Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ivQgHgJghaDp3Ue8DRF9wmLeyMQ.roa
File: ivQgHgJghaDp3Ue8DRF9wmLeyMQ.roa (raw, json)
Hash identifier: 8hTMJZ0fPYJJ3l+HUgN+K2EZzKOAl1bJ+8vV7kRE3ro=
Subject key identifier: 8A:F4:20:1E:02:60:85:A0:E9:DD:47:BC:0D:11:7D:C2:62:DE:C8:C4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CCFC514E368638AA603FD846C5189019C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ivQgHgJghaDp3Ue8DRF9wmLeyMQ.roa
Signing time: Wed 03 Jan 2024 14:40:48 +0000
ROA not before: Wed 03 Jan 2024 14:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203394
IP address blocks: 89.35.154.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jan 2024 06:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:c5:14:e3:68:63:8a:a6:03:fd:84:6c:51:89:01:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 3 14:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8af4201e026085a0e9dd47bc0d117dc262dec8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:fb:8b:51:b7:5b:48:d1:23:4a:6b:1f:6f:
32:21:ea:3d:4d:6f:f7:4d:95:51:f0:ca:10:72:31:
ae:69:15:10:e9:c4:8e:74:49:71:9f:31:81:0f:d4:
c8:8e:d4:43:4f:1f:9b:97:3c:4a:bb:f3:1d:cc:58:
b5:5b:86:e5:bb:0b:50:26:d9:64:9c:06:e8:a8:1d:
68:70:6a:39:c5:d5:67:b8:5c:0f:3d:06:9f:26:c9:
0e:7c:c6:35:d9:85:ba:f2:03:dc:e7:1d:1e:78:c2:
4a:8d:bb:ad:53:74:de:87:f4:51:5f:dd:64:d3:18:
41:90:ca:b3:1d:ec:57:b9:f8:0b:ee:1a:46:fa:6b:
c0:62:70:74:54:8a:b2:0c:43:0f:98:b2:52:dc:aa:
2b:e0:31:3b:61:7e:f7:05:b2:a3:77:41:22:dd:66:
4f:79:b1:29:7a:c5:2c:7e:66:97:2d:63:e3:09:48:
a7:97:a6:98:39:ca:53:18:1f:6c:0a:af:ec:0d:fe:
f0:60:3c:69:1b:95:b9:52:6c:68:18:4b:9c:0c:a8:
95:de:0e:4c:9e:b8:38:dc:1b:aa:41:8a:9a:cd:67:
d5:64:7a:d9:38:24:c3:ad:b7:7f:8d:c9:a6:0a:c7:
e5:b4:b2:b1:db:69:99:7b:51:a8:29:2d:b1:71:02:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F4:20:1E:02:60:85:A0:E9:DD:47:BC:0D:11:7D:C2:62:DE:C8:C4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ivQgHgJghaDp3Ue8DRF9wmLeyMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.154.0/24
188.240.230.0/24
188.240.232.0/24
Signature Algorithm: sha256WithRSAEncryption
33:41:cd:3f:d1:8d:31:54:c1:43:b3:b3:a0:b1:19:af:f3:80:
9b:df:bf:0a:55:1d:21:21:48:58:4f:04:32:1d:dd:09:06:23:
d9:36:19:d0:a7:8a:a1:e6:02:28:72:fb:27:a4:ac:5b:58:e3:
f6:8f:31:72:a5:2a:04:fe:1a:b7:ab:4f:10:0a:51:bf:a0:cc:
2d:0e:d7:1c:4d:8b:f9:c5:3d:be:93:6e:eb:4b:05:39:46:af:
c2:8e:e2:0f:71:7a:11:cc:80:d9:16:3f:eb:19:d7:c0:96:8c:
2a:c0:8f:1f:e3:8a:2d:3a:bc:b5:12:04:ef:f6:ec:29:c9:c9:
76:2f:28:63:a2:de:11:f2:bc:6d:79:44:52:39:4a:3e:dd:1a:
f8:64:36:fa:77:83:6c:9e:d4:ab:89:dd:f6:ec:0f:43:0e:a2:
cb:ec:57:24:aa:4e:67:51:aa:b2:bc:3a:89:34:65:3a:5f:95:
45:1e:a7:65:3a:25:00:0f:ee:da:54:b7:2f:d5:67:5f:6c:34:
c0:3d:09:d4:2b:97:38:a7:00:f7:c9:69:87:e7:39:03:4f:f4:
aa:f4:38:ba:b3:86:6b:b1:02:92:65:9b:b5:dc:1a:6d:54:3d:
31:fc:73:85:42:0b:86:7b:81:a7:53:e8:08:f6:bb:c6:29:28:
30:c1:d8:e5
-----BEGIN CERTIFICATE-----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 at Sat Jan 13 09:11:20 2024 by rpki-client on console-ams.rpki-client.org