Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NVvx6ZCVKHGYzP32UMc3p4pFWYo.roa
File: NVvx6ZCVKHGYzP32UMc3p4pFWYo.roa (raw, json)
Hash identifier: mFE1uwV5BrcYetYq24LO8sNPb70+SFsSPwBuFrqa8Io=
Subject key identifier: 35:5B:F1:E9:90:95:28:71:98:CC:FD:F6:50:C7:37:A7:8A:45:59:8A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018637453863B90D9C08D921E302B0C72A0C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NVvx6ZCVKHGYzP32UMc3p4pFWYo.roa
Signing time: Thu 09 Feb 2023 17:42:08 +0000
ROA not before: Thu 09 Feb 2023 17:42:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.243.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:37:45:38:63:b9:0d:9c:08:d9:21:e3:02:b0:c7:2a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 9 17:42:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=355bf1e99095287198ccfdf650c737a78a45598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:7e:06:14:9b:9e:b6:f2:61:c9:01:a7:49:
c6:c4:df:3b:c6:fd:54:85:47:ac:11:83:fb:a9:ee:
0e:e2:c3:3c:58:d2:73:5e:1d:3f:df:2d:22:64:28:
ed:e8:0d:fe:c6:d2:ca:ac:7a:5d:f9:7c:42:12:91:
79:2f:f5:6f:1e:a8:7f:83:02:db:39:61:7e:61:8e:
e4:78:fa:b2:cf:56:ad:46:05:23:b2:27:1b:67:53:
4e:28:91:fb:55:c6:e0:01:7b:60:a3:d5:48:00:f1:
5a:ba:55:02:a1:3f:85:31:e5:e2:5d:18:72:9a:83:
37:97:9e:3c:b9:87:49:13:fa:a6:1d:02:a3:72:12:
c8:0a:6e:2f:a1:7e:20:14:a5:fa:93:d9:75:65:d3:
70:b3:19:50:c7:db:4f:8e:0a:aa:0c:76:a9:c6:9d:
27:ed:ef:92:65:f0:22:81:05:93:a2:19:59:c3:80:
52:48:bc:63:b6:ae:f5:5e:2e:7e:f6:95:f3:13:b7:
d4:77:f5:fc:e5:77:82:7d:9d:19:1a:c9:86:01:39:
95:36:a5:82:68:1a:9c:f2:e8:7d:49:be:12:c7:15:
8b:ee:4c:e8:b5:d5:30:8f:81:ce:c1:35:44:6e:89:
4d:57:2e:a1:e3:7b:b8:7f:50:04:f5:99:8b:d5:ff:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5B:F1:E9:90:95:28:71:98:CC:FD:F6:50:C7:37:A7:8A:45:59:8A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NVvx6ZCVKHGYzP32UMc3p4pFWYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.151.0/24
188.241.182.0/24
188.241.243.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ef:ea:ca:8c:63:56:1a:0e:3b:90:58:97:79:00:8a:67:52:
29:12:d6:c0:04:02:a2:a2:0e:e9:22:c6:66:95:73:e3:32:92:
8d:ed:df:7d:fc:1f:6d:e2:3d:c0:80:7d:ff:29:70:fa:63:67:
d0:da:95:74:42:54:5e:34:47:5e:5c:da:e1:1f:1d:98:41:b7:
b7:59:59:cf:48:e5:dd:03:8d:d8:09:55:f5:be:1c:cc:84:d8:
76:64:72:24:b3:db:3c:db:a4:c3:4f:54:c3:cc:27:c4:96:35:
8a:26:e5:c5:50:4b:cd:85:b8:dd:88:cf:38:bd:6f:1f:5d:8e:
84:dc:01:22:b1:15:f2:f4:0a:dc:79:f5:f3:c9:4f:f0:0c:8a:
29:01:97:e7:3f:99:46:a8:fc:14:67:bc:2f:7e:6b:47:5d:3e:
9e:8c:9c:93:08:37:8f:aa:95:c0:e1:f0:f3:99:4a:9e:78:77:
b8:ce:4a:d2:d2:43:80:68:60:05:ed:16:a5:f4:14:6c:a1:86:
46:56:d2:5e:82:1a:5b:91:1e:26:f0:77:59:86:99:39:a5:2b:
17:33:17:1e:bb:46:1e:48:83:0e:a8:1d:64:5e:ce:8d:ef:9b:
e1:ff:96:76:2e:67:65:51:6f:27:3d:54:a1:f5:08:19:c6:76:
4a:5d:ed:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org