Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PimqEYjPjJ5zGIVEC2tlsx3cXYM.roa
File: PimqEYjPjJ5zGIVEC2tlsx3cXYM.roa (raw, json)
Hash identifier: kSIAFA+33D475hezKyfvABVyIYhnKxrQM/QKLgFgdbk=
Subject key identifier: 3E:29:AA:11:88:CF:8C:9E:73:18:85:44:0B:6B:65:B3:1D:DC:5D:83
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01869D379044F8491DAF90CE2B9386DFE8E5
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PimqEYjPjJ5zGIVEC2tlsx3cXYM.roa
Signing time: Wed 01 Mar 2023 12:48:29 +0000
ROA not before: Wed 01 Mar 2023 12:48:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.243.0/24 maxlen: 24
185.135.141.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:37:90:44:f8:49:1d:af:90:ce:2b:93:86:df:e8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 1 12:48:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e29aa1188cf8c9e731885440b6b65b31ddc5d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f6:1a:91:9a:e7:6a:57:2f:bf:36:7d:23:fb:
ee:bf:38:bd:59:d6:09:dc:5d:1c:d1:0b:e0:c0:6a:
ee:8f:af:60:65:5f:2b:80:7d:71:58:3c:e5:17:54:
22:20:ee:de:15:28:48:98:41:cc:b2:bb:66:ce:03:
b1:ab:9b:4a:bc:69:71:8d:1b:3a:d9:9d:50:18:c4:
cb:d0:2e:5c:6f:90:47:24:75:a0:a3:2d:15:6a:77:
10:6f:a7:6a:b1:dc:f0:9d:b0:ad:e0:f4:c3:77:8d:
5d:ab:3c:98:65:5f:81:55:ca:15:fb:35:e1:35:ca:
85:d5:c1:b5:34:b3:0f:dc:aa:33:03:e9:07:df:37:
d0:bd:c5:97:85:d2:df:ef:8c:4e:1e:a9:a2:9a:d0:
16:b2:bd:68:43:ba:56:48:69:d1:8b:ac:ad:da:d5:
d4:c7:f8:5d:a2:0e:5f:98:60:c8:4b:82:a7:8f:5b:
2d:ff:36:ae:b0:c2:e8:4b:c3:50:01:b4:eb:7e:95:
23:c2:4b:0f:a8:7d:cd:87:ad:37:9d:d4:af:c8:1e:
f7:ca:d8:4e:fa:4f:3f:d5:1f:1c:d7:08:91:2b:bb:
83:ce:42:22:d5:d2:7f:14:21:4b:e2:01:7f:3b:2a:
fa:47:ed:f4:52:f9:d1:1b:c8:85:95:18:1e:10:5b:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:29:AA:11:88:CF:8C:9E:73:18:85:44:0B:6B:65:B3:1D:DC:5D:83
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PimqEYjPjJ5zGIVEC2tlsx3cXYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.151.0/24
185.135.141.0/24
188.241.182.0/24
188.241.243.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2f:80:b8:fb:36:be:0d:d0:76:d1:b0:94:92:d4:aa:6e:1d:
5d:ca:a8:a5:2e:81:83:87:51:12:7f:55:b9:e4:55:7e:37:d7:
49:b7:5d:50:e2:ed:73:e7:ee:a8:29:ac:cb:0d:3e:27:85:60:
bf:2d:ec:03:c6:46:40:c7:50:9b:d8:36:c2:50:6d:db:e4:75:
f1:df:2a:16:3c:1a:4a:49:8d:e6:06:d7:02:ce:01:69:fd:1c:
f6:dd:0c:27:f9:6a:81:89:c9:2b:3f:dc:43:4e:e1:93:b0:9c:
e4:dc:cc:ac:81:01:37:67:f1:10:ae:57:c3:ec:25:11:fe:5c:
2e:cf:fc:e8:dc:61:0e:40:e7:0f:af:43:d8:a3:1e:b9:0d:9d:
c0:53:f1:22:26:1a:31:94:05:15:8d:50:8c:65:e9:c6:03:5a:
88:1e:8a:40:6d:a4:b5:5a:20:b1:c8:4c:26:93:4f:43:5f:7a:
aa:77:cb:4b:34:21:f3:f6:78:fc:a0:71:e2:07:c6:ef:20:8f:
3b:3e:64:9e:87:8b:1a:87:67:9d:5b:d7:00:33:fd:97:37:01:
1b:96:76:74:59:7a:38:e3:e7:40:29:4a:be:3b:12:8c:36:ec:
6d:f1:35:4f:e6:22:c5:4f:3b:d8:47:8e:66:20:5b:65:d8:f4:
82:ed:e3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org