Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/AF35YSrvGrj-NEBnmpRIc1CDJJA.roa
File: AF35YSrvGrj-NEBnmpRIc1CDJJA.roa (raw, json)
Hash identifier: XGcBn5DweSWMNHiiKYxuG5OilOtG5k9XtbgyayX6KcY=
Subject key identifier: 00:5D:F9:61:2A:EF:1A:B8:FE:34:40:67:9A:94:48:73:50:83:24:90
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0190141230B8FEC7B0BB5439BDAD3A5DD949
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/AF35YSrvGrj-NEBnmpRIc1CDJJA.roa
Signing time: Fri 14 Jun 2024 00:07:34 +0000
ROA not before: Fri 14 Jun 2024 00:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205175
IP address blocks: 185.226.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jul 2024 18:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:14:12:30:b8:fe:c7:b0:bb:54:39:bd:ad:3a:5d:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 14 00:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=005df9612aef1ab8fe3440679a94487350832490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:86:80:27:d4:40:af:a2:9e:c2:1b:3a:8b:
70:2e:9e:0d:9b:1b:8f:03:c0:91:0c:2a:dc:ab:a2:
6e:bb:12:5c:35:5b:ac:ff:12:c9:0a:b0:2f:56:0c:
e2:6f:3d:2d:6f:cc:e1:70:7a:2e:59:92:e2:8e:c6:
2d:e2:dc:d6:75:c4:b4:3c:43:d8:e5:9b:ea:a3:16:
2c:66:30:83:a2:60:e7:f1:66:ea:d3:a3:eb:ed:74:
fc:91:1c:a8:2b:5f:34:ea:59:27:b2:c5:57:86:93:
7f:62:c1:3b:35:2a:67:d0:c1:6d:e7:2b:cb:6f:0e:
4f:df:de:b6:e1:cc:7c:58:3d:7e:b7:71:8a:53:ad:
82:c8:5b:29:f0:52:5b:63:e4:29:6a:ba:79:62:bc:
cc:4e:08:9a:a0:6f:29:13:55:f3:44:03:e1:28:9f:
dc:b6:27:1d:02:4e:1c:a7:76:1b:73:e8:74:4a:ea:
6a:25:62:b2:97:8a:ed:0b:4f:15:44:bf:8a:01:7f:
30:d9:a6:b4:88:17:85:b6:d9:fe:0a:74:26:73:3f:
9a:51:2d:a9:33:e3:e1:ec:0c:52:52:da:89:66:ec:
1c:1e:7c:cb:9d:e9:61:4b:ae:66:f2:b0:a0:7b:33:
57:30:66:ba:54:76:43:c9:9f:69:65:b4:8b:33:85:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5D:F9:61:2A:EF:1A:B8:FE:34:40:67:9A:94:48:73:50:83:24:90
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/AF35YSrvGrj-NEBnmpRIc1CDJJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.182.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b1:d1:d5:27:78:4d:54:d0:1f:2a:fe:0a:b0:72:90:ee:59:
5e:a3:e8:cc:b8:54:44:e5:6c:9d:c1:ed:3c:59:1d:35:c9:6c:
0d:5b:05:01:39:80:15:be:37:b7:de:c4:36:ac:84:b3:6d:c5:
c9:50:8e:33:54:76:a9:0a:1c:91:28:f6:56:79:12:6e:3c:1b:
ac:f9:c4:97:2a:0b:37:5f:3a:c1:4a:3d:17:31:c5:7d:25:60:
41:a5:11:e3:b9:f1:7e:94:3d:7f:75:c6:0f:ea:93:8f:7f:55:
d3:2e:90:11:3b:65:85:87:71:8e:49:a1:0b:f3:ad:2a:13:7e:
9c:91:d1:cb:37:dd:81:4e:ab:a1:f8:4a:af:70:65:37:01:35:
9e:27:65:fe:54:c2:a1:5f:48:63:d4:9f:cd:6c:da:bd:30:24:
d3:44:fe:66:ba:83:cd:bc:45:24:c5:11:c2:c7:8a:f7:ca:52:
54:5c:8e:de:47:69:43:53:41:6e:46:01:7c:e3:9e:cb:73:87:
ae:ff:05:3f:67:b7:3b:aa:36:23:a3:0e:ab:3c:cd:ce:a0:c1:
ee:cf:62:83:7a:87:72:a9:06:2f:f0:e0:81:45:93:2f:52:8a:
0f:97:1b:af:ef:59:40:4b:ce:66:9f:93:5e:02:ce:01:09:7e:
08:8d:b2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 20:39:47 2024 by rpki-client on console-fra.rpki-client.org