Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-FZz14ld0rTFsPJ5yJClnJe8aV4.roa
File: 1-FZz14ld0rTFsPJ5yJClnJe8aV4.roa (raw, json)
Hash identifier: L7UOes44y/jyH5hTXT+y/z7Pda84OPFM65FuMMgAQcY=
Subject key identifier: F8:56:73:D7:89:5D:D2:B4:C5:B0:F2:79:C8:90:A5:9C:97:BC:69:5E
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0186E0536640B3DC86CC7E299D690A130AAC
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-FZz14ld0rTFsPJ5yJClnJe8aV4.roa
Signing time: Tue 14 Mar 2023 13:33:27 +0000
ROA not before: Tue 14 Mar 2023 13:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.199.214.0/23 maxlen: 24
45.157.211.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
185.225.168.0/24 maxlen: 24
79.98.244.0/23 maxlen: 24
185.221.24.0/23 maxlen: 23
185.221.26.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 22:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:53:66:40:b3:dc:86:cc:7e:29:9d:69:0a:13:0a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 14 13:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f85673d7895dd2b4c5b0f279c890a59c97bc695e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:2c:7b:96:b5:2f:ef:2c:d2:78:a7:9f:5f:
ea:86:84:60:9c:cf:4b:33:be:72:7b:de:3a:13:71:
3f:29:70:0e:7c:34:28:5f:5f:6e:4f:a2:2d:e3:1f:
ce:01:c0:98:6b:a2:ce:9f:b9:5c:2c:45:ba:df:39:
af:80:87:4d:31:ae:fe:86:3e:74:57:1b:ff:97:a3:
60:41:04:aa:66:ff:0a:d0:06:7d:b8:af:7d:6d:fc:
6f:15:ec:10:b7:e7:4a:c0:b7:fc:0d:3b:23:8e:2a:
d7:d0:10:60:56:3c:64:3d:35:7b:41:20:01:27:6e:
d6:6d:41:7a:b3:82:27:5e:ab:31:08:1d:a5:ab:6e:
83:20:1f:c8:75:e8:65:3b:76:8e:8d:14:3f:f1:53:
72:a3:fe:2e:68:b6:77:f5:09:c0:34:93:71:5d:3b:
15:57:4e:ec:8f:f0:f3:63:33:28:bd:4c:9f:36:27:
c2:83:ed:ec:6d:4c:1b:ed:14:6e:ea:87:cc:9e:bd:
61:56:e9:76:98:48:0f:54:fb:db:6f:b5:10:3d:a9:
68:38:c1:c8:9f:30:7f:d4:f3:da:e2:7e:e6:e5:61:
3e:c6:bd:7e:65:1e:52:6b:89:a1:3f:50:c7:f2:7a:
0b:46:e2:ba:3f:62:e0:f0:b5:96:72:2c:e2:94:1b:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:56:73:D7:89:5D:D2:B4:C5:B0:F2:79:C8:90:A5:9C:97:BC:69:5E
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-FZz14ld0rTFsPJ5yJClnJe8aV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.211.0/24
79.98.244.0/23
185.199.214.0/23
185.221.24.0/22
185.225.168.0/23
Signature Algorithm: sha256WithRSAEncryption
57:32:25:e3:d7:77:e9:20:78:cb:36:a9:e6:8a:65:22:cb:4d:
5c:6d:1b:c0:8b:21:04:32:33:07:0a:b3:fb:57:6d:8a:80:75:
33:43:2d:ec:e5:a1:06:5d:c0:4e:ae:5b:17:ae:c9:70:e0:76:
e5:f3:e6:db:ef:4f:e7:9b:45:36:e3:c7:21:3f:72:6d:15:85:
e5:68:2d:e7:08:f1:e8:5c:a9:83:65:09:ae:fb:3d:0c:c7:bb:
68:a8:12:74:8a:ed:65:7e:54:b1:07:86:4e:25:8c:c6:8f:fa:
e7:b6:e9:6f:b3:7f:1b:de:f5:2c:3b:28:ec:c6:57:0d:c1:e6:
74:60:af:ae:41:06:bd:ed:7c:98:0e:47:24:91:f7:96:24:68:
59:79:68:67:8f:b4:39:10:66:fe:fc:ec:27:3d:57:4e:1b:ea:
66:c1:cd:07:72:3f:1b:09:87:81:19:f3:d4:a8:4c:61:cb:3e:
a5:14:6a:9f:94:bc:d1:24:42:4e:3e:91:f8:ad:fe:a5:8a:38:
15:f6:4b:66:59:86:87:45:b0:93:44:8f:13:81:b8:e9:9f:9e:
eb:a8:08:25:b7:3c:04:01:77:d1:c3:95:0a:5e:81:8b:8b:83:
9d:b3:d8:d6:68:b0:a1:94:3f:1a:de:79:a4:38:f9:d2:3f:98:
dc:95:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org