Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/seQABKZjyvl6u2z7d9DNCO6TAMQ.roa
File: seQABKZjyvl6u2z7d9DNCO6TAMQ.roa (raw, json)
Hash identifier: 27osoEgh+vaeEK1ZQpf//v8eiy+afA4IIAVsdVCSg4o=
Subject key identifier: B1:E4:00:04:A6:63:CA:F9:7A:BB:6C:FB:77:D0:CD:08:EE:93:00:C4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187CE789638830CC3EF3119858D640E13F6
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/seQABKZjyvl6u2z7d9DNCO6TAMQ.roa
Signing time: Sat 29 Apr 2023 19:23:41 +0000
ROA not before: Sat 29 Apr 2023 19:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 185.9.54.0/24 maxlen: 24
193.19.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ce:78:96:38:83:0c:c3:ef:31:19:85:8d:64:0e:13:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 29 19:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1e40004a663caf97abb6cfb77d0cd08ee9300c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b5:c0:73:a1:1c:2a:c3:72:73:a1:2f:4b:8f:
b4:e6:74:a5:db:c7:3d:1f:30:42:5b:a5:e9:0d:e9:
de:81:dd:5d:35:3c:80:cb:83:48:c6:e5:cb:2c:3c:
04:5a:df:f0:22:54:b3:32:15:f0:9d:56:62:cd:5e:
9a:e1:5a:83:82:26:a9:83:f2:cd:74:4b:a0:e3:d3:
b0:53:81:a7:cd:17:79:5a:53:5e:45:3a:e7:b7:46:
45:03:46:e0:27:12:61:7e:8b:e4:22:21:a5:56:55:
95:41:63:ce:e2:c2:0c:95:f2:4e:51:90:ce:66:35:
6f:0e:99:98:59:89:72:4c:17:f5:98:8a:df:4f:ff:
49:e9:54:74:34:e4:f6:b3:cc:1d:a4:df:6b:d5:48:
1c:f2:5b:28:cc:b5:95:60:f9:dc:ed:55:34:ed:42:
04:15:6a:10:aa:ed:12:b1:4a:53:16:14:72:a9:36:
7d:c8:3d:c8:8d:7d:da:cf:92:88:7e:19:4f:d5:3d:
8b:ea:4b:de:59:5c:da:5e:ed:3d:74:77:5f:62:05:
0b:4b:82:b7:43:6f:db:9e:bd:44:36:14:43:c8:ba:
02:7d:42:a9:22:a6:c8:79:e7:59:9c:99:e5:e4:b5:
02:f3:1f:8f:46:68:50:8e:f0:24:c3:6a:eb:2f:a0:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E4:00:04:A6:63:CA:F9:7A:BB:6C:FB:77:D0:CD:08:EE:93:00:C4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/seQABKZjyvl6u2z7d9DNCO6TAMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.54.0/24
193.19.106.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f0:37:13:f8:75:09:de:1b:a6:78:aa:16:50:b4:3c:cb:21:
aa:56:f8:37:f2:af:ef:da:eb:f5:50:d9:e2:6e:d3:b8:1c:3a:
0a:81:a1:a8:72:02:9e:31:a4:35:06:6b:ee:d3:9b:ac:ae:a2:
b1:fa:e4:a5:af:2a:b7:64:85:74:4f:dd:30:d0:b2:26:fc:11:
c8:c2:50:10:9f:3b:f3:e0:0b:f6:3b:30:da:94:4d:b4:d6:6d:
7c:96:e4:00:7d:2d:fd:ca:2a:69:0b:e0:8a:49:a5:72:3b:c8:
a0:48:6a:b1:c9:d6:df:91:69:2e:15:23:55:d5:8a:56:c4:fd:
6c:dd:20:e6:f4:da:35:34:2f:85:16:a3:c8:55:d5:d5:32:d1:
4f:e4:5a:af:6e:40:b9:5c:cc:0f:de:a4:fe:e7:9b:9b:3f:2b:
3c:9e:29:e1:ee:92:93:53:89:f2:77:15:14:32:ea:0f:9a:eb:
1e:42:8f:70:c3:fe:10:39:5f:17:b2:8e:94:27:52:73:8b:cc:
72:9c:3a:63:c4:44:40:f7:ee:cb:38:cd:f8:c2:b1:27:74:b7:
3c:1c:28:4f:e4:05:5d:23:f8:32:c0:b3:1a:48:28:cd:b7:0f:
7b:6b:e9:9c:57:82:96:39:80:b7:19:12:3b:1c:61:dd:94:48:
7c:58:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org