Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/S9ixHnPUIrOurs-tYYKrDkUUxC4.roa
File: S9ixHnPUIrOurs-tYYKrDkUUxC4.roa (raw, json)
Hash identifier: WYw7AIsmrVgekK4eoGBbKClJa3lT7iKHdeiWpZtwzcQ=
Subject key identifier: 4B:D8:B1:1E:73:D4:22:B3:AE:AE:CF:AD:61:82:AB:0E:45:14:C4:2E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018BB9CDDA6FEBBD0094B165F9137032BE1F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/S9ixHnPUIrOurs-tYYKrDkUUxC4.roa
Signing time: Fri 10 Nov 2023 15:15:57 +0000
ROA not before: Fri 10 Nov 2023 15:15:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199760
IP address blocks: 188.241.242.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
93.115.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:cd:da:6f:eb:bd:00:94:b1:65:f9:13:70:32:be:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 10 15:15:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bd8b11e73d422b3aeaecfad6182ab0e4514c42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:37:7e:1c:53:15:87:a3:81:90:56:a3:51:
85:4d:ac:6f:ac:99:ec:78:cf:37:0a:ce:89:5a:9c:
1c:bb:cf:db:b6:a8:20:01:0b:49:09:68:36:26:1e:
01:53:fb:91:61:24:96:c9:1d:20:89:a2:db:30:b8:
1e:ad:bc:b7:51:fa:44:d4:81:af:cb:52:12:4e:43:
ec:e1:26:35:14:ae:a6:58:3b:c5:dc:20:eb:38:ec:
d0:63:3e:0a:df:39:97:9a:04:d8:10:1c:ea:43:16:
26:7d:ac:7f:8d:d4:2b:37:90:ac:ea:6d:77:e1:41:
ed:1f:32:5f:b3:5e:f9:80:49:4b:ba:b1:e8:79:e4:
e8:9f:10:f5:8e:91:61:c8:52:bd:70:8c:35:eb:b7:
b2:99:b8:44:34:cd:ba:aa:94:ef:1d:1e:9f:75:e9:
7f:0e:1c:21:1b:17:ed:ec:40:81:6b:13:a6:a6:91:
e4:16:8e:30:08:2f:05:0e:32:ad:41:77:07:19:df:
21:17:01:34:b4:39:b4:5f:5d:6f:a8:11:13:9d:45:
b8:4a:b1:be:11:56:42:ff:16:fa:94:30:45:64:47:
26:b1:ac:8e:c8:d3:ef:be:90:e8:e4:6e:fe:2c:da:
bc:be:07:9f:bc:d1:14:bb:88:b3:0d:5d:52:30:33:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D8:B1:1E:73:D4:22:B3:AE:AE:CF:AD:61:82:AB:0E:45:14:C4:2E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/S9ixHnPUIrOurs-tYYKrDkUUxC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.109.0/24
188.241.182.0/24
188.241.242.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3f:94:22:01:e1:03:37:b2:d8:5d:e7:f1:87:99:8c:ff:2a:
59:f3:62:3e:97:56:e0:20:19:36:ad:67:ed:27:a3:84:72:a9:
10:94:9d:fc:c8:ba:29:bb:b8:5d:27:28:dd:59:bb:18:95:32:
3b:00:cb:94:16:bf:39:e2:69:5f:8e:52:31:02:fb:da:5a:7a:
c1:d3:8b:64:29:4a:be:d4:01:f0:ca:77:f0:18:50:58:7a:74:
ff:a6:3d:ca:f2:99:f8:9f:6d:98:ad:10:dd:d1:cd:09:c8:52:
f0:89:cd:5a:05:e8:46:62:1d:62:c8:b0:74:84:97:c9:c1:fd:
96:b7:2e:4c:8a:bc:6a:5d:3d:e4:0a:c0:db:c7:cf:51:3c:bb:
ee:2a:1c:db:88:a1:02:f4:36:1b:68:8c:00:5a:7f:8e:43:08:
9b:2f:67:80:fe:13:31:20:9f:4c:bd:89:39:e6:7a:b3:48:2c:
65:99:af:14:5a:d6:f7:ff:f3:b9:13:6b:19:d1:9b:46:f7:df:
5f:13:c9:6b:1c:c8:cc:8a:35:90:53:f3:ea:4d:b1:03:e6:85:
c1:51:65:3a:db:2d:b4:e9:59:08:b7:3a:94:f3:55:89:be:ef:
d4:de:ca:cf:f1:06:4c:67:bc:30:cc:98:28:25:e6:63:2d:3e:
18:e2:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 06:45:00 2023 by rpki-client on console-ams.rpki-client.org