Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kPoNQSbXP7S-5fs0289P_Mr-Kco.roa
File: kPoNQSbXP7S-5fs0289P_Mr-Kco.roa (raw, json)
Hash identifier: sXpLT1mYdzasodrweHFCR8cFsJ3FB4vXsmO5k1HJZog=
Subject key identifier: 90:FA:0D:41:26:D7:3F:B4:BE:E5:FB:34:DB:CF:4F:FC:CA:FE:29:CA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018721EF0F27421B7F6A81BFF2C1895AE0FB
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kPoNQSbXP7S-5fs0289P_Mr-Kco.roa
Signing time: Mon 27 Mar 2023 07:18:47 +0000
ROA not before: Mon 27 Mar 2023 07:18:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 178.239.200.0/24 maxlen: 24
91.209.12.0/24 maxlen: 24
185.229.105.0/24 maxlen: 24
62.197.132.0/24 maxlen: 24
62.197.128.0/24 maxlen: 24
185.245.236.0/24 maxlen: 24
45.159.153.0/24 maxlen: 24
103.205.27.0/24 maxlen: 24
103.205.25.0/24 maxlen: 24
223.27.114.0/24 maxlen: 24
178.239.193.0/24 maxlen: 24
178.239.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:ef:0f:27:42:1b:7f:6a:81:bf:f2:c1:89:5a:e0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 27 07:18:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90fa0d4126d73fb4bee5fb34dbcf4ffccafe29ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:64:bc:ea:1c:7a:08:ae:97:71:ae:bd:91:
ab:a1:a6:8c:e6:ef:44:4a:7c:3b:19:91:71:f4:f6:
74:36:b0:26:36:af:cb:56:04:f2:7f:3b:97:e3:8a:
34:b5:0c:7a:17:21:79:79:53:8b:53:cc:69:b6:dc:
db:af:9c:82:7e:c5:40:82:a7:be:e0:53:28:8a:3d:
11:ba:8e:80:d7:4c:e8:a6:77:5d:85:7d:a7:7f:ba:
2c:07:b7:57:73:3e:52:5d:6b:3d:8d:dc:79:b3:9a:
87:e1:e4:a0:dd:9f:f3:75:f3:94:f7:32:2e:40:e5:
cd:96:d3:1f:9a:d9:ba:94:0c:b7:1f:ab:a7:96:83:
61:79:a2:0b:63:0a:23:74:85:c9:d7:99:69:2a:01:
71:9e:a6:e3:73:13:95:6e:91:55:8c:ab:43:e1:ef:
97:c6:79:37:cf:37:a3:72:90:a8:98:50:35:4a:9c:
35:45:6e:b8:6b:8d:d8:c0:e4:c8:aa:23:d0:d0:e7:
ae:49:5e:09:1a:18:0e:0b:4b:5a:60:04:f2:58:ef:
82:b5:25:1b:09:5b:ac:4b:24:a8:7a:f2:e2:9e:c7:
03:e5:d5:88:d2:12:01:e5:1d:36:ee:1e:03:94:e7:
ac:4a:56:6d:09:79:54:3c:69:12:36:0c:f7:b1:cb:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FA:0D:41:26:D7:3F:B4:BE:E5:FB:34:DB:CF:4F:FC:CA:FE:29:CA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kPoNQSbXP7S-5fs0289P_Mr-Kco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.153.0/24
62.197.128.0/24
62.197.132.0/24
91.209.12.0/24
103.205.25.0/24
103.205.27.0/24
178.239.193.0-178.239.194.255
178.239.200.0/24
185.229.105.0/24
185.245.236.0/24
223.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
81:83:42:75:7c:ee:a5:6f:ac:f4:8b:33:13:e4:5a:18:a3:7f:
c1:f1:09:26:6b:3d:65:fe:b5:b6:bb:63:fb:15:85:bc:12:88:
93:63:db:2e:df:42:ea:c1:40:40:4e:c1:32:9f:2a:aa:7a:30:
35:99:3e:1c:40:85:34:3b:ec:9b:b1:b6:38:e1:96:5b:a6:ed:
40:0b:3b:72:7f:ad:0c:85:18:0e:6c:e1:4d:f6:9a:3a:38:0c:
05:1f:13:c2:bc:87:62:20:2b:f0:62:76:5a:21:0c:6d:c5:b7:
3f:bb:7f:ec:e8:15:0b:ea:66:cc:23:24:37:c1:9f:db:6b:5c:
f6:8b:07:a3:7c:93:13:77:05:2a:af:e3:95:27:e5:7d:93:26:
d3:96:1d:63:42:e4:5e:ea:ff:de:9a:cc:0d:0b:a9:7c:39:74:
14:b7:9e:c0:cf:23:56:76:7b:d1:ca:05:0c:04:b7:9c:b0:b7:
64:f9:94:e4:26:56:78:84:f0:4a:e1:59:92:c5:1f:8f:af:47:
93:a7:70:e9:b0:6b:9c:70:d0:89:d4:88:bc:70:74:5b:8d:02:
0c:17:53:78:48:ec:09:5e:1f:64:e6:e2:09:e6:40:a0:2e:30:
e7:3e:74:61:88:4b:24:4f:2c:82:ca:2a:73:06:0d:6e:3e:5e:
ee:9c:f2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org