Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/j8LtHqZ7WURnznyTmFDwQoI0FEs.roa
File: j8LtHqZ7WURnznyTmFDwQoI0FEs.roa (raw, json)
Hash identifier: Js6nOJm9QPUw+tPmRvC1rspQilQcvTYHboVG85FUdw4=
Subject key identifier: 8F:C2:ED:1E:A6:7B:59:44:67:CE:7C:93:98:50:F0:42:82:34:14:4B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01863556D7440ED19DA0CB0562CAF97024E3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/j8LtHqZ7WURnznyTmFDwQoI0FEs.roa
Signing time: Thu 09 Feb 2023 08:42:09 +0000
ROA not before: Thu 09 Feb 2023 08:42:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 92.114.85.0/24 maxlen: 24
193.23.129.0/24 maxlen: 24
193.23.128.0/24 maxlen: 24
213.232.94.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
45.156.159.0/24 maxlen: 24
185.255.37.0/24 maxlen: 24
188.240.225.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:56:d7:44:0e:d1:9d:a0:cb:05:62:ca:f9:70:24:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 9 08:42:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fc2ed1ea67b594467ce7c939850f0428234144b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:5d:79:f8:35:d3:80:30:cc:6f:77:5b:fb:
7f:62:c4:48:1c:e9:b7:3b:5b:0d:08:ae:ae:ac:fd:
91:66:94:00:2a:ab:ea:21:d0:6c:c6:3b:37:2a:0e:
2c:02:6a:c6:06:24:56:87:56:56:08:71:b9:01:1d:
6f:fd:8a:8c:35:5e:b0:7f:77:62:80:7b:45:fc:8a:
91:5a:3f:04:48:22:82:48:2f:02:3c:09:de:f1:1b:
e8:54:19:d2:ef:e1:41:bf:16:35:9b:92:a6:5f:ae:
11:e2:0f:42:13:cf:34:e8:5b:71:a6:3c:86:11:e6:
52:ad:80:d1:1c:19:d7:55:80:72:97:25:72:5b:e3:
57:a2:d7:44:0a:61:4c:b3:02:4d:3d:55:4a:bc:c1:
f9:9d:99:09:e3:08:30:05:78:02:51:fc:2c:a9:81:
65:2a:c5:83:e6:94:fd:65:2a:8b:94:91:e7:de:60:
dd:73:78:e9:99:4c:4c:e7:37:3b:f9:cf:63:5d:e5:
c0:f1:9e:19:48:4f:8d:5c:0e:8a:d9:df:e8:d6:67:
b7:6e:6d:c3:77:95:ac:0d:6e:26:86:f0:d3:cd:18:
f7:12:34:5d:50:4f:67:60:24:00:d9:34:0b:5f:b6:
dc:7e:60:8c:c2:3a:99:17:5f:61:74:9d:9b:1c:6c:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:ED:1E:A6:7B:59:44:67:CE:7C:93:98:50:F0:42:82:34:14:4B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/j8LtHqZ7WURnznyTmFDwQoI0FEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.159.0/24
92.114.85.0/24
185.135.143.0/24
185.255.37.0/24
188.240.225.0/24
188.240.230.0/24
193.23.128.0/23
213.232.94.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b4:e9:a0:29:fe:ef:f6:77:21:2c:e1:54:14:6a:4d:19:c5:
36:e1:95:13:cf:ed:45:31:47:e0:17:0c:4c:10:a2:91:c4:a7:
cc:7e:e4:db:9b:ac:32:5d:73:66:da:7c:f8:6f:19:06:58:d8:
6a:fb:17:fd:42:47:1b:87:6e:6e:1a:e7:5d:bb:67:82:fb:5a:
eb:b3:b4:bb:18:5c:3a:e2:bd:46:17:96:02:4c:e3:c4:b3:25:
77:99:2a:50:44:9f:bc:09:88:85:d5:43:d2:49:4b:13:76:cf:
d7:75:77:90:77:62:40:24:7e:0f:2e:aa:8f:a4:17:54:01:c5:
7b:aa:b0:d6:d1:4f:41:96:bf:45:c0:24:04:e1:f4:99:94:08:
b9:bb:36:8f:11:f6:79:af:b9:a1:62:7e:3a:1d:f5:ba:02:1b:
ba:92:7d:dd:d3:7f:5c:55:6c:ce:9a:6a:29:ba:a9:05:ff:59:
d5:be:e6:14:6d:ee:04:77:6e:40:b6:51:cd:76:12:d4:87:23:
91:b3:4b:a3:88:9c:12:72:48:d9:18:56:37:6d:13:72:5a:59:
91:cd:fc:9c:e2:bd:06:63:29:1b:f9:a4:1a:af:76:46:1f:86:
76:20:e7:45:79:d4:79:95:3d:13:27:61:68:2a:fa:1f:a9:0b:
b2:e0:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org