Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hNqBZen0gNUA8sJFmukM2mtbjpk.roa
File: hNqBZen0gNUA8sJFmukM2mtbjpk.roa (raw, json)
Hash identifier: wIeUF773FYsi99PyMGoo159TVmwxUJtERg2iNoj0G0Q=
Subject key identifier: 84:DA:81:65:E9:F4:80:D5:00:F2:C2:45:9A:E9:0C:DA:6B:5B:8E:99
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01869C30C2B5833BD9FAC670098701E4577D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hNqBZen0gNUA8sJFmukM2mtbjpk.roa
Signing time: Wed 01 Mar 2023 08:01:26 +0000
ROA not before: Wed 01 Mar 2023 08:01:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32097
IP address blocks: 89.38.136.0/24 maxlen: 24
93.114.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:30:c2:b5:83:3b:d9:fa:c6:70:09:87:01:e4:57:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 1 08:01:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84da8165e9f480d500f2c2459ae90cda6b5b8e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:84:e7:d7:4b:6a:a8:0c:95:b6:01:14:85:
13:0c:6f:dd:1e:3c:1a:c0:5d:7b:55:e1:38:93:02:
aa:e6:28:67:bc:10:a2:2e:b6:d0:7a:68:80:33:65:
f2:b2:94:55:91:51:95:df:8b:b7:24:37:b4:2c:b5:
f4:34:6b:a6:21:0b:7f:c4:fd:90:f5:13:41:87:f9:
48:6b:10:61:b0:81:4a:40:25:8b:80:fe:4d:21:56:
65:dd:f8:34:b6:d0:7f:06:e2:02:66:0a:ce:13:5d:
71:ff:38:e9:b5:7b:cb:0b:ed:af:22:5f:16:ec:69:
2f:aa:c5:9b:e8:ba:e2:22:fc:6b:47:42:cf:46:59:
76:ca:dc:34:21:77:6e:e9:de:1b:a1:df:08:5e:e4:
36:c7:23:c2:80:13:1d:e6:26:91:1f:55:5b:34:cd:
7c:01:36:8e:3a:ff:da:e0:14:cc:5f:4c:dd:08:1b:
6f:f0:05:46:ad:de:39:c8:17:ac:bb:2c:eb:b1:f6:
9d:ec:60:f4:03:e9:0f:b8:87:d1:60:a5:8b:25:e2:
fa:78:06:2f:83:57:87:6c:23:87:13:6d:67:33:13:
54:07:48:d7:c2:7f:f5:4a:d7:fb:0e:12:92:8d:85:
69:3e:3b:ac:00:5e:83:36:a4:32:ca:3a:be:52:60:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DA:81:65:E9:F4:80:D5:00:F2:C2:45:9A:E9:0C:DA:6B:5B:8E:99
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hNqBZen0gNUA8sJFmukM2mtbjpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.136.0/24
93.114.246.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9b:3d:7e:1b:10:81:f4:30:a6:0a:c8:15:cc:20:79:95:b7:
a9:fe:2c:be:91:e7:21:8d:5b:e2:62:45:f8:6d:3c:61:7d:d1:
52:ea:1f:2e:19:7c:a3:da:c5:64:ef:f7:ce:52:30:bb:f6:20:
bd:c5:79:72:56:61:19:20:ce:f9:21:63:45:0d:bb:a6:e7:2f:
2c:54:01:53:50:fd:c0:91:db:cc:b1:87:3d:e3:d8:95:c6:ff:
43:96:f8:16:c2:05:80:a5:92:ce:65:71:71:d3:db:55:5d:97:
87:dc:3f:6f:36:01:36:d9:28:da:88:23:03:52:30:7f:c8:23:
4f:4c:1c:c8:55:0f:7e:2f:16:58:32:fa:4d:03:eb:8f:96:a7:
0d:41:8a:f2:07:d6:0a:ef:bf:90:1a:c0:04:fb:6e:8f:35:1e:
ea:04:ae:b9:73:aa:94:09:ca:74:dd:f6:0b:96:71:e2:fd:6b:
93:28:a4:0f:ee:14:dd:16:69:a1:fa:ff:c6:1a:9f:bb:57:01:
91:f2:a2:b1:7a:a4:12:99:66:f6:b7:2c:fb:72:be:37:0e:3f:
fe:68:b7:82:08:e7:79:77:ca:e4:14:5a:59:84:95:0e:67:a8:
e8:50:b7:ab:69:e4:cc:2f:43:32:56:30:87:8e:0a:23:a7:5b:
47:fe:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org