Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_no3U03iV4L7j5mR8KnWuUJsebQ.roa
File: _no3U03iV4L7j5mR8KnWuUJsebQ.roa (raw, json)
Hash identifier: Nuz6Oy+eAxRXKb01JjQcrcQ+xMi6JqfhuFnUNkQdr6g=
Subject key identifier: FE:7A:37:53:4D:E2:57:82:FB:8F:99:91:F0:A9:D6:B9:42:6C:79:B4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0188D89D8FE2BB3CA9240D0691186FFB8B05
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_no3U03iV4L7j5mR8KnWuUJsebQ.roa
Signing time: Tue 20 Jun 2023 11:43:04 +0000
ROA not before: Tue 20 Jun 2023 11:43:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.241.210.0/23 maxlen: 24
188.241.214.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
45.156.159.0/24 maxlen: 24
45.156.157.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/23 maxlen: 24
185.255.170.0/24 maxlen: 24
89.35.155.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.103.72.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:9d:8f:e2:bb:3c:a9:24:0d:06:91:18:6f:fb:8b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 20 11:43:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe7a37534de25782fb8f9991f0a9d6b9426c79b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:80:78:f3:a6:f1:0b:60:29:d9:04:10:b6:
5b:21:8d:d9:9d:d8:2c:48:97:97:d0:94:58:32:b2:
23:1e:dd:c7:eb:96:c4:f1:7f:e1:3d:b9:45:35:ba:
04:d0:5a:ec:ad:50:0d:23:17:95:7b:68:68:e3:9e:
01:f4:28:e8:94:e8:92:ba:87:cb:9b:67:92:23:e7:
90:57:9a:bf:ca:d5:5c:bc:ba:cd:b7:aa:4f:15:a5:
36:a8:11:45:41:ad:74:19:21:03:79:83:c1:d1:36:
fd:b0:5e:3f:08:0b:b4:5c:e9:03:6c:03:0b:3d:41:
14:b0:2a:e7:53:c8:b2:66:e6:b5:54:a4:e3:0f:3d:
9c:eb:5c:75:5b:71:1d:12:0d:fc:dc:8f:c2:9d:e1:
49:b7:2c:91:76:18:59:a4:c7:15:2d:ac:7e:8c:33:
7c:62:32:6e:1b:ef:54:15:08:e1:3d:84:05:5b:2a:
70:56:bc:14:89:cb:43:de:d5:4e:d7:56:28:40:a8:
f3:be:d0:f8:7d:8b:03:0d:3b:5e:eb:ba:38:50:de:
11:ed:a6:81:d1:7a:90:ef:27:68:de:20:38:39:7b:
8b:80:49:c6:38:64:51:1e:ff:b1:c9:08:58:02:23:
59:c4:ec:93:31:c9:ce:b0:a3:bf:9b:6e:cc:c4:75:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7A:37:53:4D:E2:57:82:FB:8F:99:91:F0:A9:D6:B9:42:6C:79:B4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_no3U03iV4L7j5mR8KnWuUJsebQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0/24
45.156.159.0/24
87.247.148.0/22
89.33.85.0/24
89.35.155.0/24
89.37.63.0/24
91.188.204.0/24
91.188.206.0/23
93.115.254.0/23
185.103.72.0/24
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.169.0-185.255.171.255
188.212.132.0/23
188.212.158.0/24
188.213.203.0/24
188.240.230.0/24
188.240.232.0/24
188.241.214.0/24
213.232.92.0/24
Signature Algorithm: sha256WithRSAEncryption
54:af:64:26:60:9b:4f:fe:23:e8:b9:b1:a5:aa:12:0f:06:26:
4e:6a:a7:ed:1f:dd:da:ec:c0:99:3f:38:f1:bc:2c:cb:a4:00:
8f:b6:ed:b3:78:4b:2a:01:f7:67:c9:2a:ae:53:92:02:94:9e:
f4:a1:33:bf:db:11:3d:70:7b:a2:0b:27:ca:8f:96:f7:5c:1a:
e1:12:39:44:af:df:14:9f:33:ca:10:b6:7e:34:b3:c3:c2:93:
20:5f:2d:c0:bc:bd:14:35:6e:67:0f:57:6d:fe:21:42:91:cf:
89:b3:fa:b9:01:16:ab:e8:99:74:da:7d:d6:30:d9:3f:68:ea:
6f:1b:3d:e0:2a:14:bb:c5:15:28:81:23:a9:fe:05:8e:3f:46:
9b:78:a0:da:94:fb:09:7d:1d:6a:1d:bd:c2:b9:0a:87:82:c4:
28:3a:9f:96:0a:e0:26:4d:41:a5:da:be:ad:0e:13:03:41:42:
d8:e8:32:5c:b7:e2:b7:11:3a:fe:67:9c:9e:4e:3b:7b:eb:19:
03:52:1e:5c:d9:ee:74:ff:df:ea:75:36:c4:9d:06:08:4c:b1:
db:cb:ae:a4:73:ef:2d:af:73:5a:d2:5a:d5:1e:a6:b7:46:10:
f6:88:5d:1c:c5:14:5d:2c:65:f5:6c:9c:3e:4b:bb:29:af:de:
8a:d4:50:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org