Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eDUyYfjPJFkIZWkon05P7S4Bc1Y.roa
File: eDUyYfjPJFkIZWkon05P7S4Bc1Y.roa (raw, json)
Hash identifier: ztmmPaWI2BBGYSMvYiQFm3oNGFaLTxR7ym10wWdzK+s=
Subject key identifier: 78:35:32:61:F8:CF:24:59:08:65:69:28:9F:4E:4F:ED:2E:01:73:56
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018746AE372CCE7C82D1EDD5D9C0E793CBE0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eDUyYfjPJFkIZWkon05P7S4Bc1Y.roa
Signing time: Mon 03 Apr 2023 10:33:55 +0000
ROA not before: Mon 03 Apr 2023 10:33:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 93.114.193.0/24 maxlen: 24
188.240.68.0/24 maxlen: 24
185.255.36.0/24 maxlen: 24
185.135.142.0/24 maxlen: 24
188.240.226.0/24 maxlen: 24
188.240.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:ae:37:2c:ce:7c:82:d1:ed:d5:d9:c0:e7:93:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 3 10:33:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78353261f8cf2459086569289f4e4fed2e017356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:ce:9f:2e:2a:a4:d3:cc:56:97:d7:b8:7c:
31:2b:09:15:a2:e1:71:72:c4:4c:2f:e7:26:09:a4:
82:f0:44:bb:a2:ca:d0:26:8e:14:1a:30:b4:16:0b:
72:30:31:b2:d1:d6:30:7c:67:99:d9:cc:07:8c:0e:
51:cc:83:e7:a4:bb:c6:bd:0c:a2:7d:0d:e6:7d:ce:
b6:01:45:10:f3:16:85:e4:d9:72:da:c1:33:d6:34:
89:51:3e:eb:28:85:e2:ac:7e:21:61:39:31:09:74:
fc:c1:6f:33:99:2f:fe:3f:71:69:62:1b:63:c7:1a:
51:49:fe:8b:c2:89:fe:87:2d:42:e0:a5:a1:fe:4d:
29:6c:fe:3c:a7:ca:20:c4:16:6a:f4:2c:6a:d3:b5:
ec:f0:aa:18:6a:ee:79:5b:19:97:d7:f1:4b:53:05:
b6:8b:a2:da:02:1c:7d:d7:73:d4:dc:83:21:9f:18:
59:57:84:09:44:74:8d:3d:49:6e:c2:ad:0e:81:44:
e9:a0:b4:f1:f2:33:d8:67:db:d9:8c:59:13:8d:a3:
c1:97:0c:43:4f:27:55:e7:83:29:36:0e:ae:1c:d6:
0b:2b:eb:83:c9:ae:bd:fd:4a:a3:f1:23:62:4b:55:
98:72:74:93:70:20:19:0a:97:b9:a8:ca:72:72:e2:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:35:32:61:F8:CF:24:59:08:65:69:28:9F:4E:4F:ED:2E:01:73:56
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eDUyYfjPJFkIZWkon05P7S4Bc1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.193.0/24
185.135.142.0/24
185.255.36.0/24
188.240.68.0/24
188.240.226.0/23
Signature Algorithm: sha256WithRSAEncryption
28:63:fe:f0:ea:99:c8:89:27:11:d3:85:88:b0:00:44:ba:c1:
d7:dc:be:2e:ef:b5:9a:cb:94:ee:e9:34:8d:2f:df:5f:74:2f:
4d:33:a5:58:5d:c8:04:b3:f9:3d:dc:a4:83:56:a0:6a:fb:5b:
18:6a:dd:c5:e3:cf:e0:4a:b3:6b:18:4d:55:73:9a:43:c6:ef:
34:d5:cd:c6:48:02:62:5a:1d:5d:3b:49:72:31:ce:ff:c9:af:
87:fe:6d:ca:ea:07:46:25:0d:9c:a7:c0:32:e8:fd:a1:65:b1:
b0:9a:55:06:b5:91:66:ac:f8:76:64:c3:fc:ca:7d:5b:d8:72:
5a:8d:52:0f:fb:2a:a2:d6:1c:6a:bf:f5:7e:a6:f7:1d:b6:1c:
94:5d:8d:7f:df:08:ea:46:20:09:72:79:ca:88:e0:7b:2c:b1:
02:f7:83:22:ff:d3:4d:f0:40:01:ff:14:42:82:5b:31:aa:bf:
e2:44:a6:b9:c2:2a:63:aa:f8:64:ac:48:a8:e4:a7:ed:dd:c0:
87:31:40:0c:52:c5:80:2b:3e:48:57:3e:6c:13:84:1c:66:e9:
65:46:99:a1:fb:c3:b0:16:0f:90:7c:59:0b:6c:86:2c:2b:c1:
26:9c:6c:ed:08:fb:21:15:b0:50:a1:3c:9b:29:57:11:72:5b:
14:5e:c6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org