Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sH8vrO_NNIv90sl6Sz0TxpoFJ84.roa
File: sH8vrO_NNIv90sl6Sz0TxpoFJ84.roa (raw, json)
Hash identifier: P5bDjUTvfvXAkF/xMv00qX1daUAg//8cBhLEc/eFThg=
Subject key identifier: B0:7F:2F:AC:EF:CD:34:8B:FD:D2:C9:7A:4B:3D:13:C6:9A:05:27:CE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186DBA86F2ECD8989A2BB7CA9F97AE84D73
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sH8vrO_NNIv90sl6Sz0TxpoFJ84.roa
Signing time: Mon 13 Mar 2023 15:48:14 +0000
ROA not before: Mon 13 Mar 2023 15:48:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 92.114.84.0/24 maxlen: 24
89.36.22.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:a8:6f:2e:cd:89:89:a2:bb:7c:a9:f9:7a:e8:4d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 13 15:48:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b07f2facefcd348bfdd2c97a4b3d13c69a0527ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:ee:24:07:bb:2c:f7:56:92:d5:ed:5e:75:
30:f9:28:44:df:a7:26:ff:cb:7f:38:f0:56:ca:60:
c1:c5:47:1d:83:f0:83:8f:9b:24:9a:22:f8:6c:91:
e4:f9:d6:9b:bf:08:04:3e:6d:92:37:9f:10:92:24:
35:2f:35:1d:ea:13:0b:9f:b2:be:23:41:d0:81:f1:
85:17:24:89:1d:b1:78:66:2a:1b:9b:dc:1c:91:84:
37:6c:18:69:83:93:a5:b4:c8:04:df:2c:19:41:f1:
96:07:74:89:69:99:ec:7c:ac:dd:e3:89:dd:66:ba:
e9:00:4a:8e:6f:5e:a8:2e:b8:67:71:dd:31:dc:da:
aa:5f:d0:4b:e4:ba:60:a3:6f:7c:ad:7b:b7:02:64:
7d:2a:44:c2:34:26:09:24:af:65:85:de:de:14:c6:
9e:60:16:44:e0:22:2c:fc:2f:1f:ff:27:0f:93:e9:
0c:61:66:9e:06:09:f3:7b:fe:ea:64:61:31:49:bb:
33:f3:aa:d5:7a:80:6b:7e:11:b3:89:3b:9f:9a:ee:
1c:73:b9:47:38:17:93:f6:40:4d:14:2c:08:0b:a2:
31:ed:ea:af:77:7b:99:bb:ad:80:74:e1:c5:46:b3:
24:6f:7d:46:ee:a1:bc:c9:aa:bd:85:08:ad:67:67:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7F:2F:AC:EF:CD:34:8B:FD:D2:C9:7A:4B:3D:13:C6:9A:05:27:CE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sH8vrO_NNIv90sl6Sz0TxpoFJ84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.85.0/24
89.36.22.0/24
92.114.84.0/24
188.240.232.0/23
Signature Algorithm: sha256WithRSAEncryption
90:69:8b:38:65:57:82:06:f1:d3:15:0c:7d:fb:8a:80:8a:a3:
0e:c6:d7:5b:a7:7c:02:c8:63:42:55:2c:f8:b5:a9:c3:bd:d5:
06:42:b4:4b:d9:f4:3d:37:66:ba:5a:3f:3f:53:2e:5e:92:76:
90:b0:1c:78:dc:23:8a:af:9b:48:95:57:dd:45:44:20:73:05:
50:00:d2:06:71:08:b0:89:12:f8:3b:d3:f5:d8:32:5e:fd:e7:
38:87:4d:1a:34:0a:d8:aa:e6:3e:ee:b3:9b:7e:5b:a5:59:8d:
38:32:f4:32:65:fb:d6:79:58:d9:8a:a9:1b:bf:99:bf:07:db:
dc:0a:c7:fa:22:55:e5:e2:19:8e:6a:78:c1:58:d7:b2:99:5f:
cc:ca:15:c0:7b:4a:df:0a:d3:64:45:66:3d:a3:94:8a:4b:b0:
7f:26:4a:dd:9d:f0:75:bc:81:24:19:a7:c9:b8:48:31:a6:75:
e9:86:49:7c:3f:97:7d:79:3f:30:3d:50:63:6a:b0:03:2d:53:
a0:f6:bd:91:2a:ad:77:4d:72:5c:30:f6:87:7e:e8:e5:ca:06:
0b:50:08:03:b3:8f:96:94:77:4f:94:03:86:06:35:bd:cb:b3:
27:00:3c:ec:b8:08:34:5f:51:41:f8:34:54:76:a7:be:c1:7f:
2d:3c:7d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org