Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2z7RDSVov8c8RMIuNFmjgESaVcU.roa
File: 2z7RDSVov8c8RMIuNFmjgESaVcU.roa (raw, json)
Hash identifier: UCdlsGjR2DzVnW6fGwbsvk/b8njHB9l/p8a12LoMXl8=
Subject key identifier: DB:3E:D1:0D:25:68:BF:C7:3C:44:C2:2E:34:59:A3:80:44:9A:55:C5
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0187CC0DAF9DCD0D2944A628971E557EE133
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2z7RDSVov8c8RMIuNFmjgESaVcU.roa
Signing time: Sat 29 Apr 2023 08:07:41 +0000
ROA not before: Sat 29 Apr 2023 08:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.170.0/24 maxlen: 24
185.225.171.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cc:0d:af:9d:cd:0d:29:44:a6:28:97:1e:55:7e:e1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 29 08:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db3ed10d2568bfc73c44c22e3459a380449a55c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:71:a9:97:39:4c:6f:2d:54:00:e7:eb:37:
45:fb:8b:dc:c8:6f:0a:1d:a6:2e:52:e6:6c:31:6b:
d3:30:d6:09:c8:e1:a8:a8:1f:dc:b7:45:fb:0d:5e:
1c:4f:48:66:8a:72:88:93:aa:39:fd:ed:7c:b8:82:
3e:49:06:d9:85:55:16:91:9b:01:fe:13:8b:b2:45:
df:78:ed:04:b7:94:11:df:5e:3b:69:24:dc:fc:90:
d8:b8:0a:62:ae:05:8f:a8:b3:94:3b:ca:e0:89:c0:
cd:1f:a6:dd:25:40:72:9c:a2:df:96:6f:1c:cb:3b:
2c:d0:46:8c:95:bf:e1:35:43:d8:4b:d5:80:c4:8a:
1a:f8:11:6f:14:2b:7b:96:aa:77:22:48:b2:15:6c:
59:24:c9:3e:c9:df:cc:86:21:b3:64:a6:a3:1c:69:
43:47:93:b0:b1:69:f4:d6:58:89:a1:9d:b3:24:86:
90:17:4a:31:7b:89:90:c7:38:c8:6b:e6:4c:4c:b4:
44:1c:41:65:40:fc:9f:95:56:62:c4:d5:00:12:68:
98:88:1a:db:c7:5a:7f:18:c3:bf:18:6d:c3:b9:61:
33:c7:c4:3e:02:ed:bd:76:6e:83:2a:37:a2:5a:3c:
3a:24:fd:08:54:42:4b:bc:50:23:73:62:73:f7:7b:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3E:D1:0D:25:68:BF:C7:3C:44:C2:2E:34:59:A3:80:44:9A:55:C5
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2z7RDSVov8c8RMIuNFmjgESaVcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.148.0/24
185.225.170.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:04:bc:b5:77:66:a7:d5:7a:53:17:30:3c:96:2d:ba:53:cd:
28:5c:dc:3d:d1:53:49:d1:12:95:3f:5a:68:1b:79:7f:b4:76:
dd:aa:26:03:e0:55:42:2d:a4:18:e6:ed:d7:3c:ca:0e:86:6e:
2f:b8:58:06:5c:7c:bb:18:7c:93:85:e3:94:4f:79:4c:6e:b7:
d1:59:aa:98:c8:5c:17:6a:a9:27:42:68:ce:10:fa:90:d9:54:
82:a9:39:7f:92:6b:ea:00:ea:85:26:2b:32:27:37:51:c1:c8:
73:9c:e4:fb:8f:2a:81:62:2d:fd:12:f4:2e:99:6d:66:19:7a:
f6:8b:be:f9:8a:22:d5:21:9d:32:e8:af:89:74:56:69:cf:b1:
94:ed:32:54:28:2b:15:a6:d3:84:7c:af:aa:02:6f:55:7e:b3:
31:c7:41:ab:cb:a3:98:35:45:86:3e:dd:75:ce:f2:4b:cd:a7:
40:8e:5f:94:95:6d:be:4d:2e:3b:c6:2c:f3:c2:9a:22:6e:68:
c1:ef:7c:7b:d4:ed:32:50:c8:29:9f:a8:c1:51:82:ef:15:11:
38:9e:eb:a3:7e:e1:9f:a3:66:4d:db:b9:bb:13:8c:09:f2:05:
50:4f:4b:4c:56:ce:00:36:3a:be:60:d0:65:0c:f0:5e:c4:14:
80:32:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:11 2023 by rpki-client on console-ams.rpki-client.org