Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/OqSU8moH0tflmfO5AmIZ0Jfk538.roa
File: OqSU8moH0tflmfO5AmIZ0Jfk538.roa (raw, json)
Hash identifier: 9647WtdTgOcBwQlpkUn6ZvC92e8Y5xDGHWw3a5+gq7o=
Subject key identifier: 3A:A4:94:F2:6A:07:D2:D7:E5:99:F3:B9:02:62:19:D0:97:E4:E7:7F
Certificate issuer: /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial: 018C83EDEAF4AA0845BA57AF013EA3E249B2
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/OqSU8moH0tflmfO5AmIZ0Jfk538.roa
Signing time: Tue 19 Dec 2023 21:14:16 +0000
ROA not before: Tue 19 Dec 2023 21:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201922
IP address blocks: 185.179.35.0/24 maxlen: 24
2a02:6c20:807::/48 maxlen: 48
2a02:6c20:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:ed:ea:f4:aa:08:45:ba:57:af:01:3e:a3:e2:49:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Validity
Not Before: Dec 19 21:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aa494f26a07d2d7e599f3b9026219d097e4e77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:f7:a7:55:74:57:23:f9:97:f8:1e:a3:24:
c4:02:2f:36:7d:19:e9:16:33:17:78:de:42:1b:b2:
e7:10:81:70:b0:02:2d:5e:2d:03:90:4a:2f:d1:46:
31:32:13:47:95:99:39:fb:c9:1a:8e:37:5d:7a:26:
b9:93:74:93:55:92:a2:fc:f7:a7:4f:68:82:66:4a:
12:fa:dd:02:98:ab:b1:9c:c3:63:95:7a:ae:f9:9c:
f6:fd:72:e0:0a:a8:30:cd:8d:0d:29:51:45:02:16:
dd:70:1f:94:f4:fe:c8:68:ef:46:b0:57:b2:83:36:
cd:be:a2:16:ca:bf:29:a5:67:0a:e1:f0:f6:59:25:
a2:2a:f2:39:ff:ce:c4:ef:2e:a1:8f:cd:cf:15:cf:
d8:72:5c:04:6c:53:9c:6c:17:d2:00:24:0b:ec:c2:
8a:cf:ed:83:30:d8:68:ba:7b:b3:f5:f5:f7:1c:00:
3d:4b:73:b8:6e:58:0b:31:95:ec:6b:12:5e:d9:06:
56:7f:82:bb:5f:b3:01:83:ae:fb:9b:52:03:e9:3c:
ef:b5:8d:90:4b:24:7f:49:33:7f:66:20:c2:3a:d3:
79:94:d1:ee:6d:42:ef:ba:01:84:28:b3:83:24:08:
f3:31:a9:a8:f1:38:de:9c:b3:55:78:25:bf:2f:df:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:94:F2:6A:07:D2:D7:E5:99:F3:B9:02:62:19:D0:97:E4:E7:7F
X509v3 Authority Key Identifier:
keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/OqSU8moH0tflmfO5AmIZ0Jfk538.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.35.0/24
IPv6:
2a02:6c20:3::/48
2a02:6c20:807::/48
Signature Algorithm: sha256WithRSAEncryption
73:15:07:57:ff:c5:50:c0:4a:06:14:b2:36:25:86:36:ea:14:
13:4c:e3:36:d1:b4:dc:8d:44:f4:88:4a:91:18:ab:2b:d1:6e:
ef:11:c5:cc:78:ba:1d:97:62:3a:36:67:53:eb:30:82:f0:b9:
37:50:fc:ff:b4:e1:ca:13:ad:e9:55:24:18:12:0d:22:22:2a:
dd:5f:5b:fb:d6:74:ce:ae:99:16:78:ae:23:44:d2:5a:a4:80:
07:d3:27:3d:c3:b3:96:f3:f4:61:cf:1f:91:d1:f9:7f:0f:98:
c2:d9:46:f4:80:cd:15:16:24:74:5f:b6:1b:88:ca:30:61:d8:
ab:11:82:d1:e8:56:92:b3:d0:0a:43:2c:92:f6:2d:1d:7e:5b:
43:c4:6e:47:7e:aa:6e:e1:d4:e5:eb:80:9f:22:66:6b:ed:25:
a7:2b:36:42:2d:f8:2c:14:98:15:7d:fa:e6:ee:53:84:51:2d:
e4:e2:76:ae:7f:2d:7d:d7:45:9f:f0:63:65:70:e5:48:30:2e:
2d:8f:b6:33:72:d3:84:1f:44:80:43:ef:dc:7b:5d:34:51:91:
6b:38:e5:4e:ca:09:3f:c7:7e:89:4b:c2:98:77:10:5c:0f:80:
2d:db:70:8b:60:51:89:50:fd:fc:de:bb:02:0c:99:42:78:9b:
48:2d:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:59 2024 by rpki-client on console-ams.rpki-client.org