Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2K4z6kVBatCwzQ5xq5GvRlb0DHE.roa
File: 2K4z6kVBatCwzQ5xq5GvRlb0DHE.roa (raw, json)
Hash identifier: cVDagxOPrFidKJtkXRgPbPcNLNvuQAuFBaKGsfvzzYc=
Subject key identifier: D8:AE:33:EA:45:41:6A:D0:B0:CD:0E:71:AB:91:AF:46:56:F4:0C:71
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0189DF315088E5319EA511CBE1292C8BA6D3
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2K4z6kVBatCwzQ5xq5GvRlb0DHE.roa
Signing time: Thu 10 Aug 2023 11:24:58 +0000
ROA not before: Thu 10 Aug 2023 11:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 185.199.214.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 11:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:31:50:88:e5:31:9e:a5:11:cb:e1:29:2c:8b:a6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 10 11:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8ae33ea45416ad0b0cd0e71ab91af4656f40c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:fc:fe:89:60:cd:b2:da:82:0a:97:1c:9b:
43:45:0c:45:de:32:95:be:d9:fd:7b:5c:1d:6d:c2:
24:05:63:0e:9e:3b:18:38:75:8c:ec:53:ef:e9:f1:
5e:9e:c3:46:0a:58:93:89:d7:34:77:0e:18:c8:67:
06:44:99:f0:e7:21:58:3f:5b:d1:56:cd:0b:38:40:
6a:71:e8:e4:da:16:8e:d4:d4:fb:c1:8c:aa:d8:60:
06:9f:7e:80:dd:fd:e1:93:d7:3f:32:6a:2a:a9:61:
ca:7a:5a:8d:79:eb:04:ea:e9:2f:aa:27:1a:5d:ce:
d9:d1:0f:f7:05:1a:45:23:86:05:4a:23:be:f7:a2:
6e:e6:b0:60:54:46:df:62:cd:28:a1:dd:a0:6e:87:
cc:6d:d9:23:cd:ef:da:58:3b:e6:ba:43:a1:3d:be:
6f:c9:87:5b:8a:78:cd:28:0b:c8:7e:99:9d:bc:29:
dd:8f:0b:33:a0:c1:ff:e6:68:c5:c4:40:08:84:0a:
30:2c:7a:d0:17:a5:e1:4c:e7:63:6f:95:a6:b3:c9:
e3:ee:c4:69:fc:50:ec:fd:14:b1:39:f1:2d:48:6f:
5e:c4:99:36:cb:7e:3d:f3:25:8f:cf:78:78:92:02:
4a:83:3e:4a:a1:96:f8:4a:91:4b:37:65:00:4c:da:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AE:33:EA:45:41:6A:D0:B0:CD:0E:71:AB:91:AF:46:56:F4:0C:71
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2K4z6kVBatCwzQ5xq5GvRlb0DHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.214.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:e2:1e:4d:73:a8:5f:37:44:41:10:f2:0b:a6:9a:93:7f:eb:
7b:fc:75:93:75:22:9e:2d:0d:7e:15:68:d2:71:8b:14:6e:df:
3f:5b:9a:bb:11:4d:96:ba:99:5b:7a:52:75:1a:2f:40:e3:7d:
bc:3a:c2:89:96:c3:87:19:f2:e7:19:ff:25:c5:4f:55:3d:6f:
8a:ab:27:54:71:90:0f:3f:fd:09:c8:e2:79:27:7f:2e:36:59:
a7:14:7b:e1:38:56:64:2e:fe:06:ed:39:a1:4f:e3:11:43:32:
e2:3f:21:27:22:eb:d3:c0:f1:d5:b4:c9:39:47:cb:e8:ca:24:
76:1a:c7:6f:c0:33:cb:0c:49:dc:95:a0:f6:2a:63:58:55:b5:
bc:a4:ab:53:4d:cc:93:e7:99:0d:9a:a7:e2:65:73:a6:66:6d:
3d:15:3d:a8:8b:42:a5:a5:c5:dd:99:25:26:43:16:9d:c7:4a:
d6:cc:c0:28:54:ac:ec:65:32:27:3f:8a:47:f5:b7:f9:b5:95:
ba:8a:ce:f0:fb:b2:11:53:10:66:7a:01:cb:93:97:d9:dc:e2:
55:71:6e:02:a9:f3:81:f8:0b:88:8b:9a:0c:a0:3e:c4:e1:de:
8f:5a:93:02:4a:b5:5e:21:e5:9c:f2:ff:af:7c:19:33:32:40:
5c:56:a9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org