Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jEcKPsFe_zIBgdeB18OoceqP_dw.roa
File: jEcKPsFe_zIBgdeB18OoceqP_dw.roa (raw, json)
Hash identifier: EKC6poTmCbmt63KJW3lVW2FTrzwKWMUudlPYy5Qcjqw=
Subject key identifier: 8C:47:0A:3E:C1:5E:FF:32:01:81:D7:81:D7:C3:A8:71:EA:8F:FD:DC
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A75681EEBA1306E2ADD5FA0819367526C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jEcKPsFe_zIBgdeB18OoceqP_dw.roa
Signing time: Fri 08 Sep 2023 15:27:52 +0000
ROA not before: Fri 08 Sep 2023 15:27:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 93.115.255.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:68:1e:eb:a1:30:6e:2a:dd:5f:a0:81:93:67:52:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 8 15:27:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c470a3ec15eff320181d781d7c3a871ea8ffddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:a8:60:40:f8:37:9d:4f:d3:a0:ba:f1:ad:
2b:f3:5b:32:03:fa:d8:7b:98:5e:f8:18:0a:6a:86:
3b:f4:4e:81:22:d8:b2:7b:dc:bc:3b:b7:28:be:dc:
53:bd:1d:93:1b:a2:42:8e:81:d7:94:ab:3a:ff:04:
6a:0e:68:1a:7c:9b:98:9a:8d:24:a1:8c:8e:15:04:
e4:ee:a8:90:59:9c:6e:57:75:e2:5e:7b:76:4b:c0:
97:d3:c4:09:33:c7:bf:1b:f7:5b:d9:4d:36:e4:c6:
df:cc:e3:4f:6b:de:73:3a:9b:79:b7:44:3c:8d:ab:
10:8d:67:14:6a:3e:d4:d5:a9:46:37:67:53:19:05:
a1:cb:13:79:5b:45:62:d1:aa:79:fc:4f:3d:4e:d2:
4e:ee:44:83:12:61:2a:f2:aa:b7:07:20:2b:7a:df:
2e:a3:8f:a7:f7:f1:45:a7:08:ca:ec:42:43:02:a4:
2d:fe:34:be:0c:a8:05:50:6f:44:cc:12:61:16:e5:
7d:72:98:5f:cc:66:ab:08:52:dc:91:6e:bb:0f:b9:
7d:ac:a4:ea:e3:73:bf:c6:64:ea:ba:08:0f:31:ba:
50:88:0e:42:15:66:68:59:82:c8:59:60:37:2f:3e:
85:ca:37:f5:cf:9e:e7:6c:93:a8:0f:62:67:83:be:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:47:0A:3E:C1:5E:FF:32:01:81:D7:81:D7:C3:A8:71:EA:8F:FD:DC
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jEcKPsFe_zIBgdeB18OoceqP_dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.255.0/24
188.214.209.0/24
Signature Algorithm: sha256WithRSAEncryption
23:8f:9f:01:93:20:6e:90:03:80:58:37:77:7c:d0:d1:9e:d4:
43:11:1d:eb:95:95:8d:2f:75:3e:af:c0:fc:85:52:19:1a:86:
a0:56:92:57:b3:ea:ea:38:f1:29:02:71:4f:e6:a8:88:52:cb:
ff:e7:e5:b7:d1:cf:49:68:9e:1e:55:4d:f0:f0:72:93:d3:0f:
25:d0:60:5c:ec:20:76:34:8a:31:ff:fe:f3:ac:f8:46:02:2d:
1d:db:f5:2d:41:28:b5:20:37:4e:35:54:21:8c:51:fd:69:24:
8d:9d:db:4a:cc:e3:80:60:fd:54:6f:b7:b9:26:10:b6:de:e5:
0c:f5:69:ad:d0:e7:76:29:db:be:e3:e0:5d:d3:90:53:1e:ba:
1d:46:6c:2a:b5:2d:4c:65:15:0b:06:59:27:8d:84:d1:1d:0c:
5d:a3:18:92:c2:c1:20:fe:2b:18:ed:2b:4c:1c:8e:50:6a:19:
fc:51:2b:7c:8a:84:eb:cc:ea:c7:61:ee:1b:e6:6e:d7:9f:fc:
df:44:ce:e3:7f:c5:20:dd:07:79:7c:d8:2d:7f:bf:3f:30:03:
68:e7:7b:78:be:75:b5:dd:72:ac:78:e2:60:aa:fa:86:df:73:
c1:36:c9:c5:0f:56:45:bb:6c:c4:22:20:fb:18:05:c9:24:70:
d9:d9:83:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 12:15:51 2023 by rpki-client on console-fra.rpki-client.org