Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jbrhwE4DZ9SAauxWlbabUvO-n3E.roa
File: jbrhwE4DZ9SAauxWlbabUvO-n3E.roa (raw, json)
Hash identifier: 43H/PTrzEycpFWGFQXyVksueRP88AsoGwh3w1KWGv30=
Subject key identifier: 8D:BA:E1:C0:4E:03:67:D4:80:6A:EC:56:95:B6:9B:52:F3:BE:9F:71
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01872D0893C66DCAE85CE567033D8C3CB1E0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jbrhwE4DZ9SAauxWlbabUvO-n3E.roa
Signing time: Wed 29 Mar 2023 11:02:29 +0000
ROA not before: Wed 29 Mar 2023 11:02:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 93.115.255.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
213.232.95.0/24 maxlen: 24
188.212.159.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
188.214.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:08:93:c6:6d:ca:e8:5c:e5:67:03:3d:8c:3c:b1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 29 11:02:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dbae1c04e0367d4806aec5695b69b52f3be9f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:21:34:d0:bc:c1:4d:59:cc:8c:6d:fc:27:75:
24:c7:3d:89:4c:1d:e3:db:8c:ae:58:8c:fb:c0:a9:
31:8c:f3:4d:63:21:88:82:f5:e3:3a:08:08:42:13:
93:9e:04:90:e7:2c:48:d4:1c:fd:e3:08:59:1e:f9:
c7:fc:a7:92:4f:8a:c9:42:c0:08:ab:69:57:39:c5:
f3:1d:8c:4c:28:ce:a1:7f:79:62:29:38:da:55:87:
2c:8d:17:e5:03:ee:78:c5:42:37:b5:a0:76:0b:8c:
1d:1b:cc:03:25:94:93:fe:bf:1d:ce:88:7c:e2:6c:
99:49:b4:80:42:4e:4b:25:2f:d5:a5:13:3f:48:47:
bc:6a:e4:9e:8b:99:ff:c7:0c:83:99:dd:5e:5a:f9:
77:cf:b6:f5:49:21:61:e1:89:62:54:3e:5c:c1:69:
17:ad:83:10:d7:da:2e:ee:34:0c:d3:dc:59:ac:19:
e1:59:df:13:12:84:61:d3:2e:07:f1:af:fd:4b:36:
ad:89:18:fa:70:99:ce:ef:b1:7c:64:ad:a5:a7:89:
93:54:d1:43:f6:47:da:07:0b:aa:8c:d5:70:0e:f9:
d4:48:62:b2:8c:55:81:b7:0b:9f:67:25:66:32:36:
8b:f5:22:a8:ee:14:7c:83:d5:a8:72:72:79:3e:b0:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BA:E1:C0:4E:03:67:D4:80:6A:EC:56:95:B6:9B:52:F3:BE:9F:71
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jbrhwE4DZ9SAauxWlbabUvO-n3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.135.0/24
93.115.255.0/24
188.212.159.0/24
188.213.202.0/24
188.214.208.0/23
213.232.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:87:64:98:b9:1d:88:e1:f8:d5:ee:0d:6d:3e:2a:5a:4e:8b:
ef:e0:74:10:62:94:70:f9:64:4f:c1:6f:33:d4:9a:df:ca:2b:
12:1e:e3:9d:f6:da:03:42:5c:af:ba:3d:ed:97:7f:a0:bf:2a:
c0:b8:34:82:54:9d:a8:93:c8:64:a2:70:65:6e:9b:fb:a2:6c:
63:0a:49:4d:05:e0:1e:ff:84:13:b0:31:41:90:21:60:f3:af:
4a:d7:eb:04:de:0c:61:4e:48:07:e8:71:11:41:56:e6:3a:b6:
06:69:60:dc:87:27:c0:0b:b0:fc:52:88:81:64:74:2e:7d:63:
5b:f7:4d:fd:1e:50:32:a9:ee:2e:7a:e3:71:13:ab:46:c7:83:
94:49:2b:66:c3:de:4d:96:09:c2:ea:b5:3f:6f:f5:fd:a8:28:
c4:ea:e8:4e:f7:0e:0b:10:70:54:ac:85:2e:09:37:8c:c7:cc:
db:b8:81:6c:58:6f:c9:b3:ab:54:ed:4a:93:9b:77:3e:3f:7c:
f3:bf:30:d3:69:6c:39:6d:fe:55:f4:68:78:bc:d9:2e:3a:37:
da:a1:d7:79:9d:56:91:47:51:b8:8e:66:75:31:35:bd:ad:14:
2c:4e:08:86:cf:a4:2e:1b:45:0a:21:7e:e6:21:7f:0a:cf:c2:
02:1f:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org