Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lUR6_dGRpZqnWrUFCbzFao_ZDi0.roa
File: lUR6_dGRpZqnWrUFCbzFao_ZDi0.roa (raw, json)
Hash identifier: MYekK7lYU8EFABT5rDevuXJn1dlrjkefgBu3I2LYyno=
Subject key identifier: 95:44:7A:FD:D1:91:A5:9A:A7:5A:B5:05:09:BC:C5:6A:8F:D9:0E:2D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01862FB311787F160ED8939441A24C34888F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lUR6_dGRpZqnWrUFCbzFao_ZDi0.roa
Signing time: Wed 08 Feb 2023 06:25:09 +0000
ROA not before: Wed 08 Feb 2023 06:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2f:b3:11:78:7f:16:0e:d8:93:94:41:a2:4c:34:88:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 8 06:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95447afdd191a59aa75ab50509bcc56a8fd90e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:c8:b6:c1:30:06:8d:b7:b6:5c:10:5c:1f:
cd:36:21:17:3a:49:75:57:ba:1a:76:ce:ed:fe:41:
71:dc:38:45:80:8a:d5:51:b7:ac:4b:b8:6e:ff:97:
4c:af:42:14:da:ba:f7:e8:53:33:a7:38:e3:66:80:
b1:8a:c2:30:9f:c5:30:cd:cd:57:7b:79:58:24:b6:
dc:b5:b1:77:a5:fc:f9:66:46:3c:3f:5a:bf:e2:2c:
0e:a5:05:5d:57:dc:06:0e:12:f9:52:76:5f:e7:4b:
15:5c:e3:50:e6:4a:24:e0:57:58:00:1a:36:4b:0d:
7d:f1:1e:8e:79:d7:ca:2f:22:83:36:87:ac:f4:8a:
75:e3:58:40:7d:9b:fc:c1:bf:0d:15:c7:dc:8b:31:
23:0c:0d:0e:ed:78:22:e8:73:ee:e6:8d:95:13:31:
fb:94:cd:2c:67:7b:df:4d:c3:d1:1f:d0:38:cd:8d:
70:2a:86:a9:cb:5a:d6:47:40:24:10:f6:98:95:2d:
c6:fd:f4:ec:6f:96:ec:3c:2a:95:47:ea:72:42:e3:
4b:6c:dd:25:9c:65:0e:ae:26:bb:d6:2c:ef:33:34:
c6:fb:44:a4:e1:04:de:5e:22:bf:d7:98:6b:85:10:
41:c6:c9:78:40:69:69:96:98:48:dd:af:be:42:2f:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:7A:FD:D1:91:A5:9A:A7:5A:B5:05:09:BC:C5:6A:8F:D9:0E:2D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lUR6_dGRpZqnWrUFCbzFao_ZDi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.182.0/24
Signature Algorithm: sha256WithRSAEncryption
75:91:27:f8:b2:ce:93:88:3f:15:c8:cd:67:e9:96:09:29:fc:
28:05:df:63:06:ae:31:5c:1d:a7:5d:97:d3:74:98:d3:43:d6:
7f:56:bb:38:f2:ab:45:fb:8f:c2:2b:c8:d5:2d:d6:f8:b5:a7:
7c:89:32:b9:70:d7:69:1e:b5:66:60:98:67:1d:7a:82:d8:c4:
39:9b:7b:ac:e5:31:e1:78:b6:77:3d:3d:5d:d7:96:5d:58:8f:
7e:c5:52:6c:e0:ab:72:79:a7:92:6b:9d:5d:71:8a:08:ee:41:
b8:90:cb:b0:3a:ac:80:ca:ab:50:3f:7c:a7:22:4e:e6:bc:9d:
61:06:7c:9b:19:70:68:5b:f4:2b:b4:b1:e6:25:f8:51:75:a2:
83:45:ef:fa:06:80:69:4e:0c:30:38:a5:cc:13:65:7a:24:30:
1a:6d:ba:bf:23:6d:bf:42:00:23:5f:bc:6c:70:49:c0:70:b7:
d3:dd:7b:60:c9:51:a4:30:ca:39:5e:3a:ef:df:0e:04:c5:21:
db:65:7a:55:d2:74:a8:64:39:bc:f2:f7:4d:d0:67:85:6f:f3:
60:3b:26:a4:48:0f:48:f6:df:dd:f1:d4:e6:5b:a1:db:60:df:
f4:64:7f:af:46:ed:c7:c5:13:b5:b9:5d:9d:43:97:a9:17:99:
04:13:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org