Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/c_05hXcvrKsBGa9eiGiwUpvxP9M.roa
File: c_05hXcvrKsBGa9eiGiwUpvxP9M.roa (raw, json)
Hash identifier: IOoAmZ2IRoxKxuXjh86s7MMY4rJB4lWn1qEVh9SNqLI=
Subject key identifier: 73:FD:39:85:77:2F:AC:AB:01:19:AF:5E:88:68:B0:52:9B:F1:3F:D3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018920F89D801E7F8F831392201F8DADA03C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/c_05hXcvrKsBGa9eiGiwUpvxP9M.roa
Signing time: Tue 04 Jul 2023 12:55:11 +0000
ROA not before: Tue 04 Jul 2023 12:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 193.23.130.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:f8:9d:80:1e:7f:8f:83:13:92:20:1f:8d:ad:a0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 4 12:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73fd3985772facab0119af5e8868b0529bf13fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:dd:87:e6:77:17:50:7e:e3:aa:37:2e:52:
39:19:32:ec:05:0b:ff:ba:14:d5:ea:71:8a:7b:b0:
e6:03:f7:2d:89:e3:73:c1:1e:b3:7c:e1:48:4c:25:
4a:6b:4b:5a:5f:19:e2:a5:ea:4b:0d:89:16:4a:55:
06:75:22:98:42:30:a1:19:fe:d9:8f:69:7b:d5:24:
9c:ae:ab:60:94:b3:c7:8f:87:9c:6a:59:1f:48:c3:
5b:b9:8e:9b:a0:fb:39:04:3c:ea:3e:0f:d3:d4:f4:
60:f7:7e:f3:54:05:f1:7c:94:9a:4a:16:e6:af:78:
a3:55:19:33:6a:b4:bb:28:f5:49:91:ec:49:40:53:
66:a1:3a:7c:7a:72:33:bd:eb:29:d4:d1:ff:27:9b:
96:64:95:07:54:db:86:0d:47:a0:b2:70:f7:42:97:
8b:27:fa:26:2e:5b:8f:67:22:a9:9d:ab:95:a6:aa:
0a:f2:99:f2:9f:a9:34:09:f0:26:f6:c1:b9:51:08:
dc:85:e1:df:7f:6a:e2:a4:ee:de:f7:a1:68:39:c9:
12:ed:dd:a6:28:76:d5:0d:53:de:08:b7:8a:f4:77:
5c:1b:43:e9:a0:a5:92:b1:f4:a2:bb:5f:61:c4:76:
34:23:93:4a:50:d6:2d:77:2c:6a:f8:c6:7f:6f:0c:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FD:39:85:77:2F:AC:AB:01:19:AF:5E:88:68:B0:52:9B:F1:3F:D3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/c_05hXcvrKsBGa9eiGiwUpvxP9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.84.0/24
188.240.232.0/24
193.23.130.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7c:d8:21:69:17:77:6b:e4:04:27:60:00:08:bb:76:87:9e:
1d:6d:91:89:8b:ca:68:d1:c4:cc:37:e3:d8:b5:57:68:1b:01:
4c:89:49:8d:bb:7b:c0:9e:16:bf:76:91:be:e1:15:a4:32:05:
6f:84:7d:31:dc:5d:93:f1:03:69:e6:24:85:2b:fd:a1:fd:54:
62:d7:e6:fa:55:2c:9e:c2:c3:17:57:e8:aa:b8:94:9e:37:97:
9e:90:05:48:b7:30:25:0a:15:bd:25:6f:a6:dd:ef:44:cb:84:
95:89:19:83:a5:cf:48:2e:f1:8f:2d:6c:f3:ab:67:5b:f8:d8:
78:53:5e:32:d4:33:44:08:a2:19:b0:e0:7b:be:c0:cb:73:67:
ff:37:be:be:c1:53:61:ce:62:46:0a:fb:72:5b:33:56:8a:08:
7a:97:8c:c3:b7:bb:dc:bd:5d:d0:01:3f:af:86:7f:05:77:69:
d0:0d:af:b9:81:22:d1:4e:21:7c:53:7f:dd:31:df:75:e5:13:
9b:49:e4:4c:2a:71:81:b5:09:f8:6f:6a:1a:89:e6:19:1b:f3:
fd:8a:b4:02:36:2e:ec:32:7b:7f:09:ee:4a:95:cc:79:96:95:
e3:32:b2:bf:57:a5:8a:0a:eb:de:d6:03:39:f4:66:4a:c4:76:
a2:d9:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org