Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Rm_oWo8T81G3IHgi4vHYoqlKaHM.roa
File: Rm_oWo8T81G3IHgi4vHYoqlKaHM.roa (raw, json)
Hash identifier: kNTs3DcjHq77QRiWUc1uVVDWwmdT1Zb9/7XWSKpCpKA=
Subject key identifier: 46:6F:E8:5A:8F:13:F3:51:B7:20:78:22:E2:F1:D8:A2:A9:4A:68:73
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018571030EC33A638ADD41AE335E01C0EFF7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Rm_oWo8T81G3IHgi4vHYoqlKaHM.roa
Signing time: Mon 02 Jan 2023 05:45:03 +0000
ROA not before: Mon 02 Jan 2023 05:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58073
IP address blocks: 188.215.229.0/24 maxlen: 24
62.197.129.0/24 maxlen: 24
185.214.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:0e:c3:3a:63:8a:dd:41:ae:33:5e:01:c0:ef:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=466fe85a8f13f351b7207822e2f1d8a2a94a6873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:d8:0f:f9:b3:48:21:43:cb:29:23:50:e5:
d8:66:22:9f:3a:d6:a9:1d:3e:8a:ee:84:2e:22:1d:
b7:41:18:ac:f7:87:fa:4d:aa:d5:a8:5b:ff:78:03:
b4:93:7c:35:f0:1b:03:e9:da:17:49:3f:9c:46:07:
cf:50:2d:ab:19:2e:29:5a:b4:97:c3:c6:f8:a2:78:
d7:c7:8d:ee:3a:a2:99:56:c4:0e:6c:c9:66:56:30:
f4:0e:d6:47:2d:d9:ee:bb:68:82:3c:8c:ad:cb:bf:
b8:62:97:bb:1d:12:70:36:c7:10:35:44:23:1d:c0:
7f:0a:27:37:42:5f:ae:22:6e:11:ee:84:32:0a:05:
e6:98:81:87:e4:5c:e5:69:99:07:fc:02:7d:b9:8f:
b9:e1:7e:d2:ac:d3:fe:22:c7:41:81:5e:59:8b:1d:
01:1a:08:4c:a1:5e:98:ec:a3:e4:b8:c1:bb:f8:98:
1a:2b:b9:16:52:18:d9:7d:4b:6f:3f:8d:cc:b2:6f:
8b:5a:e5:30:cd:71:de:3d:3d:8d:7b:5b:27:0d:50:
94:d4:07:94:49:62:32:8d:e0:7d:3e:53:7a:f0:3f:
cd:fb:28:04:3e:e0:cd:4e:7a:6a:f8:6c:ff:27:b3:
1c:e0:ea:8c:cf:09:cb:94:47:08:b5:29:a9:cb:f8:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6F:E8:5A:8F:13:F3:51:B7:20:78:22:E2:F1:D8:A2:A9:4A:68:73
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Rm_oWo8T81G3IHgi4vHYoqlKaHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.129.0/24
185.214.10.0/24
188.215.229.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a2:43:f6:85:23:00:4c:ac:ee:26:ef:d6:c4:f3:12:e3:1f:
3f:4b:21:93:13:95:3b:1e:16:0c:f1:99:bb:69:27:b1:85:bb:
52:75:92:09:7d:cb:12:96:52:e1:0a:b7:28:22:36:81:12:c1:
d5:cc:4b:ca:a9:6a:01:4d:fc:31:95:f8:a5:08:c3:36:5a:32:
0b:08:46:50:77:6f:42:e7:9e:90:32:1e:1a:31:31:82:2e:1c:
79:9e:7d:4c:e0:6a:dd:ad:9a:70:82:27:cd:b0:55:22:99:f9:
10:39:1d:ba:2b:cb:10:77:76:23:1e:34:c0:de:bc:db:db:9b:
46:b9:c3:df:fc:71:f4:92:97:d4:dc:fa:f0:39:52:df:4f:34:
a2:64:b3:a6:f1:50:39:a3:50:76:ba:5c:f7:c7:19:57:45:e7:
fc:7a:ab:f3:31:47:b6:be:ec:1c:9c:87:f1:54:41:99:ac:0d:
8b:fb:70:f5:42:ca:61:5b:9d:a4:87:54:fc:d3:c1:6b:0d:7f:
02:3a:11:6e:98:70:1e:1b:eb:a9:a6:0d:f5:55:02:cc:e4:4b:
bb:72:56:cf:28:ef:08:49:3e:4f:ed:56:74:e8:76:06:8c:ae:
cc:c2:26:37:94:1a:1f:71:0b:59:da:a7:5a:bd:9c:88:34:95:
a1:f1:35:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org