Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0SYtQufYjj64_SSlEss5-D9pKOI.roa
File: 0SYtQufYjj64_SSlEss5-D9pKOI.roa (raw, json)
Hash identifier: 3nAAyrzJjMCPA1IWBH76fLz3q3TeLcEl0XgtiOLz7sE=
Subject key identifier: D1:26:2D:42:E7:D8:8E:3E:B8:FD:24:A5:12:CB:39:F8:3F:69:28:E2
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01899C5B83A7A40D33B11E4572CAEDCBC669
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0SYtQufYjj64_SSlEss5-D9pKOI.roa
Signing time: Fri 28 Jul 2023 11:56:30 +0000
ROA not before: Fri 28 Jul 2023 11:56:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197644
IP address blocks: 185.221.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 09:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:5b:83:a7:a4:0d:33:b1:1e:45:72:ca:ed:cb:c6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 28 11:56:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1262d42e7d88e3eb8fd24a512cb39f83f6928e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:ba:e8:90:c8:e6:07:47:04:a6:5e:b6:c1:
f9:cf:ef:79:5b:ce:29:a4:84:f5:5f:f0:81:e8:45:
2c:77:33:93:60:a7:f4:a7:3a:5c:5a:1f:63:8e:a8:
21:09:f5:e7:c5:ea:2b:31:2d:d3:f4:1a:c5:90:70:
6f:d8:ed:9a:7d:4e:59:d7:1b:df:e7:02:44:9b:8d:
2b:46:c8:c5:aa:eb:55:16:8f:cd:33:23:80:ea:f4:
28:f1:e0:11:36:0e:9b:c1:cd:7f:08:da:7f:f9:20:
31:30:d7:4d:12:77:9b:61:ca:a1:24:b2:1d:b3:3c:
9d:e5:2c:2f:cd:29:87:09:a6:f0:2b:06:68:4a:c9:
20:cc:57:fb:09:2a:4f:f0:92:da:b6:a3:60:cb:f1:
f4:d9:84:73:3f:c7:40:ea:2b:d3:fe:6a:e3:be:1f:
9d:37:2d:12:9e:bc:d5:37:42:d2:b4:c5:c9:3f:29:
40:38:26:7d:94:d1:81:0d:36:85:7f:65:8b:20:25:
52:bf:b5:6e:03:18:9f:e7:01:ea:98:75:e3:43:e4:
ef:b4:6b:6f:e9:db:1a:23:60:ca:b2:5c:b6:3c:4a:
28:43:cb:07:d6:c9:40:2d:99:b5:e1:ec:cb:49:d2:
1e:98:3f:35:65:d1:91:da:ed:2e:06:c9:bd:6b:75:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:26:2D:42:E7:D8:8E:3E:B8:FD:24:A5:12:CB:39:F8:3F:69:28:E2
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0SYtQufYjj64_SSlEss5-D9pKOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.25.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:0d:08:e5:b2:49:95:4d:a6:2d:6c:fa:32:a2:23:83:69:47:
ac:b8:bf:cf:9e:e8:02:7b:5b:38:e6:6e:a9:0b:1b:a5:04:45:
01:dd:af:11:a1:9c:20:53:36:e2:24:29:19:94:a4:b2:d5:db:
d6:91:d7:9a:6f:71:1e:9b:64:4d:52:59:7b:1e:6c:96:e2:59:
b5:7e:9c:b0:1d:37:68:2d:fe:59:7c:90:d1:7d:88:75:0b:02:
59:3c:a6:ff:78:b2:73:26:b8:2e:69:39:4b:5d:6a:dd:cb:77:
c3:aa:d8:42:bb:39:28:83:88:95:12:a4:2e:78:82:dd:5f:90:
e2:e9:da:df:13:2f:7b:39:18:c5:f6:4e:b9:cc:bf:0d:68:c6:
8a:20:58:84:d8:cd:43:f3:37:da:58:46:3d:af:79:b9:c1:0b:
ad:1b:9f:fc:35:9e:d8:aa:03:c4:40:ac:67:82:a7:ec:aa:3b:
ae:cc:fb:6e:bc:c2:af:69:d1:1d:de:cc:44:7a:10:60:99:8a:
79:63:86:d0:d9:15:bf:25:72:50:a4:e1:c0:29:80:27:3b:28:
03:e9:2e:2d:27:e2:c5:e5:b9:06:2a:32:d8:0c:c1:a2:3b:05:
a4:a9:42:f7:48:b9:6d:39:94:15:c7:d3:c9:15:6f:ed:0b:31:
93:66:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:34 2024 by rpki-client on console-ams.rpki-client.org