Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Va8u9J3V42Et1MVw8ENcRNjs4OU.roa
File: Va8u9J3V42Et1MVw8ENcRNjs4OU.roa (raw, json)
Hash identifier: wovTyR6iD7ODic/T6XI3BuNu8AS6dHjVkUoLyIXruh4=
Subject key identifier: 55:AF:2E:F4:9D:D5:E3:61:2D:D4:C5:70:F0:43:5C:44:D8:EC:E0:E5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185F853A0422E9F3917643124D943E51F6F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Va8u9J3V42Et1MVw8ENcRNjs4OU.roa
Signing time: Sat 28 Jan 2023 12:21:48 +0000
ROA not before: Sat 28 Jan 2023 12:21:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 2.56.56.0/22 maxlen: 24
37.46.150.0/24 maxlen: 24
185.239.243.0/24 maxlen: 24
185.239.242.0/24 maxlen: 24
185.135.141.0/24 maxlen: 24
2.58.148.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f8:53:a0:42:2e:9f:39:17:64:31:24:d9:43:e5:1f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 28 12:21:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55af2ef49dd5e3612dd4c570f0435c44d8ece0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:91:5e:eb:1c:9f:47:1b:82:16:d4:b3:74:0d:
98:60:10:e4:c3:a9:8d:5d:bf:56:8f:a5:8f:d4:2e:
5a:48:78:55:17:80:fa:a7:82:9e:46:49:db:f8:a0:
65:b1:6f:04:5d:47:95:c2:2c:d8:b7:6a:44:2e:86:
f5:64:b5:1e:bb:01:18:b8:cb:98:5f:49:81:9b:39:
52:2d:82:d9:46:8e:c8:89:e0:77:b6:a6:de:d2:69:
0f:7a:62:6e:ef:36:27:b8:d3:c7:cb:89:30:26:a1:
ab:15:f1:9a:57:f8:d0:9e:fe:3b:91:b7:a5:96:fc:
f4:06:c4:9f:6a:0e:9a:c7:2e:ba:ce:71:f7:b1:da:
00:09:3a:05:c0:07:12:2b:da:35:0e:15:3c:62:dc:
a3:85:df:82:bf:58:e4:00:c1:65:e0:51:7f:34:61:
e7:3a:e1:e4:6d:a8:24:ab:f8:28:b3:d5:91:5e:29:
d0:3f:82:e7:fc:36:87:4b:c0:af:fc:2c:f9:65:62:
7c:98:1c:3b:7a:b3:6d:21:83:cf:2f:7d:0d:22:50:
96:b5:62:5c:bf:d0:02:15:f2:da:23:70:1e:bc:46:
d6:78:92:6f:a8:64:91:53:e4:87:bf:3b:b6:4e:4e:
07:80:70:44:60:dd:49:27:99:d4:15:a2:7a:f9:aa:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:2E:F4:9D:D5:E3:61:2D:D4:C5:70:F0:43:5C:44:D8:EC:E0:E5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Va8u9J3V42Et1MVw8ENcRNjs4OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.56.0/22
2.58.148.0/22
37.46.150.0/24
185.135.141.0/24
185.239.242.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:c4:73:56:4e:92:08:ac:18:99:a5:0c:ee:0f:dc:26:90:b6:
48:fa:0f:14:48:b1:b0:40:0f:10:45:b1:47:d9:2d:3a:56:4c:
41:e9:c6:24:94:2b:fb:b3:d9:d6:bc:be:52:8e:e0:05:76:3d:
97:a3:c5:04:5f:69:c2:34:fd:6a:60:20:76:0d:c2:66:7e:50:
fd:27:b0:56:44:94:37:01:15:0e:24:7b:f3:10:a8:36:b3:5e:
ed:6d:6c:8d:8f:5c:6a:fd:4a:2d:55:9d:5b:de:ea:c6:bf:01:
c5:54:8f:95:d5:aa:f5:4f:9f:35:5f:b7:e6:3e:46:2b:1c:10:
8c:74:12:f2:e2:0e:16:21:04:8c:95:0c:52:2a:3b:1c:62:ed:
eb:a4:74:6a:bb:c8:e3:68:c7:92:ba:9f:bf:b9:a1:73:39:3e:
10:c6:e0:9e:0d:86:38:60:6c:9f:ab:43:b2:24:b0:b0:d1:a0:
e5:5b:a5:b2:bb:2b:15:0d:96:62:0f:80:32:17:a2:72:6f:87:
05:23:88:f7:cf:c8:23:3e:b3:9f:9c:d6:4d:93:bd:ca:ce:68:
38:ee:f4:a2:61:38:3c:4f:f1:1c:a1:0b:2a:18:c0:c2:44:0a:
76:39:74:56:ab:0e:a6:91:7c:d2:a2:00:5b:bb:47:f5:ef:cf:
ee:0b:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org