Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nza4065rkaAx3mtFi0BoA6OqDi4.roa
File: nza4065rkaAx3mtFi0BoA6OqDi4.roa (raw, json)
Hash identifier: KSePhJNdVTSaQSGGnRZE2zDjuOzKjuxR5LwgIv65afE=
Subject key identifier: 9F:36:B8:D3:AE:6B:91:A0:31:DE:6B:45:8B:40:68:03:A3:AA:0E:2E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186C7A525200FB86C25EB85D47BB39F11FF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nza4065rkaAx3mtFi0BoA6OqDi4.roa
Signing time: Thu 09 Mar 2023 18:32:14 +0000
ROA not before: Thu 09 Mar 2023 18:32:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 92.114.84.0/24 maxlen: 24
89.36.22.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:a5:25:20:0f:b8:6c:25:eb:85:d4:7b:b3:9f:11:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 9 18:32:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f36b8d3ae6b91a031de6b458b406803a3aa0e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:90:09:55:1f:3b:2d:d3:cf:6b:bc:47:af:
5c:0f:1b:69:0e:28:aa:a4:22:bc:e2:c3:5b:87:2d:
ee:86:65:d3:d2:78:0e:c8:6e:73:cd:70:d1:62:fa:
46:b6:5f:d0:15:ce:d9:fc:be:ae:72:f2:46:61:7a:
f3:69:4c:c4:d8:60:7a:b6:13:1b:02:15:b9:b7:69:
fa:fd:6a:47:45:02:1a:e7:2c:91:25:97:b1:3a:7f:
e6:f9:58:9d:7e:1c:94:4b:e1:86:0d:14:41:ee:e4:
a1:3b:a4:c9:cd:3f:50:7b:8c:62:6a:a7:47:ee:f2:
fe:3d:f3:1e:b9:48:72:df:dd:e6:c6:58:c8:1b:fc:
5d:c2:ca:e4:45:68:ca:5d:27:0b:e3:15:6a:ac:dd:
8d:cd:46:21:a6:df:ec:42:e0:71:0d:4b:a4:4b:67:
90:13:36:c8:54:5e:55:b2:d7:19:0b:d9:62:bb:a0:
c9:d1:8b:f7:9a:8d:c8:05:ed:5a:e5:ff:d4:e8:ba:
72:5a:86:d9:4d:7d:6a:5c:8d:36:b1:07:d4:06:59:
cd:c4:2c:d5:66:e8:dc:89:ac:01:d4:4c:6d:1b:66:
e9:3e:c7:1a:e9:15:d7:f8:f6:a9:0d:34:e7:5a:f7:
08:76:63:7c:a8:e6:2f:27:80:05:cd:6a:38:d8:e6:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:36:B8:D3:AE:6B:91:A0:31:DE:6B:45:8B:40:68:03:A3:AA:0E:2E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nza4065rkaAx3mtFi0BoA6OqDi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.85.0/24
89.36.22.0/24
92.114.84.0/24
188.240.233.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c0:65:35:bc:9f:b9:99:a6:b8:c3:7f:a0:13:7b:6f:39:0d:
27:2a:9e:0b:2e:cc:4b:34:74:9b:16:01:50:c1:f6:76:7b:ff:
4b:fe:ad:f2:cd:9a:c9:26:42:48:5a:ca:ea:d3:84:b0:f2:84:
22:42:53:27:33:ac:9d:80:89:0a:46:6a:36:b2:5a:f1:8c:d3:
71:15:35:4a:fe:fc:50:bf:ac:cd:cb:b2:a1:5a:ba:b7:62:31:
1a:01:d3:9a:54:4a:43:27:11:ff:fa:d3:04:98:2c:0a:86:d0:
ad:d3:8f:0d:1a:23:54:de:cc:51:f5:26:7c:52:cb:4a:d2:35:
37:3b:61:82:2c:92:8e:70:ff:0a:9c:cd:9c:62:55:20:9b:c2:
ab:4f:88:89:6a:25:d4:45:ec:4f:a8:47:20:0f:fc:6d:bc:15:
93:b1:ef:02:c3:2a:21:d1:53:ec:7c:bd:30:e6:e2:a3:bb:f3:
38:9f:9a:11:67:64:6d:f0:98:c1:a0:da:a6:0f:a5:8a:6a:d5:
ce:e7:ae:65:b2:6b:7c:98:28:f1:6d:e7:94:80:da:c8:62:bc:
55:8f:57:20:76:bc:1a:75:dc:89:ef:78:8c:4f:7b:f5:24:36:
d1:5e:3d:90:27:e8:a7:d6:87:89:9f:b8:9a:14:56:85:47:a6:
63:b4:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org