Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/o9AzlMJtgQw8cnRKtd74NzZU1PQ.roa
File: o9AzlMJtgQw8cnRKtd74NzZU1PQ.roa (raw, json)
Hash identifier: DwZNRLOOU3Hq5kW56BhQaapCxSPEfJfDx5Mnn4U1Gpo=
Subject key identifier: A3:D0:33:94:C2:6D:81:0C:3C:72:74:4A:B5:DE:F8:37:36:54:D4:F4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CA0DC42A16D0A2A0EB83634009AEE8A7A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/o9AzlMJtgQw8cnRKtd74NzZU1PQ.roa
Signing time: Mon 25 Dec 2023 12:03:58 +0000
ROA not before: Mon 25 Dec 2023 12:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47392
IP address blocks: 93.115.255.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a0:dc:42:a1:6d:0a:2a:0e:b8:36:34:00:9a:ee:8a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 25 12:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3d03394c26d810c3c72744ab5def8373654d4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:88:8f:1b:2e:5f:21:68:b0:ea:b4:3c:2e:
bc:a0:38:62:ed:32:ea:d1:d7:ae:c9:28:2a:a1:cb:
94:1b:cd:a2:46:19:f9:49:78:60:fe:00:6d:97:58:
9b:8e:de:c0:6a:69:4c:77:e4:6e:3a:bf:44:50:ee:
b8:96:f8:44:cd:02:c3:b8:5f:fd:ec:61:82:e6:81:
f2:36:fb:5d:ab:0a:03:73:86:74:d6:42:e6:a5:02:
25:33:ac:91:53:31:f8:69:a0:d6:a6:28:17:eb:9d:
2e:22:c9:83:69:fb:04:dc:77:c1:3a:1c:f5:dc:7d:
ad:be:29:8a:99:c3:27:a1:a0:cd:3c:2c:67:aa:be:
71:ec:bf:48:c0:42:66:19:6d:6e:68:6c:fa:19:43:
ad:5c:a1:4d:64:3b:5c:8d:f8:ea:90:f3:51:d8:90:
fb:18:fb:82:56:30:cd:62:dd:18:a2:7d:56:48:91:
a6:35:04:a6:e7:a5:82:33:17:b9:d3:a7:2c:59:4d:
b1:af:52:36:e7:2c:7f:ae:84:e0:27:cb:0d:59:d0:
b5:f2:b5:1a:de:1a:e5:f0:ca:c7:f2:64:24:f6:57:
34:5e:a2:36:35:23:ac:ae:8b:20:fb:5a:37:12:7a:
ed:36:b9:dd:9b:cf:69:f2:d8:1a:9a:6e:b0:b8:a8:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:33:94:C2:6D:81:0C:3C:72:74:4A:B5:DE:F8:37:36:54:D4:F4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/o9AzlMJtgQw8cnRKtd74NzZU1PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.255.0/24
188.213.202.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ed:e4:fd:76:6b:be:f9:0c:7a:63:5f:9a:b4:c4:0b:a4:99:
9f:52:29:ce:1b:61:cd:9e:e0:73:70:49:b7:47:c5:e5:9e:2f:
ca:f9:52:a5:f3:5d:40:bd:45:66:37:9d:38:92:72:4f:3e:ad:
d6:be:75:b4:d2:15:f4:be:14:8b:ba:bc:ea:4f:08:44:7a:1b:
a5:e0:fd:56:14:11:0d:b0:2f:fc:67:a0:d8:1a:bc:a6:78:24:
31:7e:68:6f:de:09:f3:7c:a8:a5:04:d1:43:2c:56:52:b5:3a:
66:00:96:ca:60:79:8d:94:26:70:12:03:96:99:aa:2c:14:30:
fb:f1:18:2b:ad:c5:46:6c:fa:2f:ce:f1:3f:4f:70:a4:96:d5:
42:33:d2:54:17:1c:57:78:fb:8a:26:86:e6:4e:f8:50:df:09:
72:0d:ba:b8:85:ba:4d:68:3e:98:93:fb:6d:fa:55:f8:87:d7:
7a:93:b6:eb:39:14:8d:40:f2:44:e7:25:d2:71:7f:1a:39:b8:
df:0a:9c:0e:b2:d6:90:f1:4e:e9:fa:84:30:8f:62:f7:c8:19:
24:f4:f7:94:f1:71:47:1c:09:f9:56:f9:a6:65:94:2e:77:62:
e9:1a:3b:f2:60:b8:4b:f4:ca:51:89:d8:cf:74:4d:78:93:77:
a4:72:c6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 09:58:04 2023 by rpki-client on console-fra.rpki-client.org