Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8kvWFEkiPtALnmCaF_Qcl9WRtfk.roa
File: 8kvWFEkiPtALnmCaF_Qcl9WRtfk.roa (raw, json)
Hash identifier: FzFJdqF9WwgQEj3waYKmYiwSKLxVp9DcAA7Ii8Glslk=
Subject key identifier: F2:4B:D6:14:49:22:3E:D0:0B:9E:60:9A:17:F4:1C:97:D5:91:B5:F9
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018FB4208B14DB78D5A18125CF3A30CD5EE6
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8kvWFEkiPtALnmCaF_Qcl9WRtfk.roa
Signing time: Sun 26 May 2024 08:59:42 +0000
ROA not before: Sun 26 May 2024 08:59:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 185.250.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 07:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b4:20:8b:14:db:78:d5:a1:81:25:cf:3a:30:cd:5e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 26 08:59:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f24bd61449223ed00b9e609a17f41c97d591b5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:b6:7b:33:f3:2c:7f:77:4e:4e:0d:7b:c7:
e9:9d:bf:96:5d:6d:68:5b:82:6c:71:c0:29:60:96:
81:c0:6b:6d:66:01:38:7e:ca:a0:2e:65:2f:af:5b:
e5:b7:c7:19:dd:cc:33:e3:dc:ef:15:3f:3b:cd:b3:
84:2b:e5:ef:06:b1:ae:88:9e:98:33:15:27:3c:d9:
21:c3:64:0e:56:c1:0b:da:3e:55:ac:58:eb:17:cd:
f4:83:2e:83:83:2a:3e:b8:df:37:95:c7:1e:f9:aa:
04:f9:ad:14:ad:7a:5c:32:e8:e5:17:1b:6e:ad:95:
e6:6d:29:1a:75:76:ae:03:cf:5f:02:09:2a:bd:76:
57:7a:24:ba:f1:24:ea:3f:e4:8d:18:34:8f:db:a4:
ba:8e:fc:b2:61:30:ea:a5:c5:b0:13:46:61:e5:87:
c9:5f:9f:c4:ee:be:e1:b8:00:6c:31:a7:3f:06:36:
8d:86:70:d7:98:28:50:04:5d:0f:b0:c8:e3:80:6a:
d3:b9:62:68:84:11:c2:db:38:65:00:4b:34:19:1b:
fc:0f:42:92:53:9b:55:6d:6e:b9:00:2c:e5:6d:32:
7b:fc:39:bf:5a:1d:f4:a3:29:84:8d:c7:5a:5b:c9:
4d:0c:7a:af:b6:98:00:59:16:fb:67:32:4d:50:96:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:D6:14:49:22:3E:D0:0B:9E:60:9A:17:F4:1C:97:D5:91:B5:F9
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8kvWFEkiPtALnmCaF_Qcl9WRtfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.27.0/24
Signature Algorithm: sha256WithRSAEncryption
91:43:ef:00:10:7c:78:34:ba:89:37:c4:6d:e6:4b:05:d3:00:
5f:bc:cc:27:4f:9a:c8:b1:49:ed:a3:5b:55:7c:90:53:77:d0:
e9:4a:07:09:e6:dc:1c:9c:ce:93:4f:ae:22:5e:b4:f6:93:01:
70:83:8e:97:2d:87:85:0d:32:42:02:24:26:51:3e:b1:04:05:
03:d2:60:c0:d8:f7:98:ff:e6:fc:b9:b4:62:eb:10:44:f0:47:
af:a6:4a:4a:9b:80:87:5e:21:1a:70:c3:fe:7d:2a:f2:3b:51:
d8:14:fe:c6:1b:5e:15:37:7f:24:7d:2e:8d:75:1f:e6:7c:ba:
33:b7:61:54:74:c0:89:11:f1:08:f0:ca:a8:76:f5:0d:b0:9e:
dc:38:4c:19:3e:8f:b1:3f:38:09:f0:a8:26:9f:7d:27:6e:8e:
4e:6e:63:41:3c:a7:e6:ea:fb:f2:b6:14:50:f2:da:96:6e:3d:
ca:60:ef:82:24:b4:d0:bc:9c:b9:ca:f7:02:17:ac:e9:06:0b:
74:34:f8:95:a2:26:d6:c9:62:8f:18:26:c5:a2:bd:2b:77:87:
84:0d:9b:60:9c:a7:42:13:dd:d2:be:c8:ee:b4:f8:17:94:bd:
67:93:d4:1f:14:be:8a:0e:c7:11:6c:04:98:be:61:c2:89:e3:
59:14:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 14:22:49 2024 by rpki-client on console-ams.rpki-client.org