Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0xq4TViqsKcRz3aGcrLlGr2g9Lw.roa
File: 0xq4TViqsKcRz3aGcrLlGr2g9Lw.roa (raw, json)
Hash identifier: 7YJVaeE97JZoRs7KT8R32ykERxdq9+7aGXphTncqU8g=
Subject key identifier: D3:1A:B8:4D:58:AA:B0:A7:11:CF:76:86:72:B2:E5:1A:BD:A0:F4:BC
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0187849FDA4EA426514F1AE5B1FB7042ACA2
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0xq4TViqsKcRz3aGcrLlGr2g9Lw.roa
Signing time: Sat 15 Apr 2023 11:14:41 +0000
ROA not before: Sat 15 Apr 2023 11:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.170.0/24 maxlen: 24
185.225.171.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:84:9f:da:4e:a4:26:51:4f:1a:e5:b1:fb:70:42:ac:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 15 11:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d31ab84d58aab0a711cf768672b2e51abda0f4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:fc:89:ab:f8:98:6d:ac:81:d5:eb:7b:40:
34:b7:95:ee:00:ba:27:34:98:d1:d8:bb:a1:ae:50:
68:c6:d3:95:ff:c2:62:53:98:d8:95:74:d0:f0:0b:
be:fc:d5:d1:4b:3b:6d:77:a4:d2:a3:44:2f:b1:0c:
cc:a9:b6:0a:58:08:e5:26:97:d8:18:ef:1e:da:46:
a6:eb:35:cb:e4:e4:19:d2:69:39:b2:30:0f:00:d0:
a5:69:ca:0e:72:f7:c9:39:a4:b9:68:e5:2b:0e:0e:
3f:e2:09:db:f7:95:92:37:b9:d4:ba:57:8d:66:84:
89:38:88:85:48:cf:38:48:96:01:f4:18:69:1b:c1:
99:58:74:ba:e0:9f:10:55:18:e2:47:bb:cf:e9:e2:
53:91:17:3e:8a:0c:f1:93:a1:52:17:5e:94:a5:26:
16:5b:92:39:7c:9f:22:98:b7:62:c5:58:8d:8a:f4:
94:f4:ed:c5:b0:b2:76:2e:69:61:e1:c8:73:46:39:
cb:97:f0:02:f7:f8:e9:ab:4d:e4:ce:c9:52:59:12:
a4:4b:65:c1:8d:6b:5c:68:a7:d0:54:75:2c:01:25:
e9:cf:48:fe:e6:92:b8:20:28:db:34:d0:9f:96:15:
05:f6:f2:2a:49:7a:aa:4f:de:76:d2:39:6a:8e:18:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1A:B8:4D:58:AA:B0:A7:11:CF:76:86:72:B2:E5:1A:BD:A0:F4:BC
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0xq4TViqsKcRz3aGcrLlGr2g9Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.170.0/23
185.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:55:8d:7b:92:ec:2c:ef:b3:8a:05:2b:96:b4:ec:6f:1f:57:
85:48:5f:13:78:eb:a2:e9:7b:57:25:a3:25:7a:87:18:94:29:
17:a1:af:7f:54:42:13:56:89:98:98:ed:ba:ac:d4:e7:fa:1e:
74:b7:93:f6:2d:c2:48:16:b0:ed:c9:84:3b:10:55:53:25:41:
29:39:23:25:83:f7:f7:6d:1c:c8:7e:c8:d8:69:30:b8:87:3f:
98:28:0a:28:39:52:46:43:f5:4d:81:cb:4f:fb:95:27:46:8c:
df:0f:2f:fc:73:ed:48:9a:95:46:3d:61:5f:eb:fa:e3:59:5e:
22:4c:9c:35:58:e6:5e:9e:b4:64:a6:1a:05:5c:20:70:d3:16:
99:28:bf:79:02:79:78:a5:77:c4:e7:ff:ac:11:a4:bb:ad:47:
4e:4c:cf:ac:23:81:76:fa:96:4a:37:88:9c:13:06:ca:e4:10:
d1:a2:56:dd:d2:3e:00:fb:d5:7e:1f:79:db:46:c2:8d:05:77:
97:c0:f3:27:cb:c7:e2:68:50:98:08:d5:03:7c:43:aa:7e:e4:
db:00:40:8f:b1:87:ec:a0:b0:05:32:0b:46:dd:ac:c5:07:c9:
e5:3f:51:58:d2:5c:9a:0f:fa:90:ff:dc:78:9d:45:ef:7b:17:
f6:9c:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:26 2023 by rpki-client on console-fra.rpki-client.org