Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/swiifskWmzlLqQr74anc5JvNnE4.roa
File: swiifskWmzlLqQr74anc5JvNnE4.roa (raw, json)
Hash identifier: u01U9LnG2bFSMRtDxO0g9lIfP079EfMJSOgPzgsSUxk=
Subject key identifier: B3:08:A2:7E:C9:16:9B:39:4B:A9:0A:FB:E1:A9:DC:E4:9B:CD:9C:4E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018BDBE6DB41EFD485F72363B220EF9ADB55
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/swiifskWmzlLqQr74anc5JvNnE4.roa
Signing time: Fri 17 Nov 2023 06:10:21 +0000
ROA not before: Fri 17 Nov 2023 06:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199760
IP address blocks: 188.241.182.0/24 maxlen: 24
93.115.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:db:e6:db:41:ef:d4:85:f7:23:63:b2:20:ef:9a:db:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 17 06:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b308a27ec9169b394ba90afbe1a9dce49bcd9c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:55:af:dd:ae:ba:3e:27:22:e9:29:4f:16:38:
68:f3:76:6d:b1:af:27:83:e9:4a:66:b9:f3:0a:59:
52:92:0f:4a:ec:c7:b2:ec:d2:b3:58:71:9a:73:82:
ee:c9:b4:fd:46:e0:f3:ea:0d:29:a3:d5:34:49:57:
da:a3:80:81:b6:7e:2c:32:6e:07:62:15:0b:33:62:
b1:16:3d:ae:74:ca:26:48:54:01:3f:e6:64:ce:b0:
72:43:51:f1:64:a4:ed:a1:d0:ff:a7:7e:ea:5e:22:
0f:20:73:15:fe:53:f2:c3:f3:fd:6a:c4:b9:73:3f:
26:ec:24:2c:b7:21:58:fe:1d:4d:1c:aa:1e:8f:23:
58:66:5d:e8:66:51:ed:19:a4:89:a3:8e:5d:af:0e:
cf:c0:e1:77:e0:70:ca:63:61:ee:a2:a3:4f:2f:f0:
0c:68:66:94:f0:8a:bc:76:51:a0:b1:e0:e6:d5:0c:
49:3d:fa:92:85:0b:b9:a2:0c:8b:8e:02:54:18:12:
14:e7:dc:0f:d0:95:32:cd:ba:41:c0:57:52:28:18:
79:ef:d5:6d:82:20:bb:35:0b:ae:11:ac:0b:4a:07:
9b:4d:d9:c6:23:42:43:74:a7:82:45:db:e6:5c:f1:
aa:d5:2c:3d:c9:d9:26:cf:f0:05:2c:b4:2f:fd:17:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:08:A2:7E:C9:16:9B:39:4B:A9:0A:FB:E1:A9:DC:E4:9B:CD:9C:4E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/swiifskWmzlLqQr74anc5JvNnE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.109.0/24
188.241.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1e:0d:03:25:d9:e5:77:a3:37:09:ed:42:e1:05:cf:e6:27:
68:7d:01:dc:0e:b9:f0:4e:73:29:05:44:2c:dd:d4:63:33:c7:
86:4e:7b:fb:dc:57:7a:fb:91:bb:87:90:4e:59:27:96:e0:ef:
9c:23:15:86:ce:73:5a:e2:84:ce:fc:f3:b6:4d:f2:7f:e1:3f:
2f:de:16:e7:4c:a4:93:d0:85:a0:fa:94:4d:9c:84:31:fd:3b:
6c:21:63:b6:47:90:8f:e7:a0:fc:4b:d9:e6:00:e5:9d:45:7d:
d1:f9:93:d6:ee:e3:6b:b3:0a:b4:ef:67:96:08:8e:42:87:33:
0c:c3:cb:34:ad:90:0e:96:05:e6:d7:71:bd:0b:48:4c:06:dc:
37:2e:50:14:34:48:a2:cd:0a:10:f7:0f:77:57:d4:29:c4:28:
a2:a4:92:d5:41:2c:f8:6a:4b:37:9b:c7:28:33:75:34:00:3b:
b8:d8:67:33:da:8d:cf:5b:b3:ab:2d:e7:f1:6d:7e:90:fc:4c:
b4:d4:ad:81:f4:a4:f7:eb:e3:23:14:d3:c8:81:3b:62:c4:a2:
f2:95:a9:96:ea:e5:ec:3a:75:42:d1:51:11:0c:82:d4:d5:c6:
d6:0f:1d:00:00:a5:ac:00:fc:81:5c:81:08:85:b2:ba:45:4a:
36:2c:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 3 13:11:22 2023 by rpki-client on console-ams.rpki-client.org