Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RmqxK75GiPuciyz6tzEEy4aoHhQ.roa
File: RmqxK75GiPuciyz6tzEEy4aoHhQ.roa (raw, json)
Hash identifier: lXayp7QwewOzXrpzappjt43aCRbc45A1+DcuyIqc+8w=
Subject key identifier: 46:6A:B1:2B:BE:46:88:FB:9C:8B:2C:FA:B7:31:04:CB:86:A8:1E:14
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187FBDBF94FD043A0934EAE7DF492FE369F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RmqxK75GiPuciyz6tzEEy4aoHhQ.roa
Signing time: Mon 08 May 2023 14:55:10 +0000
ROA not before: Mon 08 May 2023 14:55:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 188.214.27.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Jun 2023 07:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:db:f9:4f:d0:43:a0:93:4e:ae:7d:f4:92:fe:36:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 8 14:55:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=466ab12bbe4688fb9c8b2cfab73104cb86a81e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d8:1d:f0:6f:43:38:f7:b9:35:c6:1f:70:46:
61:e2:5f:09:55:fd:9c:3f:e8:f8:f7:17:dd:95:60:
49:ce:54:09:8c:85:9a:b9:34:75:35:37:02:7c:5a:
7c:db:fe:5e:77:13:98:0c:22:39:cf:b3:41:4a:48:
8e:a7:66:41:6c:58:01:78:f0:98:24:c9:ba:05:2b:
83:4f:ce:99:1d:8a:42:cf:7b:97:ba:3f:29:54:9a:
b7:9b:ca:82:77:eb:ef:e6:15:6c:c7:95:d8:63:e3:
be:e5:ed:fb:7f:f1:ad:5a:9a:84:ab:d8:83:ab:de:
1f:ab:94:af:7b:e1:ee:f9:f7:b2:8d:b8:fa:1c:f1:
ba:be:e0:60:3f:e0:96:e8:0c:a0:b0:f4:1e:ff:67:
63:56:bb:68:c2:4f:fe:5c:96:ee:a6:2e:61:b9:67:
aa:72:56:e1:5f:fe:51:96:a6:23:a9:d0:06:bb:d0:
69:2c:ad:71:37:ae:ec:59:c6:00:e4:6e:ed:cd:c5:
d0:bc:ea:39:0b:f7:4b:71:f4:57:a9:1b:f9:03:3d:
fa:b8:8f:0f:ec:f6:87:03:8c:38:ad:98:78:9e:5a:
34:df:0e:04:fc:8c:09:c2:3d:ea:63:63:bd:db:f6:
52:12:2b:e4:98:83:6a:7e:1e:e2:46:8c:27:d2:d0:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6A:B1:2B:BE:46:88:FB:9C:8B:2C:FA:B7:31:04:CB:86:A8:1E:14
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RmqxK75GiPuciyz6tzEEy4aoHhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.85.0/24
188.214.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:32:a3:8e:56:48:40:bb:a5:b2:f8:80:83:f6:1d:81:97:f5:
32:06:32:59:49:c5:c1:16:01:41:9b:8f:5b:43:10:ef:28:c7:
2b:58:b2:d9:52:70:5d:55:95:91:e4:8a:36:fa:58:9b:51:d8:
e1:36:9e:f4:a0:ea:73:87:a0:3b:85:c1:71:c0:b0:eb:64:40:
61:ae:f1:17:d2:a9:bc:eb:74:4e:0b:38:a5:1d:ec:b2:f9:36:
75:9b:19:0a:3a:84:01:b4:71:26:06:80:07:4b:bd:7a:02:7a:
4b:99:72:c5:d2:74:53:50:fa:92:69:9f:90:68:f7:e9:bb:8c:
cd:9c:bf:3d:24:1d:2f:38:f0:d7:45:f4:36:b0:c2:63:bd:30:
9e:42:1f:fc:db:96:04:6f:8b:6f:bd:39:52:1d:ea:37:fb:e7:
97:8e:c1:c2:0f:81:88:e6:94:30:81:e7:ec:ec:55:a5:64:87:
13:21:e0:ec:93:d8:32:cf:20:c9:6b:34:f3:b0:93:67:4f:5a:
0d:05:6f:50:e2:fc:52:d6:1f:a4:6f:68:ad:61:e1:de:e6:0c:
ee:c9:df:66:b9:70:26:ef:29:9d:cc:72:78:b9:64:94:f0:cf:
2b:31:ac:d3:76:74:2a:c2:aa:77:90:bb:ac:83:ef:0f:ef:15:
ff:c4:6b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:11 2024 by rpki-client on console-ams.rpki-client.org