Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/b5pJ7PjZSK4xMydbvcRr58BPLxU.roa
File: b5pJ7PjZSK4xMydbvcRr58BPLxU.roa (raw, json)
Hash identifier: IDsdLREBya43kvMYLsHu/SRjMqwFOTpmTGGX4qdKTI8=
Subject key identifier: 6F:9A:49:EC:F8:D9:48:AE:31:33:27:5B:BD:C4:6B:E7:C0:4F:2F:15
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01873BBD9E235FF721EE3E01F3F370ACDB76
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/b5pJ7PjZSK4xMydbvcRr58BPLxU.roa
Signing time: Sat 01 Apr 2023 07:34:55 +0000
ROA not before: Sat 01 Apr 2023 07:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200180
IP address blocks: 188.240.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3b:bd:9e:23:5f:f7:21:ee:3e:01:f3:f3:70:ac:db:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 1 07:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f9a49ecf8d948ae3133275bbdc46be7c04f2f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:84:4a:c1:6b:86:8a:b8:d3:fc:2d:fd:3e:
d7:38:2d:ee:88:b9:32:c2:6a:d3:f4:16:c6:30:b9:
67:ed:b4:d1:fb:b4:7a:07:7b:3b:3d:aa:42:7e:81:
a5:4c:86:ef:1b:f0:8d:6a:3e:9b:45:12:48:76:57:
17:a5:8d:cb:96:5c:bb:3b:c7:a7:11:d9:8a:f2:6c:
6b:ff:25:f2:58:dd:79:e8:20:bc:b1:f2:dc:dc:97:
7f:02:9e:2d:31:1c:2d:bf:82:37:6c:5d:c8:12:fd:
f2:35:ca:05:7c:e6:b1:e7:f4:d5:6e:89:3a:3e:40:
95:ad:37:37:aa:47:b6:b0:81:c0:1a:54:7a:9b:52:
e6:ae:0f:bd:2d:a4:f2:08:45:7a:a2:1f:ec:97:0f:
d6:b2:49:9e:23:46:27:60:06:b1:8c:d3:bd:1b:71:
14:39:65:54:eb:4d:09:d1:f0:f2:53:2f:2b:52:5e:
d9:eb:99:4d:9f:8d:b0:6d:5c:37:55:ee:2b:44:c8:
ca:bd:95:96:08:63:1f:18:1a:69:a3:c2:7c:64:b9:
71:2f:25:0b:ff:d6:12:ed:63:f5:b8:62:85:5e:b6:
b0:e2:49:65:c9:46:3f:44:98:a1:74:a2:e7:bc:9b:
d1:fe:29:f9:b5:d9:76:a3:7a:28:5e:29:26:a9:a2:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:49:EC:F8:D9:48:AE:31:33:27:5B:BD:C4:6B:E7:C0:4F:2F:15
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/b5pJ7PjZSK4xMydbvcRr58BPLxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.224.0/24
Signature Algorithm: sha256WithRSAEncryption
74:87:4b:81:c7:9a:fa:ef:5f:6f:d8:7b:5b:a6:2f:fc:52:22:
9e:42:db:7b:af:1c:12:e2:6a:9e:cc:37:a3:04:ff:56:48:54:
fe:c0:37:e6:43:c2:d2:d0:91:65:17:a7:36:40:4e:e9:f4:8e:
34:25:f9:16:b6:9c:63:ef:50:75:4b:80:9f:7e:d6:9a:84:07:
70:f9:77:a1:35:8f:54:6c:90:9a:53:90:80:6e:80:2b:76:26:
4a:78:b2:3e:67:ad:8e:6c:35:93:fb:8e:b5:16:0f:b1:65:9a:
6f:95:88:5f:61:20:e2:06:3d:23:8d:5e:01:61:9b:22:8e:d6:
b7:c8:db:58:77:b4:d7:c6:11:34:f4:b3:2b:7c:52:47:13:0c:
61:98:5d:5b:07:ec:c1:2a:16:1d:d1:d7:8f:89:79:75:0f:b5:
da:32:d9:54:1e:96:9b:94:48:b0:d2:1c:3b:9b:ef:42:7c:c1:
aa:9a:a2:7e:44:48:b8:a5:13:5e:18:fb:3d:e0:f7:22:03:c1:
5c:89:02:90:18:4b:27:e9:45:c4:4f:bf:37:d2:28:59:b3:e4:
2b:60:5e:43:3d:08:7c:7a:50:15:63:72:0c:f1:d5:97:e5:cc:
f3:de:a3:ac:31:1d:96:fa:49:b8:7a:c4:1d:11:f9:8a:fd:97:
ea:e2:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org