:15 +0000
ROA not before: Sat 25 Feb 2023 06:21:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 178.239.203.0/24 maxlen: 24
89.40.160.0/24 maxlen: 24
93.114.195.0/24 maxlen: 24
89.43.210.0/24 maxlen: 24
89.46.92.0/24 maxlen: 24
185.103.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:3b:9a:e4:19:4c:be:ad:9e:5e:47:b7:39:08:c3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 25 06:21:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2575b403568524e5a4920d979b4d61fa6712ad14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:a6:e5:76:33:c9:85:23:3e:f6:7b:c1:a2:
a4:61:e4:9d:dc:aa:2e:77:84:43:2c:45:3f:63:ba:
5b:19:d1:32:31:bb:48:eb:b6:f0:26:03:62:bd:11:
5b:97:db:0d:b3:cd:21:c0:e4:6d:e1:d1:46:f2:31:
27:32:23:b0:75:19:9c:1c:f1:ed:27:43:39:e7:8d:
93:0a:7c:05:c6:7a:0f:66:38:27:ef:f7:31:37:81:
de:25:12:e3:67:47:6e:98:35:66:3d:b3:2b:24:36:
28:5b:f5:d0:14:a9:92:6d:90:1a:fd:a0:9c:32:4b:
30:c8:48:16:e7:78:ef:dd:3c:32:b4:ef:c3:25:30:
3a:72:d8:db:79:c1:8e:c1:27:7f:d0:28:ee:6a:e2:
cb:b7:04:27:b6:5d:52:35:16:af:bb:98:31:ec:ba:
78:00:a6:82:e7:29:e1:88:80:c5:9d:08:9f:38:8b:
57:8e:cb:44:26:d9:a6:a3:57:2d:36:e3:60:15:11:
ae:63:03:29:59:f8:21:83:ec:06:f6:73:8d:84:7b:
a7:46:af:62:ad:34:12:1d:df:0b:db:8c:95:c2:25:
f0:e8:44:9e:42:d1:d3:68:e7:4f:6e:a5:b3:a3:6f:
68:7a:0e:a0:08:73:57:0d:f7:02:5a:46:27:e5:06:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:75:B4:03:56:85:24:E5:A4:92:0D:97:9B:4D:61:FA:67:12:AD:14
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JXW0A1aFJOWkkg2Xm01h-mcSrRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.160.0/24
89.43.210.0/24
89.46.92.0/24
93.114.195.0/24
178.239.203.0/24
185.103.74.0/24
Signature Algorithm: sha256WithRSAEncryption
07:27:b2:3b:85:e8:79:40:2b:50:f8:38:8e:29:be:cf:a6:4f:
5d:a7:3d:be:f3:b9:43:46:f6:d5:80:00:94:37:2a:7e:e3:d1:
49:5e:6d:5a:cc:0c:2f:0f:60:e4:16:ca:c1:e6:a9:c6:7d:53:
6d:7e:2c:cf:db:84:3c:b1:41:c7:8e:de:b8:de:44:96:55:3a:
9e:c9:a5:2c:14:ef:2c:fa:d3:0a:e5:90:78:67:9f:18:ba:22:
0e:8f:74:65:45:aa:ba:16:2f:2b:a2:64:b9:62:09:18:6e:c8:
22:37:61:74:8a:2c:f3:ee:8b:90:5b:16:90:a4:ed:da:34:04:
be:da:29:23:58:92:f3:b3:d8:47:4c:57:db:30:a1:d5:eb:76:
1a:9a:89:b2:45:d4:af:1e:9d:2a:ed:dd:4c:cf:36:67:35:4a:
12:85:17:5e:bd:36:1c:78:f1:9c:b5:cf:af:ba:41:b3:6c:c7:
2c:68:bb:a1:dc:25:d8:d5:81:f5:c6:19:91:dd:85:88:eb:11:
ce:08:fb:09:fa:83:88:ba:ea:e6:02:24:fa:be:f7:55:63:a6:
e2:2f:c2:1f:7d:1b:f5:5d:65:bc:6d:42:ee:7b:46:59:c5:f2:
e5:ae:31:44:77:62:77:88:6b:30:e0:a4:aa:68:73:99:02:a6:
f4:b2:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org