Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/AwEN0ER2CPkQjiDK5yiLxouKLag.roa
File: AwEN0ER2CPkQjiDK5yiLxouKLag.roa (raw, json)
Hash identifier: OByjk/zuXp0vHzTBEyKPcIi5B7EoxgFzo30ARwwRMd0=
Subject key identifier: 03:01:0D:D0:44:76:08:F9:10:8E:20:CA:E7:28:8B:C6:8B:8A:2D:A8
Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial: 018572472291B814C16CA3EC9238679DBE75
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/AwEN0ER2CPkQjiDK5yiLxouKLag.roa
Signing time: Mon 02 Jan 2023 11:39:02 +0000
ROA not before: Mon 02 Jan 2023 11:39:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.233.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:22:91:b8:14:c1:6c:a3:ec:92:38:67:9d:be:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Validity
Not Before: Jan 2 11:39:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03010dd0447608f9108e20cae7288bc68b8a2da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:90:d1:5a:23:6d:c3:61:e7:06:ff:48:64:
01:d4:6d:10:38:f4:ba:2a:b3:c8:24:da:e0:50:10:
d7:ee:9a:bf:6f:91:06:07:7b:f5:39:d4:78:4b:64:
9f:61:b6:ee:42:6c:27:80:e0:8c:b3:57:87:4a:2b:
32:13:7e:b8:ba:4f:ab:86:d6:68:cf:da:61:a4:dd:
d9:5e:07:76:2f:87:5b:c5:82:4a:51:f6:34:76:2c:
13:17:32:9a:87:71:aa:b2:e6:36:5c:70:e7:59:7e:
ea:dc:20:c3:13:3c:0f:a4:d5:82:c5:8e:e0:55:5e:
61:ed:b2:9b:0e:d0:8f:e8:09:48:3b:a0:8f:4e:74:
5e:a7:68:6e:21:0e:ab:a2:3c:1a:fb:e5:a4:29:13:
ad:10:31:6e:9a:11:40:4d:cc:bc:7b:10:6b:d1:0b:
45:b1:cc:68:21:67:bc:b6:57:11:5e:73:2c:40:a9:
f8:d2:1c:27:c4:44:c2:7f:55:6c:54:2e:9f:e9:6f:
f8:83:6e:8d:38:23:52:5e:84:f5:21:40:19:27:c7:
2e:ee:00:fe:e9:18:b9:25:56:a4:ff:3f:70:52:38:
36:bc:dd:49:5d:08:91:1f:76:9b:53:90:4a:31:a6:
dc:cc:5e:3c:a5:92:d2:07:fa:e2:83:92:13:86:52:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:01:0D:D0:44:76:08:F9:10:8E:20:CA:E7:28:8B:C6:8B:8A:2D:A8
X509v3 Authority Key Identifier:
keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/AwEN0ER2CPkQjiDK5yiLxouKLag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.235.0/24
Signature Algorithm: sha256WithRSAEncryption
85:de:b9:d5:93:1d:f7:36:18:e9:7e:4f:07:13:e7:15:26:64:
76:d1:d0:03:40:bf:ae:c3:fd:b3:bb:06:18:62:6a:bd:ea:6b:
29:e5:3c:25:0b:d7:94:c1:40:ae:dc:d0:2d:bd:45:55:16:5c:
e2:35:80:1c:33:8a:e9:7b:e2:0d:3c:3e:55:2a:a0:ac:c5:63:
04:f6:34:ee:cd:54:e4:9f:b5:f8:37:9f:a9:42:dd:f2:cf:2c:
ac:b2:05:e7:5c:c1:ef:08:3b:be:f8:80:61:ef:93:d6:ac:31:
bb:88:50:09:77:38:6d:fc:44:e8:1f:bf:e7:da:d6:a0:d9:04:
e1:63:98:d5:04:34:91:74:97:0e:3c:2e:b3:31:a4:b8:d1:bb:
28:f7:21:33:b7:77:2f:07:71:30:d4:29:7b:82:98:a1:da:45:
f2:d5:d8:eb:cb:5c:fa:ec:a3:6b:29:7d:7b:9e:b0:4f:1e:94:
ad:16:27:4d:70:6c:0c:0a:b9:7a:33:ae:ab:c3:3a:bd:56:ce:
5d:f0:75:cc:53:4c:18:83:54:e2:51:f8:9f:73:e9:1e:18:93:
ea:4a:a8:f0:9d:07:f9:74:fd:a5:46:ba:f5:f5:3e:e6:16:5a:
31:67:e3:4c:c2:15:94:a6:6e:c7:7c:e1:7b:4a:fe:fd:dd:05:
d3:ef:6a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-fra.rpki-client.org