Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cHXRGu5g6svl64o8LJEc3ADn9UA.roa
File: cHXRGu5g6svl64o8LJEc3ADn9UA.roa (raw, json)
Hash identifier: LC/+37PYKNxQRzmxP+N0KiQ2nyB0ALTwFgi2uq2XkjU=
Subject key identifier: 70:75:D1:1A:EE:60:EA:CB:E5:EB:8A:3C:2C:91:1C:DC:00:E7:F5:40
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185EA655387EA93AA3299D7CE7D6E13E437
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cHXRGu5g6svl64o8LJEc3ADn9UA.roa
Signing time: Wed 25 Jan 2023 19:26:27 +0000
ROA not before: Wed 25 Jan 2023 19:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 213.232.92.0/24 maxlen: 24
188.240.224.0/24 maxlen: 24
185.238.11.0/24 maxlen: 24
185.238.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:65:53:87:ea:93:aa:32:99:d7:ce:7d:6e:13:e4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 25 19:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7075d11aee60eacbe5eb8a3c2c911cdc00e7f540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:1d:e1:47:a0:ec:3e:b4:c5:9d:d7:fa:47:
14:60:fa:06:8a:7a:64:f2:f9:40:6f:d7:bb:f4:bf:
cd:13:86:d9:cb:2a:32:77:27:01:9c:9c:f2:c0:aa:
67:48:46:03:b8:03:89:f7:4e:eb:b5:55:42:9f:4d:
fd:71:60:f8:7a:a6:0a:f9:f2:b8:c9:62:2e:d5:27:
2b:d9:97:d8:1e:94:f6:a2:61:b4:a2:a6:ed:d4:4c:
54:f7:f8:bd:aa:f1:bc:6c:ad:c0:25:26:ef:18:b2:
bb:c0:5d:d5:aa:93:15:03:c2:68:37:c7:2b:82:0d:
5b:28:a3:0b:9e:80:d6:32:d8:74:f4:2b:89:17:22:
35:e9:6d:de:df:87:d8:a9:0a:a1:f9:8d:a3:74:74:
d9:39:9d:08:52:47:34:2d:df:c0:9a:ee:57:04:5b:
8c:23:75:08:79:01:d9:2c:36:3a:20:a9:a0:65:2b:
9f:af:0f:91:80:5d:4c:e0:3a:df:e2:ea:13:3a:19:
59:0c:75:d3:eb:fe:2c:61:0f:db:42:0f:82:77:a3:
61:28:ba:4f:84:a4:94:91:68:36:fe:8d:82:3f:85:
c2:a3:4b:03:aa:93:13:fe:4c:b6:ce:58:06:ba:40:
e6:2e:6a:e1:ac:b9:e9:8a:cd:2d:b9:d0:8a:5a:f3:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:75:D1:1A:EE:60:EA:CB:E5:EB:8A:3C:2C:91:1C:DC:00:E7:F5:40
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cHXRGu5g6svl64o8LJEc3ADn9UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.8.0/24
185.238.11.0/24
188.240.224.0/24
213.232.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c3:06:f6:ef:7c:da:1b:92:ac:4c:40:37:29:9f:d4:67:9c:
46:1b:fb:8d:ab:c4:5c:7a:13:2a:c6:08:17:f6:5a:de:5c:f3:
43:68:00:e3:23:25:10:88:30:b4:2f:25:93:df:2f:1a:12:bd:
53:82:c0:4e:79:06:1b:46:15:8b:4f:e3:80:b8:f1:84:c2:98:
c2:7f:b1:e9:60:0d:e3:25:65:d1:f8:04:f7:01:1b:95:1a:88:
24:d2:13:ca:05:68:4f:1a:88:7d:39:6f:e4:53:4c:37:f6:e5:
6e:4b:d6:eb:aa:0a:17:25:d8:6c:8f:bc:61:f1:62:22:b7:1b:
67:ac:15:49:89:ed:70:2b:26:57:89:d9:d9:c4:53:a1:74:ce:
16:f3:ac:7a:e3:91:05:d8:da:90:30:31:cb:56:da:c2:ca:d0:
b9:d7:32:ce:3b:e9:2a:45:f7:3b:c0:c1:ee:8b:68:24:af:5b:
cb:8e:02:82:d2:df:5e:64:a9:25:4b:83:fb:ea:c3:d8:97:82:
e9:79:ef:b9:20:fd:f6:cc:43:c6:99:a0:cb:6c:5a:4e:00:6b:
5a:11:c8:1e:c0:78:df:c2:e3:a8:94:ed:87:4b:c6:2f:c7:10:
ff:3b:4f:6a:27:55:2f:94:d5:62:4a:4d:33:6f:46:69:08:a0:
6d:45:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org