Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZvP3UGqx-h6prxGbM-tjafLbafQ.roa
File: ZvP3UGqx-h6prxGbM-tjafLbafQ.roa (raw, json)
Hash identifier: h5cxN7n8HV85q6t8AxU3DuBLYRXq8OFrWCjemCVjdHU=
Subject key identifier: 66:F3:F7:50:6A:B1:FA:1E:A9:AF:11:9B:33:EB:63:69:F2:DB:69:F4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018B62D2AE5086B55630D3854EA7119BB861
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZvP3UGqx-h6prxGbM-tjafLbafQ.roa
Signing time: Tue 24 Oct 2023 17:54:16 +0000
ROA not before: Tue 24 Oct 2023 17:54:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47392
IP address blocks: 188.212.155.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:d2:ae:50:86:b5:56:30:d3:85:4e:a7:11:9b:b8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 24 17:54:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66f3f7506ab1fa1ea9af119b33eb6369f2db69f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:6d:0f:99:17:75:d7:d4:05:11:b9:cb:39:
6b:4d:03:74:8a:df:7a:a1:b1:d3:98:a8:4d:aa:2c:
33:fd:3e:3d:2c:82:37:51:01:2d:d8:04:16:0c:67:
bd:44:39:39:53:0f:b5:84:51:29:91:9b:d7:7c:94:
b8:0a:32:2b:3d:5e:b3:25:b3:2a:67:a8:b0:28:0f:
68:fa:3f:61:ad:d6:cb:b5:57:d2:bf:8b:a2:d8:0e:
c9:a1:d2:38:75:13:6e:41:dd:65:6f:e3:c6:99:be:
da:e2:24:b4:19:06:2d:97:7f:d4:fd:e6:c0:40:d5:
4f:b0:53:8b:9b:e3:80:af:fb:b7:e4:2c:b0:f6:85:
c6:74:a1:a5:ec:cd:ae:13:87:d1:c7:e5:6d:c5:47:
c8:8c:45:a0:0b:98:9b:94:0f:f6:80:e1:fc:e9:ee:
da:0d:79:35:02:75:57:37:96:81:00:42:f4:93:1b:
aa:f3:24:6e:0a:46:d7:3c:18:6e:4c:6a:6f:61:5f:
87:38:a0:cc:30:20:e2:7a:64:ae:2b:bb:0b:5e:1e:
63:ad:d0:30:76:8a:48:31:b6:76:6b:14:e5:29:75:
cd:6f:38:f5:9b:c5:91:f9:8f:03:8a:e0:bd:58:45:
7d:7e:99:2f:f2:7a:bc:bd:85:94:63:d5:fc:08:5d:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F3:F7:50:6A:B1:FA:1E:A9:AF:11:9B:33:EB:63:69:F2:DB:69:F4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZvP3UGqx-h6prxGbM-tjafLbafQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.155.0/24
188.240.233.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1f:33:81:ed:ce:cd:f5:a0:36:4e:d3:21:63:42:0b:92:77:
04:b1:ab:91:03:28:5d:2b:c8:11:f1:b3:17:17:39:39:9f:16:
b0:04:16:e2:ca:2e:12:bd:ca:67:fa:ba:75:2f:b3:10:27:a7:
53:1a:5b:44:ae:49:ab:ce:2a:fb:dd:85:4b:05:32:fa:47:b4:
f8:0c:8f:e4:30:8e:d2:e6:ec:f3:31:f4:e7:3d:99:94:53:80:
90:b3:a5:a0:99:64:7b:40:e8:dd:cf:b5:82:38:30:65:87:90:
fd:ea:56:76:3b:47:24:c7:2f:76:ab:07:05:e6:b5:d6:63:d7:
0e:3a:c3:bb:58:10:a5:a7:29:51:30:7a:b0:db:3f:67:91:a3:
5e:1b:91:90:c5:79:37:b1:68:27:9f:cc:8e:f1:a3:aa:8a:52:
ff:4f:09:4f:70:11:27:13:b5:43:74:74:18:ef:69:d0:40:4d:
11:21:0d:c0:49:fb:b8:83:a5:b9:da:0e:d9:1d:d6:63:37:65:
9a:36:ef:ae:74:c2:1f:36:34:a4:4d:98:b1:0e:ad:9f:49:a6:
93:23:14:6a:88:80:81:1e:15:2f:63:0a:6a:8c:ef:39:35:f6:
63:8a:8b:2b:7e:6f:ed:51:46:0a:0a:8a:5a:6b:33:ed:99:02:
dd:56:ab:53
-----BEGIN CERTIFICATE-----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Generated at Sat Oct 28 07:17:55 2023 by rpki-client on console-fra.rpki-client.org