Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/evGIDnNww6g8itEfgidcTQhAMyM.roa
File: evGIDnNww6g8itEfgidcTQhAMyM.roa (raw, json)
Hash identifier: ApLXjIx2GSGn79N32qEUZC0swVA6T3AntSV4+UnXiic=
Subject key identifier: 7A:F1:88:0E:73:70:C3:A8:3C:8A:D1:1F:82:27:5C:4D:08:40:33:23
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186036185A931EBC9B25A1B50B728D1181D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/evGIDnNww6g8itEfgidcTQhAMyM.roa
Signing time: Mon 30 Jan 2023 15:52:48 +0000
ROA not before: Mon 30 Jan 2023 15:52:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 213.232.93.0/24 maxlen: 24
213.232.95.0/24 maxlen: 24
185.255.168.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:61:85:a9:31:eb:c9:b2:5a:1b:50:b7:28:d1:18:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 30 15:52:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7af1880e7370c3a83c8ad11f82275c4d08403323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:4b:8b:74:f3:7a:a0:41:b2:a0:fb:f9:ac:
bc:0a:2d:bd:18:a7:a8:82:20:21:71:3e:8b:6c:d0:
06:21:71:8b:6d:d6:90:15:f1:2a:53:12:4e:b7:b6:
b3:b6:f4:b1:be:00:f2:18:6f:d9:96:e1:fb:3b:9e:
ba:f3:2d:8d:fb:75:51:ef:ac:90:07:a1:d8:c0:93:
6a:cd:8b:dc:6e:d6:d8:cc:aa:29:ad:99:58:2f:77:
5f:6f:c1:37:ce:38:d0:82:33:b0:82:86:7f:86:66:
73:43:47:ab:ad:f1:89:89:32:2a:82:dc:d2:7a:5c:
47:e4:be:ac:72:0c:a5:7c:8f:95:6d:6a:36:ac:fb:
45:94:29:a5:cb:e0:e1:2e:56:80:fe:f6:e9:6c:29:
c4:8c:93:c3:fe:27:69:94:21:9b:20:0b:ec:05:81:
b0:eb:a0:85:7d:b2:be:0e:e2:a7:f5:a4:91:d5:a4:
ed:00:5b:71:e9:e5:01:7a:b5:f8:08:8c:a3:f6:37:
72:64:5c:d8:b7:8c:f1:d4:ce:e9:40:62:23:30:a6:
28:54:13:ab:d3:d4:27:f9:6b:de:82:03:f5:cc:0b:
bd:02:62:e1:e7:c1:fa:a7:4b:37:2f:ad:24:ca:fa:
e9:a1:b6:4b:84:83:68:fd:40:94:61:3a:2f:ac:32:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F1:88:0E:73:70:C3:A8:3C:8A:D1:1F:82:27:5C:4D:08:40:33:23
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/evGIDnNww6g8itEfgidcTQhAMyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.10.0/24
185.255.168.0/24
213.232.93.0/24
213.232.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9b:05:03:38:ab:aa:a3:fe:c8:e0:79:5c:ea:b9:9b:71:98:
b7:98:d7:2e:ec:12:3a:c7:b4:89:20:4e:48:5e:68:87:3e:56:
86:29:45:a9:dd:99:74:81:57:c5:31:0b:ec:94:3c:cd:02:fc:
2d:87:80:b1:4b:09:70:da:7a:82:98:f4:18:32:0a:17:e3:a7:
7b:e3:c7:f4:9d:d9:c5:5e:4d:29:09:21:28:f7:0a:14:df:bb:
5a:d4:c8:39:74:0e:ac:3b:0b:3a:ea:95:6f:12:d4:4d:da:a5:
a8:91:ec:3b:a1:12:25:81:b2:95:ff:5b:74:6e:6e:92:33:19:
ff:bb:97:14:9c:06:ed:b5:5f:e6:32:5a:ed:d1:d7:0f:88:d0:
ca:07:71:46:04:76:87:9f:f0:e9:01:54:56:64:2f:c9:c0:6b:
95:5b:34:de:ac:8e:80:6b:0c:86:95:07:ab:49:c0:90:94:19:
bc:93:a3:07:5f:3a:de:50:a3:79:5d:54:7f:05:d5:af:c5:ed:
3d:78:3e:93:0d:8f:9f:a5:19:00:ec:5d:95:27:1a:d8:49:d2:
04:7e:80:c0:a2:d8:05:6b:b5:b0:19:2c:5d:be:5d:0b:ce:b4:
c5:53:e1:51:43:c7:cb:77:9c:d6:c2:22:be:8f:a2:88:93:f9:
4f:44:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org