Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zJRnA1rzTGLpJbTzK4rub5zD4pY.roa
File: zJRnA1rzTGLpJbTzK4rub5zD4pY.roa (raw, json)
Hash identifier: HB8m56M0VugMU4f4IlrSh9htXh6LNUrbrg8lo5qPedI=
Subject key identifier: CC:94:67:03:5A:F3:4C:62:E9:25:B4:F3:2B:8A:EE:6F:9C:C3:E2:96
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018773DE6D270CB60CFF5CC427CE2763CE0F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zJRnA1rzTGLpJbTzK4rub5zD4pY.roa
Signing time: Wed 12 Apr 2023 05:09:29 +0000
ROA not before: Wed 12 Apr 2023 05:09:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 188.213.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:73:de:6d:27:0c:b6:0c:ff:5c:c4:27:ce:27:63:ce:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 12 05:09:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc9467035af34c62e925b4f32b8aee6f9cc3e296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:09:55:b3:a9:56:06:55:03:dc:ba:a6:e6:
fd:ce:46:cc:71:77:0f:80:a5:ec:f9:e5:20:e0:f5:
cb:19:83:be:de:99:46:b2:86:6f:e5:18:b2:12:3e:
68:85:4f:ea:09:2b:25:f2:85:42:cd:9a:82:58:b2:
af:cc:06:fa:16:4b:35:7e:7b:70:0d:46:9c:28:08:
11:6b:d6:de:fe:b9:65:50:64:35:9f:a4:16:75:87:
ec:91:4d:79:a3:fe:55:ca:06:70:5d:1b:23:a4:14:
1c:a4:38:4b:f7:d2:bf:ce:85:5c:d9:ba:f0:f9:a8:
f6:d2:f0:f8:5d:0f:35:41:57:02:7f:c7:19:19:8a:
96:c2:62:15:ca:73:d6:5c:4c:2d:3e:2f:6c:da:0d:
40:8d:be:df:52:77:8d:02:fe:46:5f:f8:a9:4c:b4:
63:f3:1a:19:30:28:45:b4:f8:dc:ab:4d:ae:73:79:
8f:7c:8d:6f:cc:d3:32:e2:82:cb:40:d9:40:e3:e5:
52:76:5a:ce:2a:1c:81:bb:ab:08:42:20:0b:07:2c:
20:83:7a:d6:4a:45:7a:bc:18:49:98:c7:1e:66:ca:
ad:ab:77:0d:0a:08:bc:86:c1:72:37:e5:82:fc:5d:
cf:66:77:1e:c3:a1:e3:7d:d0:0c:20:25:b4:03:e3:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:94:67:03:5A:F3:4C:62:E9:25:B4:F3:2B:8A:EE:6F:9C:C3:E2:96
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zJRnA1rzTGLpJbTzK4rub5zD4pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.203.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9c:ca:fb:c5:35:57:69:01:0c:24:74:19:50:9d:e5:5a:8b:
d7:32:7d:d5:c1:f9:a7:f2:d2:49:5c:63:4c:69:b2:d1:ed:f9:
50:49:8b:95:07:e2:6d:bf:76:c9:2e:72:8b:e2:94:6d:cb:fa:
b5:5b:98:73:b2:e1:4d:4d:84:4f:3d:f8:af:a1:43:d4:c2:6e:
2b:ba:54:0d:e7:7a:7d:04:f5:45:cf:fb:65:b9:43:2d:12:26:
8f:d6:09:a0:38:8a:19:cd:12:61:52:51:74:99:13:57:6b:8f:
fc:00:d7:c4:04:4f:d2:90:1e:9c:22:b1:ee:23:f9:a6:15:bd:
86:34:3a:68:94:7e:73:10:f8:cb:90:a2:b0:a7:64:b3:6c:71:
cb:f9:ba:25:f1:26:7d:d1:93:36:e8:48:76:0f:27:65:4b:cf:
3f:c8:c9:1a:f4:69:d6:aa:ae:c5:78:34:24:80:c5:6f:90:c1:
ef:13:79:34:d9:1a:e0:ac:48:58:9e:34:fb:bc:7e:cb:91:90:
90:fb:b3:c8:c5:cb:3f:86:c4:02:3a:84:bc:73:90:29:f2:ef:
35:8b:09:8f:c3:9b:d5:e8:8a:df:88:d8:c6:a2:0e:23:56:39:
4b:d2:db:0c:e3:6a:92:bb:90:6a:dc:22:85:36:d4:ee:01:ca:
61:a1:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-ams.rpki-client.org