Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0TfEkd47LOrQVzI-J5iAwsrktSs.roa
File: 0TfEkd47LOrQVzI-J5iAwsrktSs.roa (raw, json)
Hash identifier: UwcEOKZaV1pF+0UP/K91/qzr35re1X8D5At8HXSe+oU=
Subject key identifier: D1:37:C4:91:DE:3B:2C:EA:D0:57:32:3E:27:98:80:C2:CA:E4:B5:2B
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0186C2183B40ED6212F443C60798DF26059C
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0TfEkd47LOrQVzI-J5iAwsrktSs.roa
Signing time: Wed 08 Mar 2023 16:40:13 +0000
ROA not before: Wed 08 Mar 2023 16:40:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.146.93.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:18:3b:40:ed:62:12:f4:43:c6:07:98:df:26:05:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 8 16:40:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d137c491de3b2cead057323e279880c2cae4b52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:a0:f3:52:67:58:d5:b8:86:fe:72:d1:a3:
b6:19:03:0c:1b:ed:cc:e8:7c:7d:ed:84:58:a9:ba:
5d:bf:fe:34:7d:a5:d3:3b:7a:30:ae:44:c5:ad:7c:
76:e1:06:b4:2f:40:19:91:2b:f7:7c:a1:11:88:d0:
ab:97:b7:5c:ab:3f:b6:60:29:8e:69:f4:8c:01:94:
0a:eb:b3:cd:68:59:8c:7d:d1:5a:78:bd:54:93:25:
49:71:f5:e0:f4:7f:aa:55:63:c4:3d:8e:fc:92:33:
ce:ee:ce:93:5a:06:da:5b:d7:c7:12:44:bc:03:d1:
85:8b:6e:41:70:d3:ec:25:8b:10:52:22:09:a2:88:
84:43:c1:ea:af:0a:c2:3d:ec:12:13:50:48:28:2a:
f0:a8:5c:99:e2:89:50:dd:76:f8:75:13:3f:ee:fa:
f3:03:b9:9e:73:e8:91:59:b7:43:4c:d3:ab:b7:79:
11:38:8d:76:29:21:e6:70:ca:93:27:61:86:9f:9c:
75:b5:ed:21:b1:7d:a8:2b:78:10:34:e8:b4:15:c5:
c2:58:38:12:6a:5a:17:99:67:c2:e9:4d:9c:e6:19:
8e:58:f9:30:09:f5:39:2d:42:cf:3b:33:d8:6c:0e:
e4:e0:30:a0:8c:73:0c:39:da:3e:b2:91:2f:ab:d7:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:37:C4:91:DE:3B:2C:EA:D0:57:32:3E:27:98:80:C2:CA:E4:B5:2B
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0TfEkd47LOrQVzI-J5iAwsrktSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.250.0/24
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:80:31:21:b5:94:a4:a2:7e:ca:cd:02:ba:c7:35:24:44:09:
6a:95:ba:fe:70:80:9b:07:98:89:96:89:72:52:63:ac:00:3e:
e2:e5:c3:09:50:87:1f:06:1e:18:49:b5:61:72:0f:0d:a5:a1:
6c:1a:57:76:57:c0:00:93:b5:8c:ce:04:2c:a2:65:a3:af:77:
ae:91:18:7b:a0:9c:55:8d:55:a0:a5:de:9e:b6:d7:a1:c0:92:
c5:47:b2:98:0f:84:c2:1a:e4:3c:9c:65:71:e5:91:98:e8:a2:
01:ef:70:30:ca:0a:4e:eb:5f:1d:73:0c:7d:03:6c:2a:17:a1:
90:bf:35:1b:ea:90:80:a2:e6:2f:ff:07:b2:7e:23:de:60:f6:
ec:b8:92:df:72:b7:6d:92:a8:90:df:94:c5:9a:ff:f1:6f:10:
e7:0c:37:4b:9e:07:15:e0:f5:97:c8:c0:14:5d:a0:49:a0:5e:
7a:a2:c4:5f:30:5d:7f:a5:a2:b9:d9:1b:f2:76:16:f3:16:a6:
e9:d2:59:03:8b:f1:cf:e6:35:34:4a:c6:dd:01:2e:e1:f2:9f:
c7:3d:80:d1:ee:d8:b4:9d:ca:ca:67:a0:ad:4a:c7:e0:59:87:
60:a5:2a:3c:49:c7:64:33:8f:ed:71:ad:c4:3f:e4:aa:6f:75:
03:93:06:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:11 2023 by rpki-client on console-ams.rpki-client.org