Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sdAbv1z6xhL7E5gZ9EEVUrCWTB4.roa
File: sdAbv1z6xhL7E5gZ9EEVUrCWTB4.roa (raw, json)
Hash identifier: XIbJ/h8pT9KNKmlEBcIqubkuy+Plhn3n881i1cz8UwU=
Subject key identifier: B1:D0:1B:BF:5C:FA:C6:12:FB:13:98:19:F4:41:15:52:B0:96:4C:1E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01863664E917BFAB0A585D63DA22D6F0828D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sdAbv1z6xhL7E5gZ9EEVUrCWTB4.roa
Signing time: Thu 09 Feb 2023 13:37:08 +0000
ROA not before: Thu 09 Feb 2023 13:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
213.232.93.0/24 maxlen: 24
213.232.95.0/24 maxlen: 24
188.212.159.0/24 maxlen: 24
94.176.110.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
185.255.168.0/24 maxlen: 24
188.214.208.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:64:e9:17:bf:ab:0a:58:5d:63:da:22:d6:f0:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 9 13:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1d01bbf5cfac612fb139819f4411552b0964c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:28:b0:c7:ad:2d:34:a7:fc:3b:c0:c0:ac:d0:
61:66:0e:6c:b1:7c:ba:94:97:ff:f5:35:0b:1b:9f:
0c:a4:be:ee:5d:b7:04:15:9f:2a:33:8e:8b:0f:96:
a9:3b:1f:a8:09:b0:85:36:be:34:04:a8:0a:e9:68:
9f:e1:28:30:09:22:9b:ef:7e:86:77:62:0a:f0:10:
71:cb:e4:70:59:d1:7a:c5:10:73:a0:62:b4:0a:57:
fb:52:3f:b8:bb:3c:df:4d:b6:ff:63:1c:8b:bd:df:
85:c4:03:47:d3:ec:18:6c:18:55:47:f0:1a:c7:32:
11:c0:68:b2:ab:8b:6c:41:ae:97:cf:00:73:61:a5:
64:ef:53:75:ca:5f:b5:f8:7d:9e:10:46:8b:95:8b:
40:54:54:4b:c6:2e:60:12:d0:a9:99:a4:9d:24:99:
dd:0f:e3:74:4d:8a:25:a2:83:fe:06:d3:90:82:b0:
a6:7b:e3:27:18:3e:73:54:6a:9b:4c:56:fa:2d:78:
cd:84:47:63:56:4d:d9:7b:ed:d2:e3:07:de:19:03:
5b:68:b3:f7:a5:d7:35:58:f7:06:59:65:dd:fc:a7:
5c:ed:3f:40:1e:34:71:cf:2d:c5:12:89:ff:67:86:
d8:8a:79:be:b4:5b:06:d2:d1:eb:19:2b:ae:ce:a6:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D0:1B:BF:5C:FA:C6:12:FB:13:98:19:F4:41:15:52:B0:96:4C:1E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sdAbv1z6xhL7E5gZ9EEVUrCWTB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.207.0/24
94.176.110.0/24
185.238.10.0/24
185.255.168.0/24
188.212.132.0/23
188.212.159.0/24
188.213.202.0/24
188.214.208.0/23
213.232.93.0/24
213.232.95.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a1:97:ed:2b:ce:56:74:94:64:81:07:5c:97:c5:29:11:e0:
93:d9:39:05:55:47:52:df:ef:17:0f:9e:c5:cc:fe:b6:0e:e6:
0a:8a:d9:77:57:09:80:63:85:39:7f:64:83:58:a2:c2:f0:21:
ef:28:45:7d:b8:8d:ec:41:50:09:28:6a:a6:a6:1e:16:7a:c9:
be:f4:07:78:ba:d0:ae:e9:2d:74:bd:ba:2b:5d:d1:1e:e7:3b:
f2:fb:29:eb:a5:57:95:58:cb:f4:37:24:09:f8:d9:41:48:c6:
ac:5a:8d:48:ca:77:6e:51:d1:57:a3:ab:15:8b:6b:20:44:2c:
33:5c:a3:05:6d:38:7e:31:fd:99:ae:76:53:83:38:55:62:39:
59:2d:5e:e6:6d:a2:87:97:16:d4:f7:6c:b1:f2:35:eb:9f:11:
55:5c:4a:b1:77:61:d8:a6:0b:c9:9a:dd:d8:d6:7e:38:b2:53:
63:e7:5f:1a:65:6f:87:a6:7e:66:ff:ac:70:c8:80:3f:5c:f1:
85:56:ac:d8:fc:ed:3d:de:ae:7d:5b:e6:49:df:5b:ad:f5:7b:
43:41:b1:6d:89:e3:eb:d8:fb:6f:8c:ab:00:87:1d:34:a5:59:
7b:a8:41:2e:6b:2c:2f:76:e5:c8:67:64:44:13:7f:37:c8:87:
cd:1a:e4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org