Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W03HAD6v6z-ycg1pgqoOrFTajp4.roa
File: W03HAD6v6z-ycg1pgqoOrFTajp4.roa (raw, json)
Hash identifier: 7M7rQdLy8Kq0/UaLtdbVVatJMaj65lNkij7oCfVFeaw=
Subject key identifier: 5B:4D:C7:00:3E:AF:EB:3F:B2:72:0D:69:82:AA:0E:AC:54:DA:8E:9E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01863664E9DC0B3560D25BDCE3A29388F1E0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W03HAD6v6z-ycg1pgqoOrFTajp4.roa
Signing time: Thu 09 Feb 2023 13:37:08 +0000
ROA not before: Thu 09 Feb 2023 13:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210912
IP address blocks: 193.23.130.0/23 maxlen: 24
188.241.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Feb 2023 16:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:64:e9:dc:0b:35:60:d2:5b:dc:e3:a2:93:88:f1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 9 13:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b4dc7003eafeb3fb2720d6982aa0eac54da8e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:36:9f:e7:e0:16:40:a1:15:46:f8:07:e2:
5a:12:0a:f6:c3:9d:22:e7:e0:4c:5c:cd:6b:4c:b3:
97:1e:6e:ef:70:bd:c7:a5:13:6e:c1:d0:9c:92:7b:
8f:0d:2a:27:13:5f:98:c8:69:17:1a:f7:fe:73:22:
00:4c:69:d2:04:1b:28:e7:43:27:f5:53:8b:61:36:
7e:b8:a7:5d:71:02:0e:2e:e3:f6:33:f7:29:42:40:
4f:03:5b:7c:70:67:28:aa:43:0b:94:66:4c:09:60:
e4:f8:73:7e:12:60:20:3b:c7:f6:92:a7:e9:e4:70:
5f:67:54:52:fe:c5:a6:ec:4e:45:1a:54:da:65:f4:
48:9a:44:56:92:c2:9d:ff:90:c0:9c:44:65:09:39:
89:d0:c3:e6:ff:01:da:4c:ce:84:08:88:8a:f8:f8:
a0:f2:25:3a:b5:4d:e9:ee:f5:19:06:48:76:16:12:
ad:56:8b:cb:a3:f7:f7:5f:02:e8:fd:6e:35:5e:eb:
09:52:50:6c:09:c0:97:d8:bb:db:db:d1:bd:45:13:
70:b0:62:57:1d:03:1f:10:0d:88:5e:a3:82:9f:ef:
cb:19:ef:63:d8:32:2c:c2:69:85:69:6e:97:74:74:
cf:96:d8:32:61:47:87:2e:31:19:e0:10:39:b8:7b:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4D:C7:00:3E:AF:EB:3F:B2:72:0D:69:82:AA:0E:AC:54:DA:8E:9E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W03HAD6v6z-ycg1pgqoOrFTajp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.110.0/24
193.23.130.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:09:9c:e3:96:22:4b:80:f0:c2:32:ab:bf:b6:a9:d7:09:08:
f3:fd:ac:6a:bb:85:2b:94:0e:c4:e8:45:96:02:4a:10:f3:a4:
f4:4e:10:8b:86:0c:d1:96:8c:16:f6:aa:a2:65:55:7a:bc:1e:
40:68:42:d8:22:2e:41:12:47:48:bb:d0:99:b5:b7:6a:0c:88:
ec:e3:eb:23:04:50:44:2a:ef:45:aa:ca:ad:de:aa:69:02:07:
92:36:63:e6:44:a9:ee:b9:4a:43:5d:56:61:48:78:73:b7:11:
eb:bf:85:14:5b:b5:0b:ac:93:8c:96:cf:76:93:80:39:1e:f2:
3f:49:ed:f7:f8:bd:20:4e:fd:86:e2:3e:c5:a1:43:7d:b0:67:
6b:7c:bd:f4:0e:e3:d8:7d:ff:9b:9a:20:0a:a0:95:1c:39:cb:
82:77:27:71:4a:07:42:b1:a1:3a:ea:c6:9b:e2:69:1b:aa:81:
60:3a:e7:b0:a2:2b:cf:10:82:a8:e7:97:b7:e9:78:04:8d:74:
86:e5:fe:15:0f:14:c0:20:7c:e2:54:2c:99:28:60:07:60:59:
9f:d9:05:8f:38:ea:8c:1e:e5:6f:03:e3:8e:d2:f7:fb:ad:07:
c5:56:44:ba:c4:c9:f3:eb:88:13:2c:e9:27:5f:a1:31:4c:b2:
df:c4:c3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:46 2024 by rpki-client on console-fra.rpki-client.org