Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fwR3qwoJTBQLw4-D57Tt_0B8gq8.roa
File: fwR3qwoJTBQLw4-D57Tt_0B8gq8.roa (raw, json)
Hash identifier: +OIM+EBCSoM6RENy6dNjZ/cnH4pOnCVtZXzkTqLvFgc=
Subject key identifier: 7F:04:77:AB:0A:09:4C:14:0B:C3:8F:83:E7:B4:ED:FF:40:7C:82:AF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018C2FB37F20AF0F2CAF278F467A755DC0FC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fwR3qwoJTBQLw4-D57Tt_0B8gq8.roa
Signing time: Sun 03 Dec 2023 12:42:21 +0000
ROA not before: Sun 03 Dec 2023 12:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199760
IP address blocks: 188.241.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:b3:7f:20:af:0f:2c:af:27:8f:46:7a:75:5d:c0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 3 12:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f0477ab0a094c140bc38f83e7b4edff407c82af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:2e:4e:9d:11:25:19:b5:88:d8:3c:c5:b4:
72:37:01:ec:b3:04:ca:5f:70:b1:94:c4:43:60:1f:
25:ca:58:77:08:b0:a6:3d:2a:0b:02:ca:4d:66:7b:
4e:d4:f6:a4:a9:e7:a1:3f:66:aa:c5:f7:6f:73:45:
bc:c5:d5:bd:a2:b4:60:8d:a1:bd:55:ff:12:7a:fb:
cf:51:83:ab:bb:b2:7d:22:20:8f:52:7c:2c:00:11:
21:d6:aa:85:c6:16:bd:fb:89:38:e3:2b:a4:f7:a0:
26:65:c5:d7:14:28:54:33:d4:be:41:1a:ce:8d:60:
23:aa:f4:1d:c9:ba:80:dc:0a:e3:71:3a:08:68:36:
3d:01:a9:10:57:68:20:f0:3f:9c:f4:e6:25:de:6a:
31:ef:e5:1b:17:b2:34:30:44:d7:b9:d1:1d:e1:e7:
6e:24:23:fc:47:36:55:9f:3b:0f:22:ea:69:36:a6:
44:55:c9:0e:cb:ef:00:d7:71:9c:a1:c0:2d:c8:c0:
54:c0:2e:d7:44:7e:7c:9f:8b:56:75:36:21:71:84:
28:c7:9a:7a:cd:a0:07:39:9a:12:8f:22:0f:ae:b3:
40:13:bd:f4:a2:e5:72:ea:10:26:f6:aa:24:ac:bd:
d5:96:2c:82:5a:6b:a6:31:39:25:8c:21:ee:a4:5b:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:04:77:AB:0A:09:4C:14:0B:C3:8F:83:E7:B4:ED:FF:40:7C:82:AF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fwR3qwoJTBQLw4-D57Tt_0B8gq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.182.0/24
Signature Algorithm: sha256WithRSAEncryption
34:73:c1:6e:9d:e0:8a:2c:a4:b5:cd:56:d2:cb:ec:3e:29:6b:
78:7b:0d:75:1f:79:c9:47:69:85:4b:71:4c:f9:c0:75:e2:5b:
b6:aa:3f:4e:2e:de:6b:d1:7e:d0:40:ac:0e:29:b7:a7:e4:78:
e4:2b:f8:dc:51:81:36:e6:8a:c6:79:7d:7f:97:46:79:f4:3c:
e3:88:9d:bd:9e:bb:d1:a0:61:03:26:41:af:11:d7:d0:ba:cd:
c3:40:8e:42:57:41:ad:fb:ab:e9:30:78:05:fd:e8:b3:a7:fe:
92:f1:3a:f3:93:91:7d:28:38:d1:5a:ab:5c:b2:d6:00:5b:df:
dc:68:77:3b:38:be:53:1c:89:0b:d3:85:aa:da:89:36:74:b8:
25:31:0c:64:8f:d3:81:24:fa:4a:85:5a:ad:d3:94:cb:f6:2e:
19:e1:b5:30:ae:e1:bd:76:57:13:d6:8d:12:da:00:3f:47:ea:
43:d8:8b:3a:54:78:56:62:a3:cc:40:32:13:ee:0e:87:e4:36:
4d:e5:2c:d8:da:72:98:37:df:a6:b9:48:86:1c:6b:45:df:bf:
ec:fb:35:67:08:f3:db:97:7e:3c:51:30:9f:20:bf:cd:5d:ab:
fe:3f:45:35:a2:fe:e9:a4:fe:ad:f2:55:6c:1b:5c:12:9d:46:
78:de:8e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 17:19:25 2023 by rpki-client on console-ams.rpki-client.org