Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/m-NsUDU1ErdW40OZRXnhj8BdWYg.roa
File: m-NsUDU1ErdW40OZRXnhj8BdWYg.roa (raw, json)
Hash identifier: QoTqFRmLYHR2czCqztkhxIhheYs6dXwyn+uqHO4UN1c=
Subject key identifier: 9B:E3:6C:50:35:35:12:B7:56:E3:43:99:45:79:E1:8F:C0:5D:59:88
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0188A4B039518B39D3E4AA25F5FB77EAF52B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/m-NsUDU1ErdW40OZRXnhj8BdWYg.roa
Signing time: Sat 10 Jun 2023 09:43:12 +0000
ROA not before: Sat 10 Jun 2023 09:43:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 93.114.193.0/24 maxlen: 24
188.240.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:b0:39:51:8b:39:d3:e4:aa:25:f5:fb:77:ea:f5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 10 09:43:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9be36c50353512b756e343994579e18fc05d5988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:45:5a:41:e3:5e:37:bb:64:8f:d8:b4:11:
bc:57:02:03:8f:0b:42:85:cb:1a:1b:67:20:e4:de:
09:aa:c7:5a:d2:24:36:7a:2c:94:72:d1:89:da:40:
c5:7f:ca:10:1e:27:b0:10:c1:c9:b8:4c:f9:14:cc:
95:7b:1d:be:4d:31:6a:8a:40:23:0d:a6:23:55:db:
d8:b8:42:3d:7d:0d:57:d2:83:ac:29:db:ce:cc:c9:
b8:95:66:f2:d0:12:29:8b:40:5c:88:f6:39:bf:c2:
66:e9:2c:62:b1:e9:ba:5b:9b:f5:ae:c2:81:23:8b:
2e:e1:1d:6c:cc:50:f5:07:49:94:fb:29:33:d7:4f:
d9:4b:31:fe:71:7d:e8:29:96:8a:1f:79:3a:f5:bd:
d1:a4:ef:aa:43:fa:b3:ad:c3:6d:07:a5:fb:fa:34:
a3:fe:a3:1d:69:cb:ed:59:db:15:d7:9b:97:33:a2:
c2:db:85:0c:c6:1e:f6:0f:21:79:e5:be:b4:43:ad:
4e:d5:dc:28:78:8b:05:59:9d:9f:29:83:38:45:39:
1a:5f:60:9d:61:15:f9:f3:da:e1:27:44:d3:8d:4e:
54:99:da:05:9a:a3:43:28:24:23:62:b0:67:e0:d9:
ec:1f:76:8f:c2:07:96:8d:b3:fc:59:ce:45:12:87:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E3:6C:50:35:35:12:B7:56:E3:43:99:45:79:E1:8F:C0:5D:59:88
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/m-NsUDU1ErdW40OZRXnhj8BdWYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.193.0/24
188.240.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3a:51:0e:92:5c:4d:81:e5:d3:37:1b:74:c3:97:72:d5:8b:
e1:ff:96:98:e7:3e:03:f2:92:df:7e:94:07:97:1e:d5:fe:a6:
10:10:13:88:b3:d9:d4:b7:bc:c7:9a:69:c2:9a:9c:85:67:86:
cf:f9:04:3c:5d:9d:ab:a9:e1:ef:75:03:dc:84:e3:18:2e:5f:
e7:ca:78:cd:e9:ef:d8:ff:0c:fe:5e:98:40:9e:8a:4d:da:c6:
55:f4:23:25:c6:23:02:c8:fc:a9:92:b4:b2:c7:0e:32:59:d6:
70:b2:14:d4:68:a3:af:e7:18:96:68:36:c0:59:25:53:51:d3:
98:f2:bd:36:b9:1d:eb:ab:95:91:8e:75:70:e7:2b:a8:a3:b7:
35:a3:58:66:c7:b0:43:77:6e:a0:17:32:3c:3c:a0:af:21:17:
3e:5d:55:5e:11:af:48:68:dc:14:9e:95:e1:3f:38:d3:d9:ac:
66:cb:35:65:8c:1d:f5:88:2e:43:40:94:c5:e2:e5:b9:98:34:
90:14:f1:dc:84:50:90:96:0d:3f:ae:d8:b4:46:6b:70:fb:18:
1b:8b:67:f8:81:0e:8d:91:36:a9:97:f3:b1:47:e0:d6:5e:ba:
9a:3a:48:d5:60:b1:d7:26:3b:76:18:44:6e:94:b3:85:f0:b6:
a6:41:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org