Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/S5OPfsNTwKe_3W1QeLzxAgPm8Og.roa
File: S5OPfsNTwKe_3W1QeLzxAgPm8Og.roa (raw, json)
Hash identifier: Da81EEFFNXu3zxz+VsfTESGOvF6QOQqJFXkLYLHySUE=
Subject key identifier: 4B:93:8F:7E:C3:53:C0:A7:BF:DD:6D:50:78:BC:F1:02:03:E6:F0:E8
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018AD29E0C105ADE887841EC720B49CCD1A7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/S5OPfsNTwKe_3W1QeLzxAgPm8Og.roa
Signing time: Tue 26 Sep 2023 17:51:27 +0000
ROA not before: Tue 26 Sep 2023 17:51:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 93.115.255.0/24 maxlen: 24
194.32.123.0/24 maxlen: 24
45.135.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:9e:0c:10:5a:de:88:78:41:ec:72:0b:49:cc:d1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 26 17:51:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b938f7ec353c0a7bfdd6d5078bcf10203e6f0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:ff:44:50:55:c3:45:78:2c:c7:96:56:cb:
e2:32:2f:aa:c7:d3:cb:4d:1f:4a:d8:c4:09:d1:7d:
5d:24:da:6d:7e:fb:86:dd:0f:c6:02:5c:d8:b4:36:
2e:b8:9e:ff:a3:c5:6d:88:21:c3:e4:0f:b8:34:63:
41:26:af:bf:61:c6:7b:19:3e:a1:c7:5c:33:0c:59:
48:63:21:ff:0c:51:7c:3d:c3:5c:f6:49:71:8c:04:
9a:1e:b4:a6:5e:2a:f5:0b:00:f2:0f:f0:60:49:7f:
cf:fb:7d:50:2f:b1:9c:f1:db:df:f8:fe:87:8a:3d:
4f:e6:f1:30:74:e7:15:fc:cb:68:a0:69:69:c7:08:
47:95:85:c7:30:5c:a2:ea:14:7c:cd:1d:39:73:7a:
46:e5:65:1d:ba:8c:15:52:5e:26:d4:e3:06:1e:af:
ec:ba:0b:49:11:e8:33:db:a5:64:1b:ca:8b:8c:35:
01:e4:55:f1:50:79:ba:1f:6e:d5:f7:04:de:cd:8e:
57:17:71:93:51:34:c6:e1:7b:5c:68:ad:7a:e7:bd:
8e:35:ca:39:3d:f0:64:08:2c:2c:58:4c:64:19:7d:
3f:bf:bf:d9:34:3f:7c:51:33:e5:ce:8a:7d:36:31:
95:d2:dc:65:2d:be:cd:73:4e:d0:a4:08:72:2e:7b:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:93:8F:7E:C3:53:C0:A7:BF:DD:6D:50:78:BC:F1:02:03:E6:F0:E8
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/S5OPfsNTwKe_3W1QeLzxAgPm8Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.185.0/24
93.115.255.0/24
194.32.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f0:a3:b1:d0:a3:cc:15:0b:6a:b9:97:4d:53:f8:57:bc:1b:
65:87:03:db:3b:50:c3:cc:d2:87:0c:9a:9c:f4:51:6a:83:45:
a5:c3:23:89:b6:76:e6:eb:00:15:50:fe:14:4e:8d:73:fb:b1:
53:e4:09:6d:ba:01:b9:9a:4a:07:59:61:d7:4d:e5:73:80:54:
2f:cf:6d:6a:b5:db:17:37:a9:4a:91:b5:9a:f8:60:9f:d4:11:
ad:1c:3b:0e:d5:36:c3:64:c8:e2:9c:9d:56:f0:2f:da:67:34:
bd:ae:49:e0:c2:a1:fd:e9:b3:e4:95:4d:67:28:f0:7f:f7:52:
c7:23:fc:a7:0a:4c:b7:3c:ba:8a:7a:c1:a6:40:8d:20:e8:77:
09:e0:08:4d:f7:b6:39:09:35:ff:67:62:75:41:45:5f:7b:c1:
6f:98:5a:51:c8:6d:16:bd:94:a8:4c:04:7d:41:9d:cb:d3:e4:
12:cb:b7:76:92:ad:45:f5:5f:3c:97:c4:77:1a:a1:52:8b:9c:
a4:83:d9:7d:05:7a:81:69:7e:ef:9f:11:90:6c:5c:a3:00:b1:
4a:d2:25:22:e0:27:b2:25:08:e7:e1:6e:85:f3:7f:d3:fe:f9:
64:19:ea:b1:ab:c3:cc:f7:dd:4b:b3:cc:72:50:cd:e6:5e:4f:
e5:2f:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 10:00:20 2023 by rpki-client on console-fra.rpki-client.org