Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ySEn3X49eYjLmuTRIZMXVR56nGY.roa
File: ySEn3X49eYjLmuTRIZMXVR56nGY.roa (raw, json)
Hash identifier: CWt3ubQBWsJSCsWnJFh0Br7wPwNDOWij1CmvfJYyX34=
Subject key identifier: C9:21:27:DD:7E:3D:79:88:CB:9A:E4:D1:21:93:17:55:1E:7A:9C:66
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018779E8F1627EEC1AFCE7D8468CEBE33560
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ySEn3X49eYjLmuTRIZMXVR56nGY.roa
Signing time: Thu 13 Apr 2023 09:18:41 +0000
ROA not before: Thu 13 Apr 2023 09:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 93.115.255.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
188.214.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:e8:f1:62:7e:ec:1a:fc:e7:d8:46:8c:eb:e3:35:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 13 09:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c92127dd7e3d7988cb9ae4d1219317551e7a9c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:69:ce:ac:1b:b8:a3:0f:cd:63:2a:0c:bf:
56:61:c9:89:6c:6f:6b:13:bf:16:6c:bd:3b:b3:5c:
bc:f6:68:7a:73:9f:9c:fc:01:83:09:76:68:62:58:
b1:4f:26:86:66:3d:20:4f:7f:43:e6:29:22:9b:01:
8c:e9:e4:9b:60:74:13:b9:8a:d4:5a:aa:28:5f:35:
78:76:7c:4e:25:a5:df:67:68:f1:8a:ad:dd:f6:34:
34:44:cd:c8:12:8f:ae:4a:09:70:5d:22:c8:f9:21:
ec:63:76:79:5b:bc:8f:f9:74:f7:8c:ac:ee:77:14:
59:30:69:0b:dc:75:38:19:eb:25:46:97:2a:38:a8:
11:15:c1:02:b5:38:63:46:81:be:76:38:3f:94:8a:
1a:a4:3f:8b:b8:26:5e:f6:16:d2:e6:94:b2:6f:14:
cd:dd:ac:0f:72:3c:24:c8:88:e9:e2:f7:6b:ac:2d:
63:ba:4a:d5:ed:22:21:4d:e8:d5:c0:f9:ab:51:55:
26:ba:6c:0c:88:0c:88:15:a9:8e:e6:eb:32:e2:35:
68:99:11:43:fc:65:1d:38:1a:52:2e:62:30:73:54:
93:1d:f6:28:dd:de:2d:c6:de:19:b0:51:cf:51:af:
dc:33:d6:a7:d1:e4:46:da:bf:1e:4f:b5:e2:3d:bd:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:27:DD:7E:3D:79:88:CB:9A:E4:D1:21:93:17:55:1E:7A:9C:66
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ySEn3X49eYjLmuTRIZMXVR56nGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.255.0/24
188.213.202.0/24
188.214.208.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:91:b8:00:46:81:4a:07:53:06:e3:56:36:dc:f0:63:68:47:
75:c5:2b:f5:f1:86:f1:6b:bb:f0:cb:db:80:bd:2f:2c:11:48:
36:e3:5f:e6:c6:d0:34:37:54:80:7c:4e:c8:00:56:65:e0:2f:
0b:4b:8e:68:32:54:ab:aa:3a:54:33:8c:15:c3:1f:70:8d:74:
c9:01:12:c4:9b:12:f7:73:d1:7c:9e:03:9a:eb:23:35:8a:62:
0c:6e:21:46:77:d8:4a:d1:ba:19:5b:ee:a3:fc:09:a4:48:78:
3c:a8:e1:71:f5:7d:ff:1e:2e:38:7c:99:85:52:dd:a1:2a:56:
a2:61:e3:08:12:2d:73:68:c2:9a:a7:f9:08:03:18:d2:02:76:
dc:30:6a:fc:a3:0b:93:d1:8a:65:96:6f:0b:60:ac:24:7d:94:
6a:25:0f:85:f8:d2:cc:b8:b0:88:1d:3e:13:1f:c6:6c:b7:cf:
96:d4:10:41:64:f2:35:b6:75:36:06:38:0e:44:93:54:45:a9:
07:e7:14:9a:ff:cc:87:68:b2:bd:79:00:40:cb:9d:62:60:80:
c6:a0:31:cd:ba:ee:92:09:2d:f4:a3:08:c9:2f:9f:e4:62:3f:
29:21:1b:c5:c0:f4:9d:ec:09:51:aa:01:0f:a9:22:37:20:b5:
c7:4e:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:04 2023 by rpki-client on console-fra.rpki-client.org