Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sd9hAiS_cGWjZOXA89QS7JK2nxI.roa
File: Sd9hAiS_cGWjZOXA89QS7JK2nxI.roa (raw, json)
Hash identifier: HtIsmp6rBYiC2scRBm0wAyj7+9A4/rwIVv5RSs51bKo=
Subject key identifier: 49:DF:61:02:24:BF:70:65:A3:64:E5:C0:F3:D4:12:EC:92:B6:9F:12
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0189EE28CE688A0B32624B06DF2191933870
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sd9hAiS_cGWjZOXA89QS7JK2nxI.roa
Signing time: Sun 13 Aug 2023 09:09:58 +0000
ROA not before: Sun 13 Aug 2023 09:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 188.212.158.0/24 maxlen: 24
188.212.155.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ee:28:ce:68:8a:0b:32:62:4b:06:df:21:91:93:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 13 09:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49df610224bf7065a364e5c0f3d412ec92b69f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:c0:d4:2f:7f:96:cb:9e:ca:7d:78:50:68:
19:4f:2e:69:85:7d:d1:04:85:9e:89:8c:9b:88:30:
91:3a:e0:0b:41:6f:91:1c:7f:62:cc:3d:b5:99:a5:
a1:e0:d4:c9:07:0c:a7:cc:47:30:fb:b8:56:14:d5:
d6:2f:5c:89:2c:a3:03:78:47:ee:f5:96:6f:a8:b8:
93:ab:1f:3e:70:56:e0:63:d3:f8:33:1d:80:22:06:
95:68:97:24:01:52:37:f7:e8:8b:4b:d3:3b:2f:89:
2f:48:c0:cf:a1:40:50:44:a4:3b:44:31:67:7a:73:
48:66:ac:63:52:a4:cb:66:2f:be:1e:85:a5:b9:3b:
9b:3c:13:12:5a:ff:d0:ad:61:c0:f8:cd:ac:31:22:
18:23:86:8d:c5:3b:2a:c2:b8:1d:58:9c:f9:62:29:
ef:08:32:54:a7:0f:4b:c1:a6:6f:2c:3e:b5:9d:44:
43:77:5a:71:c4:d8:62:5a:29:04:e0:3e:b4:11:7d:
98:64:36:09:57:2c:bf:25:b0:f7:4f:d2:b3:18:1e:
66:ff:ff:4d:d9:02:f9:83:67:3e:af:9f:63:a6:1b:
c2:0c:8e:44:cc:f6:c7:aa:c7:9b:b8:a0:6c:79:6c:
b6:b4:2c:f6:c4:55:ec:2c:54:e2:e0:54:c1:85:c2:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:61:02:24:BF:70:65:A3:64:E5:C0:F3:D4:12:EC:92:B6:9F:12
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sd9hAiS_cGWjZOXA89QS7JK2nxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.62.0/24
188.212.155.0/24
188.212.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d1:20:c2:83:02:0e:38:1b:e4:e6:cb:51:45:24:2b:23:4f:
3f:e8:4e:96:6e:20:28:01:15:4f:4e:62:f1:a3:14:03:39:b8:
c9:cc:94:ac:55:fb:4d:a4:8e:4a:ce:3d:0b:aa:70:e7:65:8a:
86:a8:62:bb:c4:d2:6f:60:ea:82:fd:7d:c1:70:f2:ab:7b:7b:
d3:c6:17:27:dd:41:55:fa:ca:0c:c4:52:d2:00:99:6a:8d:1f:
d6:9c:d2:26:60:e1:94:6e:3e:9c:05:9c:d1:96:36:c5:1c:b9:
79:39:09:d1:57:53:0b:c4:2f:ff:7d:9e:72:33:2f:db:41:bd:
cf:33:ea:0d:a1:55:28:66:21:96:62:ae:15:d4:95:f2:51:3c:
6f:de:2e:cd:7f:d3:f2:58:3c:8d:a5:13:bf:cc:3d:02:96:bf:
39:bc:b1:8e:f6:42:8c:21:cc:fe:98:8d:94:2d:a7:7f:d8:c6:
3c:b4:58:ac:64:62:46:7e:fd:cb:ef:36:de:19:e6:c2:04:60:
4e:23:88:50:a0:89:1a:67:df:2b:1b:d5:d3:67:53:5d:07:a0:
60:d2:94:e6:45:1d:07:2b:a4:67:a5:63:45:dc:16:37:b1:33:
91:2d:55:05:34:8f:b2:3a:b0:ba:45:65:f8:7c:e3:5d:64:6b:
f5:51:d6:17
-----BEGIN CERTIFICATE-----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 at Sat Aug 26 11:58:59 2023 by rpki-client on console-ams.rpki-client.org