Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Ps0PddD43-PhT9wRhRWptXhGpYU.roa
File: Ps0PddD43-PhT9wRhRWptXhGpYU.roa (raw, json)
Hash identifier: Zr0JNQUC4IeevVWT6mwCR3N2X/qhToN9TAZrx+WWIUU=
Subject key identifier: 3E:CD:0F:75:D0:F8:DF:E3:E1:4F:DC:11:85:15:A9:B5:78:46:A5:85
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187BBF6BB98B41770A305111F84777BAFDA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Ps0PddD43-PhT9wRhRWptXhGpYU.roa
Signing time: Wed 26 Apr 2023 05:08:41 +0000
ROA not before: Wed 26 Apr 2023 05:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 93.114.193.0/24 maxlen: 24
185.135.142.0/24 maxlen: 24
188.240.226.0/24 maxlen: 24
188.240.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bb:f6:bb:98:b4:17:70:a3:05:11:1f:84:77:7b:af:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 26 05:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ecd0f75d0f8dfe3e14fdc118515a9b57846a585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:55:31:8b:5c:70:8c:19:4b:d3:35:8c:56:
0d:6c:dc:31:61:8a:75:93:61:2b:07:f6:35:85:f3:
75:f1:41:eb:51:92:9e:9f:92:4a:5f:2a:21:1d:86:
bd:59:f4:5f:88:a2:84:fd:37:3a:cb:f6:92:a8:f8:
7f:25:66:40:57:57:3e:44:d6:38:7c:df:6a:69:a8:
15:9a:f2:c6:a0:98:aa:0a:84:36:da:a6:11:26:14:
34:93:e4:bd:f2:f6:80:2b:54:f4:d0:ef:19:c5:00:
ff:79:93:2d:99:8c:2e:11:bc:c2:a1:5a:c5:26:28:
0d:b2:a6:d2:1d:4a:55:c7:a7:78:87:1d:25:a4:d0:
54:71:1d:9e:d4:13:ef:86:5a:59:cd:50:0c:c3:aa:
ec:f2:3b:85:7c:e9:38:e4:8e:b1:17:d4:e4:93:99:
fb:1d:28:27:c3:80:00:88:60:4c:f0:ff:e3:b5:3f:
bf:7c:b7:34:d0:f6:87:c9:8a:bf:4b:e7:f6:f7:5f:
1d:c5:ad:c7:48:4b:28:bf:73:05:5f:1b:05:ef:16:
8c:71:21:ad:7f:ce:a7:80:4c:33:04:40:84:93:42:
15:55:c9:b8:58:c2:b0:53:12:5b:3a:9c:b2:37:f5:
df:40:9f:bf:55:83:21:a5:cb:05:28:6a:ac:59:42:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:0F:75:D0:F8:DF:E3:E1:4F:DC:11:85:15:A9:B5:78:46:A5:85
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Ps0PddD43-PhT9wRhRWptXhGpYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.193.0/24
185.135.142.0/24
188.240.226.0/23
Signature Algorithm: sha256WithRSAEncryption
85:71:53:de:a6:e0:4b:74:0d:83:5b:c2:e0:af:20:38:8b:d6:
66:ad:0d:68:16:89:be:d0:48:4b:3a:f5:ac:77:d6:d4:2b:24:
8a:1d:a1:7e:98:cd:c1:e5:8d:56:62:f5:15:0c:d3:0e:69:10:
b7:cb:a1:9a:e5:ef:65:a9:33:98:04:13:a6:00:95:6f:04:ed:
59:cc:3a:10:6e:05:3b:14:dd:c6:9b:cf:4f:96:02:62:37:3d:
78:05:bc:82:e9:48:13:6e:f8:6e:6b:22:04:3a:2d:40:6d:9c:
92:7b:a5:b5:c0:ce:6f:d5:88:08:87:89:4e:61:4b:02:a5:53:
7b:43:e8:17:ab:4d:0a:0c:66:0c:b3:f6:38:bd:a2:35:fb:bf:
cc:2b:1a:b1:c7:57:40:3f:86:24:f0:a6:33:98:e1:a7:bd:e1:
96:fc:4d:ea:8a:4f:50:e8:3b:dc:44:79:9c:97:63:79:e6:39:
6c:4c:99:d6:12:c3:2c:de:cb:8a:28:d7:de:a8:db:4c:ae:d6:
34:e4:fb:3c:d1:d1:a9:68:d3:1e:94:d1:6e:f9:f4:f0:d0:61:
26:ee:9b:e6:6b:e9:d9:74:aa:e9:d5:ae:8d:ad:e0:35:29:2d:
49:8a:05:6f:45:6d:fb:fd:2a:bd:3e:8e:fb:8d:17:d5:29:43:
89:ee:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org