Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/q9w982lH9jpA5gaK0NI0mdXJhjo.roa
File: q9w982lH9jpA5gaK0NI0mdXJhjo.roa (raw, json)
Hash identifier: GZQraZB3TZhADrP6wjLQoBTNnMOQZVkySd09lJubH0A=
Subject key identifier: AB:DC:3D:F3:69:47:F6:3A:40:E6:06:8A:D0:D2:34:99:D5:C9:86:3A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01867461E37D710E87DC2D86AF2DCCA4D351
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/q9w982lH9jpA5gaK0NI0mdXJhjo.roa
Signing time: Tue 21 Feb 2023 14:30:17 +0000
ROA not before: Tue 21 Feb 2023 14:30:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 93.115.254.0/23 maxlen: 24
87.247.148.0/24 maxlen: 24
185.255.170.0/23 maxlen: 24
185.241.210.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:61:e3:7d:71:0e:87:dc:2d:86:af:2d:cc:a4:d3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 21 14:30:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abdc3df36947f63a40e6068ad0d23499d5c9863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f1:05:1b:13:61:3b:ac:43:3d:d4:b7:cf:0c:
79:8e:26:bb:ae:0d:ef:85:fd:c1:d0:98:94:53:4b:
4e:f9:ab:35:81:19:be:11:fc:97:92:f7:45:26:99:
71:5d:ff:63:46:5a:bc:c7:48:0f:67:5d:ca:cc:53:
17:01:47:86:1e:3f:3d:aa:19:9b:45:e3:b4:94:22:
9e:da:49:39:ce:96:a1:bf:4e:71:a3:5b:5a:52:fb:
5e:51:5a:87:50:5d:c5:f1:44:b0:a2:0f:2c:cb:1a:
8c:1f:10:36:d2:03:ba:95:06:7d:cf:a5:00:92:99:
7b:53:c2:ed:38:9a:07:b4:cc:9f:e7:0c:aa:45:c2:
e4:73:f1:a5:4f:cd:41:f2:68:a1:66:08:79:b8:fa:
b5:a3:b7:b5:ce:49:85:fc:7c:63:1a:ff:25:0d:a2:
e4:4c:f0:ff:5b:52:76:30:81:e9:79:5b:8e:5e:a4:
17:4b:92:be:b2:97:38:ab:4c:09:c5:bb:60:d4:17:
2b:28:56:11:65:ba:8f:6c:6f:1a:d0:0d:34:05:92:
ae:40:3d:de:d3:e7:61:73:94:b4:1b:87:9f:a1:56:
9e:e4:1f:0e:01:2b:ab:32:2a:55:ad:8c:ee:9c:83:
78:62:82:03:15:26:34:c7:cb:85:4c:77:c3:bd:a3:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DC:3D:F3:69:47:F6:3A:40:E6:06:8A:D0:D2:34:99:D5:C9:86:3A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/q9w982lH9jpA5gaK0NI0mdXJhjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.148.0/24
93.115.254.0/23
185.241.210.0/23
185.255.170.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:93:26:d6:e4:72:d6:08:92:e8:7a:ed:f8:bf:2c:2b:e9:0e:
a9:d3:6d:89:ef:6c:40:97:ab:9d:41:9f:22:dd:d3:4c:f9:3b:
37:3f:06:7a:f5:a5:83:1b:58:12:84:9c:13:90:66:e1:4c:eb:
28:36:6c:5d:aa:39:91:76:fd:f7:0e:88:1d:12:ba:3a:26:cf:
50:7f:6b:a5:89:72:c4:ea:b9:07:94:78:c1:90:81:fe:02:15:
1b:64:13:14:bc:96:f2:70:f6:fc:e3:1a:40:80:1d:28:45:cf:
e1:fe:ab:31:be:c1:b2:0c:55:fc:c4:62:ea:a0:09:93:61:64:
92:6f:fe:e0:99:de:59:6f:b6:b5:b3:34:7e:0d:6f:ef:53:83:
80:77:f7:77:2d:21:aa:97:7f:dc:05:c4:4e:0c:8d:ff:5c:72:
ae:3f:08:43:ea:ca:38:88:24:10:29:cd:f4:61:6a:2f:4e:02:
b9:74:49:a7:69:26:b7:d6:4b:6c:fc:e2:11:64:ad:37:70:72:
a3:d0:71:49:ff:9f:f5:bb:d8:24:43:96:3a:75:45:50:eb:dc:
f6:ca:3f:5a:21:1c:bb:f1:80:3a:da:dc:d8:54:63:a7:4d:7f:
cc:a7:1e:68:f0:ec:4a:fe:b7:d4:aa:df:16:55:da:8d:a9:03:
9e:08:4b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org