Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RPsRD7PNVfuXvhIWefyl3ASKGTo.roa
File: RPsRD7PNVfuXvhIWefyl3ASKGTo.roa (raw, json)
Hash identifier: o/2GzjXrFpCA0NMn4cC6a9/AxmZlTcr6UmTETq2PqFQ=
Subject key identifier: 44:FB:11:0F:B3:CD:55:FB:97:BE:12:16:79:FC:A5:DC:04:8A:19:3A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018950826AE13F37614925E5EEAA5C32FD6D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RPsRD7PNVfuXvhIWefyl3ASKGTo.roa
Signing time: Thu 13 Jul 2023 18:27:51 +0000
ROA not before: Thu 13 Jul 2023 18:27:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 188.214.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:50:82:6a:e1:3f:37:61:49:25:e5:ee:aa:5c:32:fd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 13 18:27:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44fb110fb3cd55fb97be121679fca5dc048a193a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e8:39:1f:8c:79:cd:e1:89:dc:8b:ac:9f:2b:
63:96:d9:e2:d4:0b:0e:8d:77:41:c3:66:13:e6:be:
c0:f8:a1:ba:d3:a3:11:47:c3:08:94:56:c4:31:0a:
c8:9d:da:b6:34:31:65:cf:18:82:63:ae:75:29:7e:
5a:e0:4b:4d:2a:f3:a2:d0:08:3a:da:e8:2a:7b:9e:
50:ee:05:df:48:ae:2a:3a:3f:0b:40:4b:f0:1b:3d:
74:4c:cb:30:58:99:f9:dd:73:f5:1e:89:01:3e:6e:
b4:e0:f8:c4:d9:95:d0:c6:2a:ef:b1:f9:07:b5:51:
dc:f5:12:0e:01:e6:b1:87:2a:75:63:a6:ba:f8:73:
c5:bb:fd:e1:e8:a8:fd:b4:d7:15:ac:14:92:da:76:
f6:94:2e:b7:b2:7f:d6:7d:44:a3:ce:f7:1d:da:86:
9c:26:af:7f:2f:cc:9d:83:e0:90:2a:ee:c2:dd:3e:
b1:c4:1f:f7:3d:9a:74:e3:dd:bd:9a:a5:c2:15:eb:
f1:d4:8c:f0:79:52:fb:0e:d9:ce:17:8a:e2:27:25:
bf:77:25:26:14:92:63:15:f2:3e:3b:09:e8:4d:4d:
3e:35:31:96:c5:8e:97:fc:f1:90:0a:e5:3f:1c:0b:
db:c5:fc:f4:fa:af:11:df:fb:ea:4f:a6:0c:c5:a8:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FB:11:0F:B3:CD:55:FB:97:BE:12:16:79:FC:A5:DC:04:8A:19:3A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RPsRD7PNVfuXvhIWefyl3ASKGTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ec:79:20:08:3c:00:ec:9a:b5:1b:c5:d5:3f:6b:bf:8b:3a:
45:a5:b0:92:37:ca:e7:1e:64:e5:99:1d:b1:67:6c:39:bc:05:
03:f0:94:94:e8:87:cf:f9:70:07:f1:02:6a:df:10:31:50:68:
c6:2b:3f:a7:f6:92:1f:78:5c:f3:18:10:16:c5:dd:f6:ae:57:
35:b9:6b:93:e0:7a:4a:7f:fa:87:f6:47:3c:57:17:8a:3e:10:
d6:85:3b:74:d2:d7:06:60:3a:64:c4:a9:e5:1d:a1:28:6e:02:
e9:8c:17:86:bf:e0:bb:04:bb:d2:27:5e:fc:bb:d6:67:14:85:
97:4c:b2:c6:5d:ef:39:2d:d2:84:92:14:a7:84:c3:5a:e6:55:
43:53:f8:6d:6f:70:f9:d3:56:29:d1:8d:8f:a4:b2:5c:c1:ad:
c2:1e:e7:df:3f:c2:6c:1f:9e:8e:1d:3e:52:ec:96:34:31:3a:
1c:49:5e:5a:34:87:ea:89:7c:68:9f:eb:de:17:3a:04:f0:39:
7a:e1:f8:fd:65:69:87:8d:34:61:3b:af:f4:a0:df:63:75:b0:
36:3f:d3:0d:4b:91:0e:96:32:73:5d:7f:0a:9a:d2:40:f2:cd:
2d:bf:70:2b:0e:9b:93:fc:66:49:8a:78:fb:7c:b5:c6:5a:7a:
db:71:ed:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlQgmrhPzdhSSXl7qpcMv1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwNzEzMTgyNzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGZiMTEwZmIzY2Q1NWZiOTdiZTEyMTY3OWZjYTVkYzA0OGExOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhug5H4x5zeGJ3Iusnytjltni1AsO
jXdBw2YT5r7A+KG606MRR8MIlFbEMQrIndq2NDFlzxiCY651KX5a4EtNKvOi0Ag6
2ugqe55Q7gXfSK4qOj8LQEvwGz10TMswWJn53XP1HokBPm604PjE2ZXQxirvsfkH
tVHc9RIOAeaxhyp1Y6a6+HPFu/3h6Kj9tNcVrBSS2nb2lC63sn/WfUSjzvcd2oac
Jq9/L8ydg+CQKu7C3T6xxB/3PZp04929mqXCFevx1IzweVL7DtnOF4riJyW/dyUm
FJJjFfI+OwnoTU0+NTGWxY6X/PGQCuU/HAvbxfz0+q8R3/vqT6YMxagAOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFET7EQ+zzVX7l74SFnn8pdwEihk6MB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvUlBzUkQ3UE5WZnVYdmhJV2VmeWwzQVNLR1RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNbQMA0G
CSqGSIb3DQEBCwUAA4IBAQBv7HkgCDwA7Jq1G8XVP2u/izpFpbCSN8rnHmTlmR2x
Z2w5vAUD8JSU6IfP+XAH8QJq3xAxUGjGKz+n9pIfeFzzGBAWxd32rlc1uWuT4HpK
f/qH9kc8VxeKPhDWhTt00tcGYDpkxKnlHaEobgLpjBeGv+C7BLvSJ178u9ZnFIWX
TLLGXe85LdKEkhSnhMNa5lVDU/htb3D501Yp0Y2PpLJcwa3CHuffP8JsH56OHT5S
7JY0MTocSV5aNIfqiXxon+veFzoE8Dl64fj9ZWmHjTRhO6/0oN9jdbA2P9MNS5EO
ljJzXX8KmtJA8s0tv3ArDpuT/GZJinj7fLXGWnrbce1W
-----END CERTIFICATE-----
Generated at Fri Sep 22 18:47:49 2023 by rpki-client on console-fra.rpki-client.org