Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/V6d-Ug9xdnheWsgdx2Cg5ZRrlnw.roa
File: V6d-Ug9xdnheWsgdx2Cg5ZRrlnw.roa (raw, json)
Hash identifier: pB/RGgspsnzMRa1LKyW1E2UdzM/Y0dmILtIPmJwaa9g=
Subject key identifier: 57:A7:7E:52:0F:71:76:78:5E:5A:C8:1D:C7:60:A0:E5:94:6B:96:7C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187FF71537FCDA15E2D3EDC16C21668AF91
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/V6d-Ug9xdnheWsgdx2Cg5ZRrlnw.roa
Signing time: Tue 09 May 2023 07:37:09 +0000
ROA not before: Tue 09 May 2023 07:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 188.241.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:71:53:7f:cd:a1:5e:2d:3e:dc:16:c2:16:68:af:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 9 07:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57a77e520f7176785e5ac81dc760a0e5946b967c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8f:9d:e7:1b:d3:7a:25:19:e0:c8:5e:06:d8:
db:d0:50:ad:3e:7c:28:90:1b:c3:5d:74:ef:60:6d:
50:28:16:d2:e2:fc:b0:bd:e3:3b:5d:cb:41:1f:e1:
c0:25:f0:3e:85:4a:91:b5:bb:d1:1b:ff:c7:58:57:
0c:63:5e:e9:ce:4e:b9:04:56:c2:cd:27:69:ec:5b:
27:06:3f:fa:0b:74:1c:40:eb:c4:4b:be:77:dd:2a:
6e:66:e7:dd:40:e8:da:10:ee:d2:71:fb:d5:7e:b3:
4d:ab:e7:3f:d6:a3:de:5f:6b:58:54:66:44:f2:6f:
60:3d:fc:54:5b:c6:c2:97:bf:aa:b5:4b:b6:14:86:
91:d3:90:d6:cc:de:2a:c7:f0:a7:78:94:3b:3c:59:
e4:e1:f0:b5:3d:fc:00:1d:6a:01:53:ab:ce:45:c2:
d7:b2:d0:5c:15:37:b4:57:2d:d7:f2:71:6b:e8:de:
71:85:da:c4:cb:0a:72:20:b1:08:4e:14:97:0a:95:
97:d5:6e:b2:ad:76:5a:e6:d9:55:c2:e3:c7:8c:7b:
1d:93:53:ae:74:38:5f:d8:d0:67:12:ed:8d:a7:0d:
32:e4:1b:61:6e:f7:7a:a1:8e:2b:93:85:4f:bd:0e:
8a:0f:4f:34:a8:7d:6d:b9:a0:11:01:0e:11:aa:2a:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A7:7E:52:0F:71:76:78:5E:5A:C8:1D:C7:60:A0:E5:94:6B:96:7C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/V6d-Ug9xdnheWsgdx2Cg5ZRrlnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bc:10:44:d2:64:e3:6b:e0:58:2d:e7:40:0a:24:b1:2d:c1:
89:f7:c7:56:1f:57:ba:fa:d1:e4:bb:07:77:ef:6a:9e:0c:2d:
82:92:fa:8d:d8:70:a5:25:69:40:be:e6:f2:fd:46:3e:e3:25:
49:b9:5c:d4:d2:2b:4e:55:33:6a:36:8f:74:7d:2e:a5:26:9e:
81:03:58:7f:5e:80:fc:b2:b9:23:6b:00:08:ed:46:e0:6d:19:
c2:fc:58:3c:7c:e1:7a:8a:7c:de:5d:fe:28:3d:b6:2b:d9:96:
32:98:ed:15:a3:9a:88:d4:d3:5f:4a:c1:04:70:72:d7:dc:c6:
5c:06:d0:03:33:e9:d8:f4:ac:0a:c4:43:62:83:a4:16:0c:ca:
71:54:fb:4d:78:4b:e1:9e:c9:b3:8b:36:10:9d:c5:7a:b3:96:
60:74:8a:73:81:ac:76:f5:4d:1e:fa:12:ad:b1:50:15:8f:84:
38:34:4b:9b:c8:44:5a:6a:7e:42:f0:4b:2d:2d:cc:b1:f3:f2:
42:60:9c:37:c7:08:5b:e1:2b:a0:3b:91:c6:78:5f:06:02:c0:
98:3e:f4:a2:33:f6:c5:44:22:d7:c4:47:5f:a4:6d:77:05:ab:
cd:d7:30:e4:21:9c:c7:33:63:88:ac:31:4d:67:00:1e:98:10:
43:a7:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org