Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/viOF3OmBpZaYkSUtj2IpWFLE-eE.roa
File: viOF3OmBpZaYkSUtj2IpWFLE-eE.roa (raw, json)
Hash identifier: XscHmBeBHNA/poQ6Hi0sPoUizZArin5jqia6G3IsRCo=
Subject key identifier: BE:23:85:DC:E9:81:A5:96:98:91:25:2D:8F:62:29:58:52:C4:F9:E1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A17DF23B8B09B0026CD8F0F7196AB7A4D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/viOF3OmBpZaYkSUtj2IpWFLE-eE.roa
Signing time: Mon 21 Aug 2023 11:33:34 +0000
ROA not before: Mon 21 Aug 2023 11:33:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 93.115.255.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:df:23:b8:b0:9b:00:26:cd:8f:0f:71:96:ab:7a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 21 11:33:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be2385dce981a5969891252d8f62295852c4f9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:fb:62:e5:d8:df:dc:0a:74:9f:a0:f7:ef:
6e:35:d5:bf:b3:43:bd:18:05:fb:e3:d3:d7:be:7e:
6b:1e:f3:0f:79:b8:ef:27:3c:a4:8f:fa:ac:d9:76:
77:23:60:92:07:5f:ff:17:f0:cf:b3:86:d8:5c:8a:
76:42:6f:d7:d8:73:01:ef:bd:ac:10:bc:73:de:98:
20:cd:8a:f2:22:50:be:0a:49:b0:0c:e9:16:8b:d7:
c0:06:4a:96:cf:42:f3:4c:98:97:3b:a9:21:f1:9b:
07:6a:b8:6a:9c:14:aa:32:71:d8:2e:25:6f:6d:73:
d1:2e:9e:34:36:c1:5b:60:47:93:c2:fc:d6:5c:14:
38:6f:34:98:e5:36:c2:c8:e6:c2:2b:aa:6d:23:af:
29:39:7a:c3:a5:48:15:c7:68:06:4f:6a:3f:5a:31:
ae:ce:88:aa:20:e6:2a:34:c9:d5:5b:f1:15:5c:90:
b4:6d:41:e5:4a:18:f0:4c:58:c7:f3:69:89:25:ad:
f9:f5:55:52:51:8e:b6:ba:1f:72:17:04:99:3e:cc:
59:34:eb:b8:c2:fd:ec:5e:96:0b:f6:35:b4:ad:00:
c6:fb:91:b5:69:b8:90:e4:bc:6e:db:4f:e7:c3:1c:
92:f4:24:fd:d8:82:ca:95:7e:90:91:9e:2e:98:10:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:23:85:DC:E9:81:A5:96:98:91:25:2D:8F:62:29:58:52:C4:F9:E1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/viOF3OmBpZaYkSUtj2IpWFLE-eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.255.0/24
188.214.209.0/24
188.241.182.0/24
Signature Algorithm: sha256WithRSAEncryption
84:55:87:5a:a6:6c:20:78:db:fc:48:5e:94:82:b2:c4:4e:99:
36:ba:b3:1b:92:3b:30:02:0d:9a:5b:78:7b:45:b4:5b:c0:e1:
d5:62:99:2b:77:fa:c4:d5:64:d5:87:01:90:8f:a6:e6:4f:76:
e4:35:40:94:8b:44:c3:c9:ae:88:db:5b:f0:94:eb:e4:b2:f9:
ae:34:ad:7f:87:4c:c7:69:f2:9f:93:8c:b1:da:e2:03:b0:d9:
ab:3d:9e:d8:07:91:30:ee:e4:74:fa:c4:df:c7:ea:9a:3f:5d:
51:f8:2d:45:55:5d:bf:59:77:dc:00:b3:cf:0e:37:1f:74:ae:
36:61:65:d8:b5:4a:fb:da:5a:7e:e2:5d:37:1e:49:35:75:a4:
de:35:4e:e4:cc:0b:0b:c7:49:a5:d3:58:4e:20:0e:97:07:31:
29:9c:58:b1:63:c0:68:2f:b8:98:34:02:00:e7:14:26:7b:97:
e1:ee:de:a5:33:58:83:d4:5c:9e:4c:e6:ca:26:df:aa:3c:d7:
a1:dd:15:03:ab:ed:07:f4:5f:6c:b7:4b:a5:33:87:86:dc:78:
cd:bb:db:db:49:3e:f5:cd:d9:86:74:78:1d:9d:77:e5:88:6d:
e2:1d:4e:ba:be:25:76:8e:70:10:91:57:63:eb:8e:a5:1c:a8:
78:d3:91:ea
-----BEGIN CERTIFICATE-----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 at Fri Sep 8 16:12:17 2023 by rpki-client on console-ams.rpki-client.org