Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ql85RpR6PA21BwNEm5JgqPlQzE8.roa
File: ql85RpR6PA21BwNEm5JgqPlQzE8.roa (raw, json)
Hash identifier: rjysJnekvnV0bRXYd5fdLbn5BJC1RFJtpQH/MVRmKY0=
Subject key identifier: AA:5F:39:46:94:7A:3C:0D:B5:07:03:44:9B:92:60:A8:F9:50:CC:4F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186B63D14476DC83E48F8CD351F7066C24A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ql85RpR6PA21BwNEm5JgqPlQzE8.roa
Signing time: Mon 06 Mar 2023 09:25:01 +0000
ROA not before: Mon 06 Mar 2023 09:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58073
IP address blocks: 188.215.229.0/24 maxlen: 24
185.214.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:3d:14:47:6d:c8:3e:48:f8:cd:35:1f:70:66:c2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 6 09:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa5f3946947a3c0db50703449b9260a8f950cc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:78:20:fe:2a:22:93:e7:ed:9e:64:5f:21:14:
66:d7:17:22:2b:c1:d8:6d:69:de:7f:6e:8f:f8:4a:
dc:f4:77:93:30:1f:fb:2e:a7:6c:e0:53:ea:54:f2:
ff:9b:a6:c8:4c:30:09:8d:00:a5:1b:c4:58:70:d5:
02:17:56:69:b5:bc:36:8e:0a:f4:b1:ae:4e:92:ef:
fb:ff:2e:5b:d7:0f:f1:4f:37:50:ed:4c:d3:6a:7b:
98:42:0c:d6:fe:d7:2a:21:3a:ff:48:cd:da:79:3d:
de:58:46:65:34:e0:9e:26:93:9d:05:0d:31:66:ff:
b0:fc:a9:8d:e7:8f:b4:42:2c:ae:71:b6:bd:87:5a:
3f:cf:22:3d:7a:e8:a2:f7:2a:ca:43:a7:76:8d:91:
00:1b:38:1f:c0:d3:54:a4:58:43:fe:48:8c:49:be:
6c:4e:79:0d:57:f1:34:01:b4:0f:eb:32:fc:11:48:
2c:45:75:90:d5:00:1b:82:d0:a5:4a:77:da:8f:7e:
03:1b:43:1c:e7:0e:1b:e5:47:ce:1e:7a:ac:48:99:
3b:12:d5:8a:25:83:2b:11:d7:c2:c0:29:6c:eb:9d:
f4:f6:a5:50:46:25:cb:e3:ed:87:f1:9e:29:98:2f:
84:92:c7:fc:b5:9f:05:f0:b9:57:f5:78:3c:12:75:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5F:39:46:94:7A:3C:0D:B5:07:03:44:9B:92:60:A8:F9:50:CC:4F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ql85RpR6PA21BwNEm5JgqPlQzE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.10.0/24
188.215.229.0/24
Signature Algorithm: sha256WithRSAEncryption
97:25:17:c7:cc:5f:ed:96:f8:12:72:29:7f:7e:4d:2d:3f:f0:
c6:82:b3:78:d8:97:64:7b:5e:d5:70:75:ce:30:8e:8a:63:15:
2d:0f:90:f9:e1:59:2e:bb:27:d5:ff:a9:2e:fc:2c:7a:7c:0c:
d9:c2:a4:1b:c2:12:de:64:fb:1d:46:48:26:2e:00:0a:ab:f3:
05:d3:f6:21:ff:18:0c:92:cd:5e:e4:48:d3:79:5e:96:6d:19:
0f:fb:2a:20:08:1a:0c:af:c0:3e:7b:a8:f2:15:a4:81:0f:a3:
23:57:e6:13:e6:4a:48:28:01:e4:cc:72:ae:ad:a5:4d:bd:17:
c7:f6:2f:63:21:24:0c:68:db:6c:a6:37:71:f1:3b:c2:66:48:
94:68:bd:60:5b:7f:d5:f2:52:9f:fe:51:0c:7f:c5:e7:83:e2:
38:35:28:4b:8b:85:cc:c9:a7:04:ab:0d:20:24:7a:78:ef:84:
9d:f1:0d:09:c2:f3:10:5f:f4:23:13:aa:2d:2b:ae:70:b5:b0:
8a:76:a4:25:13:ee:4c:ce:61:b5:d8:ec:1a:58:a7:c6:d5:3a:
80:98:09:82:77:2d:cb:b7:5a:c6:65:a0:91:31:91:21:8b:d7:
a3:b1:db:01:a9:d0:28:91:f5:a8:73:ad:8d:55:cc:9e:17:1b:
40:98:f9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org