Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yxVlXCovGweGi3ZVZgkJgZMgQL4.roa
File: yxVlXCovGweGi3ZVZgkJgZMgQL4.roa (raw, json)
Hash identifier: sKsjbMHm+jcBnVPyG7OIeDxTSbOUPZ34IHyW1OrwTyc=
Subject key identifier: CB:15:65:5C:2A:2F:1B:07:86:8B:76:55:66:09:09:81:93:20:40:BE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018D0BBB9C5CE236CAB4C1D9E4C0D29279A7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yxVlXCovGweGi3ZVZgkJgZMgQL4.roa
Signing time: Mon 15 Jan 2024 06:07:41 +0000
ROA not before: Mon 15 Jan 2024 06:07:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203394
IP address blocks: 188.240.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 05:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0b:bb:9c:5c:e2:36:ca:b4:c1:d9:e4:c0:d2:92:79:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 15 06:07:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb15655c2a2f1b07868b765566090981932040be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:7d:5f:f7:5f:b1:62:e1:00:61:b8:c2:6e:
28:71:ac:84:d7:88:53:6e:2e:98:ef:39:4d:ae:90:
58:35:09:61:65:55:3e:dc:1d:c6:99:62:89:07:a7:
6a:42:8e:fe:99:11:5e:60:43:cd:1b:84:a5:b6:43:
6d:44:06:3a:dd:e3:94:fb:b1:0f:7e:92:96:31:65:
c0:cf:51:45:d9:eb:64:28:91:1c:e6:fb:2a:98:4a:
e0:03:b6:9e:b4:6a:0b:09:37:df:57:b7:bc:95:15:
ce:71:43:e4:70:2b:ca:47:d6:b8:e0:10:4e:c8:52:
cc:f7:86:0b:78:05:f0:ae:07:d5:f9:0d:1f:bb:19:
07:4d:26:aa:c9:c4:05:3e:29:6a:94:70:96:08:3b:
22:36:50:f5:b0:f9:ec:8e:30:2e:f1:d4:e8:72:2a:
d3:25:c3:a0:f3:96:1a:69:5b:ec:c3:41:e0:ef:4a:
15:54:53:3f:2d:fe:ef:9a:45:b4:de:82:b8:5e:9d:
7d:6b:ba:a3:61:26:10:64:fb:56:4e:9e:2b:4f:63:
78:62:dd:9d:62:09:52:9a:1a:6b:27:cb:ac:56:a5:
72:80:93:43:16:c6:34:63:6a:f8:f9:c7:f3:a2:81:
b0:90:3a:64:8c:12:de:84:0a:a1:27:8d:63:15:dd:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:15:65:5C:2A:2F:1B:07:86:8B:76:55:66:09:09:81:93:20:40:BE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yxVlXCovGweGi3ZVZgkJgZMgQL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.230.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e0:87:50:59:c2:55:dd:ea:e8:d0:48:18:6c:ea:82:b9:56:
cb:19:7f:da:04:3a:0b:be:fa:92:0a:1a:49:33:31:12:cc:ff:
44:71:9b:0c:a7:b8:da:86:a2:37:6a:ad:2d:76:e7:49:49:81:
b3:57:04:c7:27:df:f2:43:f5:aa:9f:8f:c6:de:7b:4f:19:dc:
e1:4b:72:31:c4:e9:5a:e2:b0:51:83:8b:d3:78:c2:8d:c5:94:
f7:39:58:7d:d3:2d:0c:73:4b:27:09:2b:1e:a4:a7:55:03:e6:
8c:cd:db:2a:12:62:42:2c:2c:9b:80:e2:f5:b9:25:45:1b:0a:
26:4c:4b:82:92:58:73:a6:8e:92:d2:9c:11:ea:90:c4:cd:ba:
a6:62:63:1e:0c:2a:92:2d:86:fe:e1:90:ab:39:56:35:5d:03:
5e:6b:5d:02:aa:c3:83:5a:87:25:39:eb:cd:50:1e:d1:0d:54:
99:04:ac:17:91:cc:74:c3:a9:f1:94:79:a0:b4:2a:64:7b:d2:
8a:14:44:e8:fd:75:d8:a2:dc:de:f9:78:27:44:e2:0b:53:cd:
96:3c:59:6b:97:d5:29:53:50:8d:6d:f0:05:4c:23:2b:3e:36:
62:59:8f:35:3e:a9:0d:e3:0b:16:2e:65:a2:61:a3:b8:38:4b:
fa:c8:24:c5
-----BEGIN CERTIFICATE-----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Generated at Fri Jan 19 08:55:00 2024 by rpki-client on console-ams.rpki-client.org