Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zWZKJpbqnbCcLCba9S7W2dJ4UDk.roa
File: zWZKJpbqnbCcLCba9S7W2dJ4UDk.roa (raw, json)
Hash identifier: 79zNOgyASRODs6Rf4brUvyWqFuHwwxOBLa8GzhHqRPw=
Subject key identifier: CD:66:4A:26:96:EA:9D:B0:9C:2C:26:DA:F5:2E:D6:D9:D2:78:50:39
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01890332F2B7FFA6337E4544B21C744801C2
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zWZKJpbqnbCcLCba9S7W2dJ4UDk.roa
Signing time: Wed 28 Jun 2023 18:10:17 +0000
ROA not before: Wed 28 Jun 2023 18:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 93.114.192.0/24 maxlen: 24
188.241.243.0/24 maxlen: 24
213.232.94.0/23 maxlen: 24
185.135.141.0/24 maxlen: 24
188.212.155.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:03:32:f2:b7:ff:a6:33:7e:45:44:b2:1c:74:48:01:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 28 18:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd664a2696ea9db09c2c26daf52ed6d9d2785039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:0d:f0:a5:54:25:41:d3:96:ba:e7:27:34:
17:a8:80:1a:27:49:32:d7:54:ed:8e:3d:29:ba:90:
fd:90:57:c5:ae:c2:f6:3f:db:4c:84:66:77:04:fe:
01:9e:17:73:46:a9:23:66:52:24:f7:54:82:86:0a:
40:30:40:3e:36:54:96:37:18:37:0f:08:60:b7:a1:
b9:24:32:bc:11:45:09:81:c1:35:a9:dd:2c:06:06:
5b:bc:91:78:fe:e8:ba:e5:38:36:74:9e:74:44:32:
61:0f:22:04:a7:af:f5:0b:e9:d6:8a:16:9d:01:34:
8b:82:51:ab:83:6d:3a:73:7e:cc:21:6e:6b:88:f6:
da:e2:24:ee:47:f2:b4:90:c2:bb:eb:ad:ed:24:f6:
4a:d4:05:71:8e:66:7e:78:60:80:57:0c:95:27:fc:
16:65:b0:0e:0f:80:cb:d6:03:04:1a:4c:ae:11:db:
8c:03:cb:d5:d3:ac:3a:4d:10:25:a1:85:97:70:17:
dc:2d:01:60:e6:57:b8:55:2d:5e:09:12:4b:1d:48:
c3:5b:61:1c:2d:5d:e5:ef:6a:91:a6:be:2c:b4:ea:
56:95:dd:d5:a8:03:5c:c8:91:d6:2d:f3:6c:b7:01:
79:3f:bd:a9:f8:96:2e:29:d8:8a:73:a8:a4:13:ba:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:4A:26:96:EA:9D:B0:9C:2C:26:DA:F5:2E:D6:D9:D2:78:50:39
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zWZKJpbqnbCcLCba9S7W2dJ4UDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.62.0/23
93.114.192.0/24
185.135.141.0/24
188.212.155.0/24
188.241.182.0/24
188.241.243.0/24
213.232.94.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:aa:56:36:e0:d1:34:cf:3e:38:31:1d:63:7f:cf:14:c7:85:
7e:01:db:6d:93:4c:68:05:f2:9d:b9:e1:24:3d:80:a4:de:52:
e6:31:1c:35:37:52:77:0c:d3:97:4b:56:2c:54:a0:01:b3:5b:
87:51:0d:3b:43:9b:a0:95:7c:7b:9b:a2:4c:38:ec:b3:56:7a:
2a:12:15:f2:a7:cd:b6:a9:5d:6b:11:ee:38:a5:14:57:81:72:
bc:af:2a:68:06:41:db:e2:37:42:c0:b4:84:b1:41:86:72:a0:
20:0e:8d:7e:30:a3:32:9a:4b:0a:23:30:25:4a:e0:5a:85:05:
53:0d:42:b5:83:89:ef:55:21:27:58:82:a2:9f:54:dc:6e:7c:
8d:36:d8:8c:d8:b6:37:7b:44:08:ca:2c:78:db:7e:77:20:d9:
3b:e6:da:63:e4:c2:be:b4:8e:fd:97:56:3a:57:ff:9a:95:05:
4d:cb:e0:f2:02:3d:58:ab:d1:ed:63:d6:0f:73:8a:b2:e6:2d:
e7:b3:40:da:c7:f4:62:40:28:a6:ac:02:60:f4:fc:9e:c9:17:
67:37:e2:9b:91:0d:f0:5a:13:7d:d7:82:84:fe:06:3d:68:2e:
28:d2:84:95:ae:c0:d7:b8:85:e4:a2:bc:1e:85:16:9f:54:b4:
42:ba:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-ams.rpki-client.org