Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/EVTm8kiLltEuzYbIlKmG0Z8OxGg.roa
File: EVTm8kiLltEuzYbIlKmG0Z8OxGg.roa (raw, json)
Hash identifier: qxaiooZ5E0d0hozBN9hp5mOWBXN01J6M931ecoNex18=
Subject key identifier: 11:54:E6:F2:48:8B:96:D1:2E:CD:86:C8:94:A9:86:D1:9F:0E:C4:68
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188B93820E551A7BEBE056BCED94076A888
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/EVTm8kiLltEuzYbIlKmG0Z8OxGg.roa
Signing time: Wed 14 Jun 2023 09:24:03 +0000
ROA not before: Wed 14 Jun 2023 09:24:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206371
IP address blocks: 185.225.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Jun 2023 11:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:38:20:e5:51:a7:be:be:05:6b:ce:d9:40:76:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 14 09:24:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1154e6f2488b96d12ecd86c894a986d19f0ec468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:cc:f7:40:ab:87:6b:7f:9d:14:37:fc:a8:
c4:48:5c:77:49:37:cc:d9:62:54:ee:4c:63:4c:a0:
ae:77:7f:7f:0c:06:51:31:4a:d6:54:fb:25:8b:6e:
91:56:bd:b8:9e:48:89:8f:e7:41:2b:60:25:8d:0a:
c5:7b:e7:d2:fe:8c:61:1c:98:ba:a9:c5:01:40:cc:
f2:91:a1:94:9f:b3:0c:be:80:af:81:50:29:d5:88:
89:ab:03:f6:dd:9d:6e:20:7e:20:b3:3a:2f:e7:dd:
bd:e2:6b:68:25:61:42:67:28:eb:18:b0:3d:40:18:
e1:8e:f6:a8:2c:0e:17:ba:77:76:77:44:20:73:fe:
37:87:73:01:72:07:fe:d8:68:56:8b:fe:1d:b4:1d:
b5:d4:04:74:d6:9c:eb:c1:68:da:4b:48:cd:47:b8:
cb:83:2f:42:9f:96:95:ac:b6:64:c4:3c:84:1b:28:
8a:76:1d:03:5c:30:4b:39:4a:48:8a:7d:e0:db:cd:
fe:35:0c:49:47:b2:a5:6a:74:06:77:e7:5e:ca:6a:
b5:2c:74:5c:64:fa:0e:d3:4c:be:08:73:ed:8c:92:
6e:f2:99:6a:3f:3c:43:e5:34:9c:75:a3:33:21:6a:
7f:b9:00:50:b9:e9:d3:e4:04:6d:e6:7b:da:0b:4b:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:E6:F2:48:8B:96:D1:2E:CD:86:C8:94:A9:86:D1:9F:0E:C4:68
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/EVTm8kiLltEuzYbIlKmG0Z8OxGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.169.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5f:53:22:54:2c:bb:39:4b:06:12:19:81:d2:e7:1b:c9:c6:
25:5c:13:06:af:02:36:28:92:f5:fc:7c:26:af:87:72:42:8c:
1b:2e:08:0d:22:8d:56:9f:3b:58:7d:44:bd:30:56:70:b8:3f:
69:e5:56:1d:1c:9c:fd:1c:bd:60:ae:eb:d4:bd:4f:73:47:2e:
9c:5f:c2:10:4c:89:09:08:64:d4:a9:ce:8c:64:2a:83:cc:18:
6f:85:ff:c6:72:5a:a5:e5:3d:0f:4a:75:3b:db:1e:35:8f:0f:
e4:96:b7:fc:7a:a2:a6:40:d8:a2:7d:1d:6e:25:87:36:0f:d5:
78:48:ef:f5:d4:0a:be:e5:8c:17:ab:9f:94:29:eb:3c:04:4e:
66:1c:96:b6:df:1c:f3:ac:34:e6:a7:96:fa:6b:fd:58:04:20:
ec:ae:5b:18:9d:bd:24:a3:94:87:ae:7a:e6:85:9a:ac:83:86:
69:17:57:b7:e9:df:8f:19:a4:b8:87:e0:16:f0:1c:a6:ce:46:
52:df:fc:87:ff:e4:5f:29:0c:74:8e:d4:59:10:18:1e:aa:5e:
c0:1d:45:52:5e:c7:64:37:2c:b5:a8:3e:df:54:0f:be:1e:16:
50:9c:18:01:bf:26:81:bb:a2:e0:71:5a:87:11:1b:c1:f2:4f:
c0:d8:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org