Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/NwYxY8k9cV9sVuiRX0p_AoYXLpg.roa
File: NwYxY8k9cV9sVuiRX0p_AoYXLpg.roa (raw, json)
Hash identifier: aRlZtjnXafxoKUDBcO0wz7+CIFRUGgNEusQ4r/Btk6c=
Subject key identifier: 37:06:31:63:C9:3D:71:5F:6C:56:E8:91:5F:4A:7F:02:86:17:2E:98
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 0186A815684BF013D6872010445F884BC7AB
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/NwYxY8k9cV9sVuiRX0p_AoYXLpg.roa
Signing time: Fri 03 Mar 2023 15:27:00 +0000
ROA not before: Fri 03 Mar 2023 15:27:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 185.192.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 03 Mar 2023 17:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:15:68:4b:f0:13:d6:87:20:10:44:5f:88:4b:c7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Mar 3 15:27:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37063163c93d715f6c56e8915f4a7f0286172e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:4a:de:8a:0b:51:eb:9d:78:df:be:60:8a:
4a:17:ce:88:5c:25:a8:27:45:f8:a7:24:c3:1f:db:
0a:0b:ba:a0:96:17:e8:dd:e2:63:f5:fe:43:c4:ac:
93:57:f3:0a:1c:b9:4f:48:02:df:4e:28:f0:f1:d1:
15:78:3e:c3:8a:12:6e:7e:f0:cb:1c:11:30:9d:af:
da:69:9d:38:51:41:49:58:37:fd:bd:66:de:d8:ba:
87:7c:3f:f1:35:1c:a0:00:ba:b8:ea:5b:de:48:78:
67:1c:21:63:fe:01:8f:e2:b9:17:41:99:37:9b:80:
d8:ad:30:34:a3:fc:5a:3c:90:ae:3e:05:a8:55:1b:
3c:e9:af:80:4b:d4:74:fe:4c:0f:26:ad:26:8f:84:
04:a8:36:f1:8e:16:2a:de:56:13:9b:7c:6b:12:4a:
84:a1:45:8d:10:03:b3:9e:dc:8d:2b:dd:d1:57:13:
28:b7:1d:e4:0f:29:14:45:64:6a:af:37:ff:9e:7c:
e2:03:57:dc:55:02:b2:43:91:11:24:92:21:b9:75:
b1:f4:2f:89:8b:78:ad:1d:2c:ea:61:47:08:eb:d4:
55:33:a9:ff:d6:7c:08:e3:86:3e:56:b2:22:2e:d0:
6c:28:cf:0c:7e:65:11:ca:ce:42:ad:76:f0:a3:c7:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:06:31:63:C9:3D:71:5F:6C:56:E8:91:5F:4A:7F:02:86:17:2E:98
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/NwYxY8k9cV9sVuiRX0p_AoYXLpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.212.0/22
Signature Algorithm: sha256WithRSAEncryption
74:7e:49:19:78:c7:b6:8c:45:5e:1d:86:79:c4:7f:7b:e7:f7:
37:a7:81:4a:c8:34:bf:ce:39:0a:f4:0c:f6:df:32:12:47:79:
6f:46:ac:06:71:e4:71:39:93:16:e2:73:26:b0:d3:4e:c7:40:
61:7e:b2:6f:b8:6d:9a:ae:05:69:e6:9d:5a:d1:63:f4:6c:d6:
39:bc:f1:97:3e:56:06:d8:3d:ff:71:c0:44:ca:fa:72:4d:f4:
68:e9:9e:f7:1a:03:2b:2a:21:5c:12:09:36:c2:48:91:69:b7:
2f:62:e9:ca:c6:69:b6:26:f8:fc:a4:c7:d4:14:0d:dd:fa:3d:
71:00:44:dc:06:29:f7:71:c6:9d:7b:99:e1:91:d3:fc:a1:35:
c4:1b:88:28:b1:dd:2f:c1:03:80:dc:c7:ec:d8:88:bf:7e:1f:
cc:e4:83:1f:07:13:25:b8:22:53:33:02:73:a5:27:bd:05:3a:
db:d1:ec:99:29:d4:1a:c2:60:fd:60:65:f6:a5:9c:07:49:6a:
67:84:79:0a:3a:4f:11:d5:cd:9a:3f:b7:cc:39:a3:9e:37:63:
10:c9:73:32:0a:5b:bb:9e:4f:92:5c:a3:f0:ca:47:ad:b9:29:
78:c1:47:ec:d8:ba:41:73:92:42:e6:c4:a2:6b:59:04:75:37:
4b:7e:e5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:09 2024 by rpki-client on console-ams.rpki-client.org