Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1okDlzYrAyBGrNrUmuFWgq2gbx8.roa
File: 1okDlzYrAyBGrNrUmuFWgq2gbx8.roa (raw, json)
Hash identifier: FHJqfdMImWFHIwYT23BRISlyiwr8Ix+93hmMszKJga4=
Subject key identifier: D6:89:03:97:36:2B:03:20:46:AC:DA:D4:9A:E1:56:82:AD:A0:6F:1F
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01886ED750909C5C78CC33E97AE7B861FCF7
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1okDlzYrAyBGrNrUmuFWgq2gbx8.roa
Signing time: Tue 30 May 2023 22:46:24 +0000
ROA not before: Tue 30 May 2023 22:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.199.148.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
185.226.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jun 2023 12:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6e:d7:50:90:9c:5c:78:cc:33:e9:7a:e7:b8:61:fc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 30 22:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6890397362b032046acdad49ae15682ada06f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:35:f5:d3:5f:ea:d2:8e:cc:88:17:8d:26:bb:
7e:39:75:0f:7e:3e:0e:77:15:dc:d2:8a:df:fd:b3:
ed:30:36:c5:ee:80:f9:2c:0e:70:d2:9b:f8:09:fe:
fa:13:53:d4:68:e4:0e:bb:f5:ab:9d:d6:5e:a0:22:
7a:a5:0a:97:8c:2b:eb:43:85:fb:81:88:ab:0d:17:
b7:03:f4:97:e5:2f:2b:3e:c7:8d:d2:d7:82:82:6c:
a1:44:9f:61:a7:35:0d:19:06:16:8b:71:09:e0:27:
b1:83:01:6d:b0:b5:81:8b:fa:ec:26:9d:c7:c5:f3:
cc:e0:bf:05:7d:28:f7:56:a9:24:03:95:ac:0c:43:
1a:35:90:ad:4c:93:67:2f:b3:8f:79:40:32:7f:e7:
7e:d2:4c:9a:b6:36:87:2a:02:be:6e:c7:33:60:f8:
8d:88:c8:12:41:85:10:26:7f:fe:dc:65:41:66:47:
9b:18:14:15:97:1e:7a:08:97:49:6e:ab:88:d8:20:
44:32:38:37:12:88:88:6f:10:46:b2:2f:73:de:63:
6d:ad:1b:28:fa:74:94:6a:a7:c5:63:c5:29:ff:e2:
3b:44:84:f7:69:1f:ee:22:f3:ae:86:bb:58:d5:a4:
c4:e7:7a:0a:6c:00:cd:75:8e:55:59:19:f5:f5:d7:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:89:03:97:36:2B:03:20:46:AC:DA:D4:9A:E1:56:82:AD:A0:6F:1F
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1okDlzYrAyBGrNrUmuFWgq2gbx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.148.0/24
185.226.183.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9c:3d:78:eb:45:69:9e:91:f6:59:39:e3:1c:eb:b8:6c:e5:
d7:c1:17:79:33:92:90:aa:a0:7f:b8:68:3f:5c:0d:9d:c6:ce:
d8:31:6e:b7:0a:de:e7:7f:22:97:35:c8:89:da:ef:14:79:5d:
3d:b1:b1:81:1e:32:af:57:04:5a:39:42:51:ab:be:d9:40:c7:
9c:25:05:26:06:69:4b:60:89:ec:a1:b4:df:d5:8d:28:c7:d5:
78:1e:24:6f:b3:8e:0c:e5:8f:76:26:2f:45:fb:ae:e6:35:01:
82:43:8d:0d:98:f2:a0:27:48:a9:47:6c:d8:20:35:47:11:b5:
88:b4:5e:cf:b7:ad:be:f7:9b:91:57:4e:e6:03:5d:aa:e2:2e:
1e:d2:62:28:41:15:81:d4:ee:42:b2:14:3e:6a:e2:66:35:2f:
c1:09:d0:f4:10:1a:1d:9a:fb:7c:73:e8:77:db:8d:7d:9c:5e:
8a:60:5c:d9:eb:dd:a7:6e:39:c9:76:a5:3f:18:12:08:2f:21:
e5:03:88:7c:73:4e:2f:34:b4:91:30:8e:ef:8c:02:5d:bc:58:
12:d2:20:35:d9:a0:32:7c:2a:72:d9:ac:2f:63:f5:f2:fb:29:
15:a9:fc:c7:be:40:e9:ed:18:c0:32:de:51:a2:20:5f:60:f2:
d2:eb:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:34 2024 by rpki-client on console-ams.rpki-client.org