Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xt3XQJrUNdDQJZ4JBrbW23otq0c.roa
File: xt3XQJrUNdDQJZ4JBrbW23otq0c.roa (raw, json)
Hash identifier: VDsYiinTQCv1d/wxLxoE4IaHxwR40thmqkNxqNLdF48=
Subject key identifier: C6:DD:D7:40:9A:D4:35:D0:D0:25:9E:09:06:B6:D6:DB:7A:2D:AB:47
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A73E6B6C8C46DE25C7F2E69ECA632DEB8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xt3XQJrUNdDQJZ4JBrbW23otq0c.roa
Signing time: Fri 08 Sep 2023 08:26:54 +0000
ROA not before: Fri 08 Sep 2023 08:26:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 188.213.202.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:73:e6:b6:c8:c4:6d:e2:5c:7f:2e:69:ec:a6:32:de:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 8 08:26:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6ddd7409ad435d0d0259e0906b6d6db7a2dab47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:98:f4:21:93:9d:44:4e:c9:12:29:f4:a2:
fc:eb:27:0a:d0:5e:10:af:3d:08:fb:20:92:68:33:
0d:e7:21:f0:2d:69:91:3c:b9:1c:76:35:84:36:f1:
5b:0f:4d:7a:d9:d4:c6:ec:e1:a9:b8:58:e0:16:d3:
86:05:aa:ce:73:f1:19:40:e3:55:c8:0e:05:12:27:
59:c3:fd:06:85:96:91:7d:86:ff:08:32:f9:92:41:
02:5e:2c:e1:8e:01:24:4a:76:96:56:e3:52:72:a8:
b9:f8:ab:3a:4e:eb:bc:8d:80:99:fd:93:02:df:ed:
53:81:35:b1:55:a1:28:7e:f2:b0:dd:c1:16:13:6c:
8f:95:aa:74:70:6b:4a:de:a2:b7:ad:8b:68:6a:2f:
ae:bc:95:ba:a7:be:36:c3:fb:48:fa:e4:87:44:d4:
74:62:fc:42:61:75:f5:a0:ef:28:62:65:e8:cb:a4:
de:2c:22:7d:94:a1:44:e8:fc:10:d2:fc:39:61:3d:
7a:a4:90:ff:8f:42:7a:16:3a:99:63:d7:83:98:1f:
63:a0:16:2a:b2:59:31:b3:03:58:34:b6:4b:d5:ff:
b9:ba:4c:cc:59:c5:e3:d6:5d:6b:ba:72:76:74:f9:
33:f2:db:2d:ee:b0:85:9e:20:58:fe:45:1f:83:64:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DD:D7:40:9A:D4:35:D0:D0:25:9E:09:06:B6:D6:DB:7A:2D:AB:47
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xt3XQJrUNdDQJZ4JBrbW23otq0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.202.0/24
188.240.233.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8e:5f:fb:8d:e8:79:52:12:63:52:b3:9c:b3:01:1b:e6:40:
51:0b:9e:2c:91:3b:d2:68:f3:bb:dd:b8:d6:72:7a:19:0c:7b:
e7:6e:6e:f9:6c:18:38:b5:4c:14:4d:9f:49:48:4f:47:27:bc:
ad:0a:c4:6d:ef:32:41:eb:31:d2:68:fc:70:17:cc:49:cb:29:
57:e6:76:9a:51:04:fe:2a:1c:c7:ef:76:63:1c:c4:e6:c4:c0:
c9:38:bb:04:71:df:c1:76:60:5f:eb:ea:cd:e4:c8:8d:43:d2:
45:51:48:39:24:9a:5f:f6:6c:2d:72:d5:78:b9:e8:2f:e0:25:
dc:52:b5:1f:b2:e9:78:d9:75:2c:93:0c:a6:ea:76:87:7f:df:
9e:05:f3:0f:7e:9e:c8:37:af:ef:5b:c7:0a:7b:1d:b0:c0:c4:
67:4d:56:c6:b7:51:c3:cb:dc:6f:94:51:67:2b:91:55:98:62:
5c:62:5d:a8:50:ee:4a:3c:d0:47:bc:70:b7:7d:d5:2c:87:b8:
fa:a9:2a:26:3d:e9:a9:16:20:bd:e7:aa:43:33:fd:b8:52:97:
a1:3f:88:4f:2b:f0:14:99:1a:f0:de:7b:08:d3:0b:8d:cc:99:
18:f5:64:ea:30:2d:63:60:7e:2e:d6:90:cb:56:26:96:68:0b:
6f:8e:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 12:47:31 2023 by rpki-client on console-ams.rpki-client.org