Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BPtFN--4f0_UkMqES1qQyDUD5bg.roa
File: BPtFN--4f0_UkMqES1qQyDUD5bg.roa (raw, json)
Hash identifier: iGIo2jFlBOps23pJ42lOza8xpPdo87mpv2u8VcBRfNA=
Subject key identifier: 04:FB:45:37:EF:B8:7F:4F:D4:90:CA:84:4B:5A:90:C8:35:03:E5:B8
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01904E36209654D7B6320814987168374C09
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BPtFN--4f0_UkMqES1qQyDUD5bg.roa
Signing time: Tue 25 Jun 2024 07:04:48 +0000
ROA not before: Tue 25 Jun 2024 07:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.199.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 07:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:36:20:96:54:d7:b6:32:08:14:98:71:68:37:4c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 25 07:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04fb4537efb87f4fd490ca844b5a90c83503e5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:eb:40:20:4a:93:6b:b0:a9:14:ed:ee:af:
0d:55:4f:8b:16:dc:36:70:b7:36:58:23:f7:d2:f0:
01:4f:1d:1d:c0:64:da:fb:00:a2:12:24:1d:a2:96:
29:3d:1d:c8:df:85:d3:5a:e4:4a:c5:95:b9:1a:49:
90:23:18:31:08:12:01:79:dd:20:3a:af:2a:7b:05:
f3:35:7b:8c:98:ea:b8:3c:17:63:43:29:f7:7f:68:
ed:f9:5f:f9:18:20:69:e6:d0:ba:7f:ed:b1:47:bc:
5f:8e:60:97:07:fd:e1:9b:77:2b:92:5d:6b:76:61:
f4:38:b1:c4:d6:29:14:d2:f9:64:fa:3f:18:3f:a9:
39:90:16:9d:5b:06:94:26:4e:c0:0d:32:1f:97:20:
d2:26:99:ad:33:95:8f:77:1d:91:99:f6:eb:be:87:
66:af:51:53:ce:42:c9:14:57:bc:7a:fb:49:45:02:
05:7f:28:37:2f:1a:18:c4:07:50:45:6d:de:b3:3f:
37:08:78:e3:6d:42:73:fc:3b:a5:6e:a1:1d:8d:f7:
03:4a:15:e5:b7:f3:54:12:d3:82:28:71:a5:ed:a8:
67:5f:bb:92:e1:c0:70:2a:c5:ea:3d:68:8d:75:9c:
82:85:12:4f:93:a5:3a:7f:d6:67:0e:af:e6:11:13:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FB:45:37:EF:B8:7F:4F:D4:90:CA:84:4B:5A:90:C8:35:03:E5:B8
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BPtFN--4f0_UkMqES1qQyDUD5bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.213.0/24
Signature Algorithm: sha256WithRSAEncryption
40:19:27:9b:ae:f1:58:9f:82:38:97:c4:e7:f2:ff:9a:1f:cf:
25:93:2e:08:52:c0:2e:75:4d:fc:34:4a:65:33:c6:d1:f9:6d:
7f:af:cf:51:45:ce:7e:2d:8e:05:46:78:e9:db:2e:3f:04:1d:
14:60:96:ac:00:aa:73:09:a3:29:b8:68:38:39:70:72:f8:6a:
89:f2:32:9d:32:64:ce:f3:52:be:22:25:5d:57:85:a9:c8:41:
1b:dc:b2:60:30:a8:3d:30:76:82:8c:69:d0:f9:6b:3d:93:e3:
61:b3:6d:75:4e:22:95:bb:42:71:32:20:5a:03:3d:b2:a6:72:
cb:ba:a4:39:a7:5d:98:de:88:db:7d:4e:dc:5e:1c:9f:0d:10:
1b:3c:cd:e7:b5:a5:45:9c:4f:19:4f:ac:c4:73:5e:bc:8a:d9:
5d:3f:c2:bf:cf:a8:1a:10:06:7e:d9:ba:2d:b1:3e:6c:93:95:
6d:4c:4c:6b:7e:07:97:da:3b:19:64:80:ac:59:01:8b:a6:00:
a2:8d:b0:f0:2b:ca:99:1f:2e:b2:11:1f:cc:46:43:61:04:df:
e2:af:18:7a:65:93:94:16:33:a1:38:c8:3f:9f:79:5e:e5:3a:
86:7c:b6:98:a2:46:fc:43:07:78:28:5f:f5:6c:ea:ef:d2:59:
52:5e:8e:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBONiCWVNe2MggUmHFoN0wJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjQwNjI1MDcwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGZiNDUzN2VmYjg3ZjRmZDQ5MGNhODQ0YjVhOTBjODM1MDNlNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q3rQCBKk2uwqRTt7q8NVU+LFtw2
cLc2WCP30vABTx0dwGTa+wCiEiQdopYpPR3I34XTWuRKxZW5GkmQIxgxCBIBed0g
Oq8qewXzNXuMmOq4PBdjQyn3f2jt+V/5GCBp5tC6f+2xR7xfjmCXB/3hm3crkl1r
dmH0OLHE1ikU0vlk+j8YP6k5kBadWwaUJk7ADTIflyDSJpmtM5WPdx2Rmfbrvodm
r1FTzkLJFFe8evtJRQIFfyg3LxoYxAdQRW3esz83CHjjbUJz/DulbqEdjfcDShXl
t/NUEtOCKHGl7ahnX7uS4cBwKsXqPWiNdZyChRJPk6U6f9ZnDq/mEROvMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAT7RTfvuH9P1JDKhEtakMg1A+W4MB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvQlB0Rk4tLTRmMF9Va01xRVMxcVF5RFVENWJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucfVMA0G
CSqGSIb3DQEBCwUAA4IBAQBAGSebrvFYn4I4l8Tn8v+aH88lky4IUsAudU38NEpl
M8bR+W1/r89RRc5+LY4FRnjp2y4/BB0UYJasAKpzCaMpuGg4OXBy+GqJ8jKdMmTO
81K+IiVdV4WpyEEb3LJgMKg9MHaCjGnQ+Ws9k+Nhs211TiKVu0JxMiBaAz2ypnLL
uqQ5p12Y3ojbfU7cXhyfDRAbPM3ntaVFnE8ZT6zEc168itldP8K/z6gaEAZ+2bot
sT5sk5VtTExrfgeX2jsZZICsWQGLpgCijbDwK8qZHy6yER/MRkNhBN/irxh6ZZOU
FjOhOMg/n3le5TqGfLaYokb8Qwd4KF/1bOrv0llSXo6M
-----END CERTIFICATE-----
Generated at Wed Jun 26 14:22:49 2024 by rpki-client on console-ams.rpki-client.org