Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yOhELqSZtlR5NXMfx5lDEaJn1OE.roa
File: yOhELqSZtlR5NXMfx5lDEaJn1OE.roa (raw, json)
Hash identifier: poV8kiQ75NY3gjZunORsHV+3+zjropdr8FrUDKGCRr8=
Subject key identifier: C8:E8:44:2E:A4:99:B6:54:79:35:73:1F:C7:99:43:11:A2:67:D4:E1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01863C3BF9D1A9C450EC57F6B2DD80C5C969
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yOhELqSZtlR5NXMfx5lDEaJn1OE.roa
Signing time: Fri 10 Feb 2023 16:50:08 +0000
ROA not before: Fri 10 Feb 2023 16:50:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210912
IP address blocks: 188.241.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3c:3b:f9:d1:a9:c4:50:ec:57:f6:b2:dd:80:c5:c9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 10 16:50:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8e8442ea499b6547935731fc7994311a267d4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3d:80:a0:2e:33:b5:b9:d1:22:fb:44:07:17:
59:9a:c0:08:e5:01:23:b4:e6:a2:a4:9f:1d:ae:52:
a8:98:da:0d:7a:f6:3f:25:03:cc:43:84:20:9e:eb:
6f:e2:56:c1:e3:ed:3b:75:9e:fc:ea:1e:c1:a8:dc:
7a:6d:86:ee:25:79:cc:33:ac:9b:76:9c:72:71:91:
df:a6:fd:53:d7:05:f1:ac:ca:cb:38:4d:79:79:28:
a8:20:d9:bb:de:1a:7f:c4:05:9b:71:79:be:b1:4f:
74:b6:38:83:5f:b4:2d:67:48:5a:f3:e7:04:9c:80:
3f:70:0c:06:ce:4a:71:ea:0b:7c:f6:0d:04:5e:51:
ba:64:45:db:3c:8a:bb:c4:ce:77:2f:37:4f:a1:79:
b9:91:42:2a:fb:70:23:18:35:66:a7:75:71:a6:92:
aa:4f:ce:37:13:b1:d9:5b:91:ad:3e:5d:51:29:a4:
fd:5a:fd:ba:13:55:d2:39:ef:70:d8:81:4d:b1:06:
1d:af:af:c5:1d:08:20:60:35:3d:46:4f:18:c0:9c:
e8:96:5f:55:a3:4a:9c:e0:62:56:33:13:1f:f2:6a:
0f:e8:be:50:6a:fa:f0:5f:42:51:d0:14:5d:e0:64:
b4:47:0e:53:9a:6f:8e:ea:46:4e:6f:62:c3:06:6f:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E8:44:2E:A4:99:B6:54:79:35:73:1F:C7:99:43:11:A2:67:D4:E1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yOhELqSZtlR5NXMfx5lDEaJn1OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.110.0/24
Signature Algorithm: sha256WithRSAEncryption
65:1f:29:37:0e:ff:95:e4:f9:55:2b:99:5a:6d:2a:ec:ec:93:
bd:0a:bf:95:a8:d5:2e:23:18:9c:ba:64:9f:b4:90:34:e2:57:
92:82:b9:de:ad:55:4f:cf:d8:8d:27:86:a8:8b:5f:3e:00:a7:
1d:49:67:b6:80:b5:6c:3a:58:d0:ee:fc:62:ee:9c:2b:74:70:
36:3d:f0:38:11:56:9e:97:37:23:42:49:ff:90:0b:23:36:51:
3a:25:2b:90:44:07:b6:b0:ed:a0:a6:8a:59:b0:ac:45:45:48:
66:0d:1c:5d:1c:28:9e:44:17:47:51:d9:f1:0b:31:8a:7b:3a:
dc:89:b9:12:1f:82:18:f8:5b:21:08:b5:b6:90:ad:42:64:d0:
40:33:2a:d9:0a:c8:0c:45:00:a8:54:33:b5:ea:5d:ea:c7:83:
1b:ea:34:8d:de:fd:ea:8b:14:9d:56:28:f4:6a:f5:b2:23:65:
c5:c9:3d:10:7f:0a:e1:d5:e2:29:73:0c:ac:cd:ad:b3:6e:25:
e0:9d:00:0d:10:42:7a:50:dd:3a:99:49:9a:fc:ca:6b:45:60:
ee:03:62:7c:57:89:62:0a:47:68:73:d7:0b:ae:99:c9:3c:c2:
52:8a:a2:a9:e8:04:d4:35:fe:3c:33:be:9a:0b:9c:64:9a:dc:
93:17:a9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:04 2023 by rpki-client on console-fra.rpki-client.org