Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cdEr7BM0GXhyo_Ccukiqr7lrito.roa
File: cdEr7BM0GXhyo_Ccukiqr7lrito.roa (raw, json)
Hash identifier: L/BRvhfqDTlF8ADH3k1evkk6yJexcRvSeE1Wsu7pkQU=
Subject key identifier: 71:D1:2B:EC:13:34:19:78:72:A3:F0:9C:BA:48:AA:AF:B9:6B:8A:DA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186B334B4E8975F38B06827A2A0014094BC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cdEr7BM0GXhyo_Ccukiqr7lrito.roa
Signing time: Sun 05 Mar 2023 19:17:01 +0000
ROA not before: Sun 05 Mar 2023 19:17:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210531
IP address blocks: 188.214.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:34:b4:e8:97:5f:38:b0:68:27:a2:a0:01:40:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 5 19:17:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71d12bec1334197872a3f09cba48aaafb96b8ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:68:7e:67:b7:2e:e0:8d:aa:d7:5b:2b:9b:75:
04:54:d0:eb:61:7d:9d:eb:8b:4f:a1:db:09:4b:04:
ce:71:38:72:7b:04:a1:c2:17:fb:3d:dd:d8:c8:4a:
4f:9c:5a:5d:ad:30:7b:63:b6:e7:d5:fa:84:49:3b:
95:59:a9:89:b7:76:f4:b6:17:a1:68:64:b1:0e:dc:
0f:0c:0d:c8:7a:47:a0:c2:a5:7e:62:f8:11:2f:75:
35:4b:42:63:6f:9e:c1:97:39:92:0f:ed:2f:b9:b8:
a1:d6:c8:5a:33:a2:ca:8c:34:fa:ae:5d:94:b7:3a:
c6:03:9a:5c:a3:8f:17:06:7f:88:7d:de:4d:dc:d3:
fd:24:c8:43:c1:45:0e:86:27:90:4c:26:f0:f6:4a:
e6:59:a9:1d:c9:d4:33:25:80:4e:c4:13:da:20:47:
5a:ba:a2:0a:e9:ce:04:03:e4:01:29:de:ed:43:cf:
f3:a7:08:df:88:e9:c9:3d:d4:5c:47:cd:e5:81:18:
c1:c4:38:e5:11:f2:c2:ba:4b:80:4d:9a:79:b5:0b:
30:f5:03:2f:26:e4:93:03:2e:cf:43:79:e0:2c:41:
75:cc:f3:36:62:0c:66:bb:63:47:bd:f8:a0:6a:ec:
ea:a6:9d:28:b7:c3:26:a1:29:6d:ef:78:d6:d9:8b:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:2B:EC:13:34:19:78:72:A3:F0:9C:BA:48:AA:AF:B9:6B:8A:DA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cdEr7BM0GXhyo_Ccukiqr7lrito.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5b:af:6a:c1:24:16:33:86:f8:2d:2a:d7:af:86:4e:00:bc:
bd:05:62:cf:25:36:ed:d2:5d:17:83:fc:75:c8:6f:1e:5a:f4:
b1:64:8a:d2:af:ef:c7:85:27:6a:2e:87:13:4f:fe:b7:19:6f:
f5:eb:69:f2:ed:a5:5a:57:61:fa:95:a1:c7:2e:c8:d4:ee:85:
88:f0:61:68:4c:9b:a2:59:45:f8:b0:2c:ca:f0:cb:82:cc:5d:
af:fe:46:b3:64:2e:2b:7f:a5:ff:41:b4:53:ea:37:aa:82:08:
7e:73:e2:c6:2f:52:30:e9:e4:5d:f6:60:7d:c6:71:9f:aa:90:
32:cf:0f:c8:5e:4b:7a:62:9f:12:73:a4:13:81:0d:94:09:c2:
da:4e:9a:66:82:03:5d:5e:10:9a:88:a2:e5:5e:5d:fc:29:12:
32:9b:bc:01:58:68:05:cc:8f:98:c9:8e:a1:3a:ed:6e:ca:36:
9d:5f:e2:09:9b:d5:f9:4b:a3:41:65:49:99:8e:91:59:79:17:
42:13:39:be:30:44:f4:cf:42:e7:b5:3d:0c:16:ea:58:dd:26:
0a:91:e9:fb:e0:3b:ec:85:0a:5e:e5:b8:be:9a:02:e6:97:0d:
2c:7c:f1:46:a3:e3:28:50:49:50:82:59:7e:26:38:8a:82:ad:
db:15:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org