Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7acJJIMJbpGjEotgO48RD5HkOZg.roa
File: 7acJJIMJbpGjEotgO48RD5HkOZg.roa (raw, json)
Hash identifier: yLt/iZPzW8snGcFRBj5C7oaVrgEqFlYj4IurDaFFe7k=
Subject key identifier: ED:A7:09:24:83:09:6E:91:A3:12:8B:60:3B:8F:11:0F:91:E4:39:98
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01884C8415CE2D71F439266925547B2FD7BF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7acJJIMJbpGjEotgO48RD5HkOZg.roa
Signing time: Wed 24 May 2023 06:48:24 +0000
ROA not before: Wed 24 May 2023 06:48:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 185.225.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Jun 2023 00:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:84:15:ce:2d:71:f4:39:26:69:25:54:7b:2f:d7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 24 06:48:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eda7092483096e91a3128b603b8f110f91e43998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:d4:b6:83:6b:30:ac:d9:e1:bc:52:5b:a6:
bc:1d:31:87:84:45:06:70:4f:ed:6b:7f:00:9b:a8:
39:21:3a:51:23:2a:46:56:f5:f4:a0:46:88:e6:e9:
72:e8:47:ba:09:fb:56:06:ba:34:e4:df:da:8a:8c:
b3:bf:5c:a5:0d:96:42:23:ee:44:f2:94:72:99:ea:
fd:11:13:56:cc:f0:1f:5b:9a:91:9d:52:b7:8c:2c:
bf:b9:46:63:92:2e:eb:33:44:a7:57:a2:be:a3:d3:
c1:65:68:bd:bf:8a:27:bd:40:57:ae:75:b3:42:69:
1c:45:a1:e7:c8:5c:c8:9d:25:f0:f3:63:8b:78:78:
37:2d:8a:e8:32:14:84:ca:27:77:11:3d:07:b5:bb:
7b:55:fc:25:78:15:88:3c:59:ad:db:85:aa:1f:20:
4f:47:e0:cd:ac:e8:a1:61:18:17:c0:0a:9a:cb:c4:
d3:84:24:9f:24:7a:73:59:ba:8e:5d:50:0a:32:7b:
60:41:aa:5e:2c:02:df:50:7d:76:0c:7f:0e:92:b9:
60:77:ad:67:43:2d:78:4b:20:ee:ab:60:a4:b8:cf:
61:e0:e0:55:2c:b4:5e:bd:cd:3e:49:05:d8:41:d4:
3a:76:4b:1b:cf:ed:7a:51:41:db:15:46:e8:74:45:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A7:09:24:83:09:6E:91:A3:12:8B:60:3B:8F:11:0F:91:E4:39:98
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7acJJIMJbpGjEotgO48RD5HkOZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.170.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b5:5b:78:b4:27:02:97:90:57:24:62:d1:9f:7a:c2:42:66:
d1:45:09:ff:a8:0e:8c:6b:9f:55:dc:6d:df:b9:98:0a:9b:64:
2f:f1:b2:93:fe:73:5b:98:8b:6f:47:57:c5:53:e0:e9:32:2a:
3c:ea:03:28:65:bc:8d:89:b7:17:8d:3c:94:47:46:df:58:99:
f7:c9:45:a4:39:4a:3c:c7:fe:00:68:2e:e6:2a:f6:70:1a:3c:
5e:85:82:64:91:89:01:b0:40:e5:a6:45:20:76:a6:6b:1f:5f:
67:a3:5e:2b:bc:8b:49:6a:bb:d7:7a:ea:f5:71:54:0b:a0:21:
cd:6d:01:ee:38:f9:3a:e8:eb:5f:cf:9b:41:7d:de:ba:b6:1c:
2c:07:dc:f2:7e:92:0f:c5:d5:44:d3:2d:12:9e:40:9f:6c:54:
23:d2:07:e0:53:60:e0:70:c0:04:18:2a:7d:ba:e2:a3:51:c3:
85:ca:25:77:18:2b:a4:13:2a:57:7b:68:cf:e5:a8:df:c1:22:
17:2d:a6:c1:b0:f8:b3:31:70:5d:67:6e:75:df:f6:8d:ae:8f:
bb:ec:03:da:d4:f4:b8:d6:81:59:de:5d:4c:3b:a6:53:4f:3f:
13:67:ef:04:a5:16:cc:ff:21:0a:48:b8:da:68:cc:57:5f:81:
23:e4:b5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org