Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_B8orPkaa0AWx8UwAEkLrtYAb_Q.roa
File: _B8orPkaa0AWx8UwAEkLrtYAb_Q.roa (raw, json)
Hash identifier: bpRF2wOCLF0sSFDQt4QXw3Lj/BCUrGXz1jF8hGSkbuc=
Subject key identifier: FC:1F:28:AC:F9:1A:6B:40:16:C7:C5:30:00:49:0B:AE:D6:00:6F:F4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0188B3F1BBC36B2EC98CCA78F9A2E104B9E2
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_B8orPkaa0AWx8UwAEkLrtYAb_Q.roa
Signing time: Tue 13 Jun 2023 08:49:03 +0000
ROA not before: Tue 13 Jun 2023 08:49:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 89.35.155.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:f1:bb:c3:6b:2e:c9:8c:ca:78:f9:a2:e1:04:b9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 13 08:49:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc1f28acf91a6b4016c7c53000490baed6006ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:31:e2:80:7e:f7:60:f5:c8:e9:11:90:eb:
6a:ad:0a:08:dc:b7:f5:a6:b6:af:32:aa:ce:3b:0d:
66:e0:1b:e6:ac:80:bf:7b:6a:20:eb:ac:61:29:79:
14:fb:5c:63:14:8b:48:71:f6:16:6f:1f:51:cb:f0:
20:a8:6a:92:2f:c4:57:48:b2:58:7c:3f:cf:43:5f:
5a:91:59:25:c4:f7:75:1b:31:bd:f4:9f:5f:33:27:
f7:f6:69:a9:91:8a:50:29:21:f7:3f:e2:82:27:bf:
7a:c2:ef:1f:ee:a4:6a:0b:0b:94:04:2f:57:4e:00:
74:95:5c:dc:fc:05:a9:54:ce:0b:10:2f:a2:76:1f:
dc:c7:d0:ee:13:32:a1:74:07:09:ec:78:8b:47:55:
db:ea:42:0d:86:54:62:4b:1d:06:5f:78:4e:81:75:
40:11:49:6a:0f:bc:ec:83:7c:07:ca:04:69:d6:0c:
7a:a3:f1:8f:c7:9f:39:0c:ff:d3:1f:71:fc:42:f9:
83:1b:9c:91:9d:92:4c:b8:78:3e:6e:bf:79:cc:fb:
f7:b7:f1:0f:b9:94:1a:c9:af:8d:fb:20:f1:fc:6a:
1c:9e:e4:50:54:66:db:44:c4:54:5b:fb:f1:d3:0e:
0f:cf:54:88:ba:31:ae:f4:ad:19:a7:ad:30:c8:ed:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1F:28:AC:F9:1A:6B:40:16:C7:C5:30:00:49:0B:AE:D6:00:6F:F4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_B8orPkaa0AWx8UwAEkLrtYAb_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.155.0/24
188.212.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d5:5f:c9:29:2e:90:5b:45:95:8e:a2:26:35:14:42:db:75:
1e:f3:84:37:4f:7a:d3:fb:9e:39:d2:7b:77:b0:51:92:64:b0:
06:3c:9e:9a:bf:a9:fe:7f:7e:dd:7d:b8:bc:a1:d0:87:04:0c:
21:44:75:22:d1:79:fc:e4:d1:26:64:2c:a2:dd:94:ae:02:53:
32:9c:bd:1d:5b:a2:8e:1f:ef:04:13:1b:c5:35:4e:20:02:13:
3f:23:7a:a2:ed:8e:6d:cc:cf:dc:ae:c0:b3:1c:5b:09:2b:91:
fc:39:69:5d:6c:cc:45:12:b6:f3:10:8e:81:d7:32:3b:d1:6b:
06:5a:66:46:e6:d0:ec:85:df:36:1b:c9:25:e0:62:bc:8c:31:
ff:27:c5:65:50:9d:a1:ca:ec:6e:2e:55:20:d1:7f:b7:d9:f0:
2f:7d:78:29:c0:29:98:34:49:f1:59:ee:9e:1f:72:67:2b:d8:
dc:1f:42:8e:f7:6b:77:f4:43:ad:1f:77:67:b5:97:8b:4c:ab:
2d:81:f0:9e:b3:22:df:6a:68:a6:59:c5:f2:cc:99:8d:eb:12:
37:f1:e6:f3:39:37:ec:11:2c:58:a1:6f:8a:c5:93:38:42:1e:
6c:4a:9b:aa:35:5f:15:a9:b8:b8:ba:4d:68:36:e7:36:5e:df:
80:a8:19:0c
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 9 18:24:20 2023 by rpki-client on console-ams.rpki-client.org