Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/IHq978fkxcYjf3DTfepom494CCk.roa
File: IHq978fkxcYjf3DTfepom494CCk.roa (raw, json)
Hash identifier: rOPwvtaSC3PpyHi2Nsko+cgRKPZCE1T4qimNZaq++ec=
Subject key identifier: 20:7A:BD:EF:C7:E4:C5:C6:23:7F:70:D3:7D:EA:68:9B:8F:78:08:29
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018F1748BD92E98A581654FB29D3E2C5E1C6
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/IHq978fkxcYjf3DTfepom494CCk.roa
Signing time: Thu 25 Apr 2024 22:03:14 +0000
ROA not before: Thu 25 Apr 2024 22:03:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 176.125.251.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
185.226.182.0/24 maxlen: 24
185.250.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 22:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:17:48:bd:92:e9:8a:58:16:54:fb:29:d3:e2:c5:e1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 25 22:03:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=207abdefc7e4c5c6237f70d37dea689b8f780829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:f7:f0:65:38:5a:b4:24:a5:1b:cd:b3:11:
c0:6f:29:29:0f:c5:43:52:25:5c:8c:77:4d:e5:a9:
f5:e6:7d:17:56:4e:a6:46:a8:cc:3f:b9:64:8d:02:
5e:f7:7b:28:5f:dc:01:4f:33:62:13:f8:51:83:2d:
82:a7:0a:8f:b7:fb:75:e6:e7:10:0e:91:11:51:92:
9e:57:d9:e2:75:db:ed:9f:65:4d:f8:61:f7:f0:4f:
7e:f4:73:90:87:29:39:9a:a8:7b:b7:52:43:83:4e:
de:a3:28:28:39:1a:8b:a9:97:2c:95:95:52:c3:c0:
ad:36:c4:2a:0c:67:c0:b6:8b:d4:62:b6:1a:62:6e:
01:a7:86:e7:18:96:8a:45:6b:15:58:4d:b2:46:ee:
34:ea:c3:04:62:5e:0b:68:31:e0:2e:46:18:38:d2:
88:38:e9:e7:b6:3a:1e:b7:44:e9:b9:21:65:7a:20:
54:ee:a7:fd:27:3a:21:0a:f3:d2:42:21:36:a0:0e:
4b:5f:4b:54:ff:8a:05:9c:cd:bc:fb:fa:dd:17:0b:
ec:18:f3:b3:14:b8:dc:7a:12:49:35:2f:a4:ed:68:
04:72:73:66:8f:95:09:ef:95:d5:4f:e1:84:ca:dd:
91:c5:f5:1e:cd:14:7f:e2:c0:30:2b:7c:e7:50:23:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7A:BD:EF:C7:E4:C5:C6:23:7F:70:D3:7D:EA:68:9B:8F:78:08:29
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/IHq978fkxcYjf3DTfepom494CCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.251.0/24
185.199.151.0/24
185.199.213.0/24
185.226.181.0-185.226.182.255
185.250.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:5f:da:a9:a2:70:e2:b2:43:9c:28:cb:c0:e1:c0:12:0b:fb:
5c:ef:66:08:00:9d:a3:1a:b9:0b:2c:67:f4:d2:53:68:1e:46:
6d:f6:00:22:f8:d8:1a:b4:91:84:46:29:91:a9:51:5f:9a:cb:
7a:e8:10:a8:49:0d:1a:8a:2b:9d:71:fa:85:b7:d5:80:47:75:
d5:0f:05:8d:41:c9:da:4c:1e:40:61:2b:08:b3:b7:58:5b:16:
09:c0:3b:3b:ea:11:e8:d9:85:80:f7:b8:de:e6:65:20:82:6c:
2d:76:13:03:3d:cb:ec:49:77:58:39:9f:09:b7:53:d6:4b:1c:
4b:ef:6e:d0:8f:8b:77:05:3c:8b:a6:47:c7:60:7d:bc:23:b8:
9b:1d:48:f5:6e:93:95:d0:16:a4:9f:62:54:b5:39:58:37:6c:
eb:d0:c8:97:19:a2:1b:9b:e0:02:86:75:60:42:c2:a0:0c:dc:
e1:62:55:52:b2:3d:6f:7a:46:b6:87:d9:23:3a:8e:18:58:51:
53:26:ac:80:b9:5c:8c:b9:a0:66:18:a9:a7:b6:04:c3:9f:ca:
ad:fd:0d:3b:2e:d3:e8:60:3f:c3:04:c1:11:8c:39:1b:0b:ad:
00:37:4d:b8:4a:e6:a8:f4:22:76:2d:47:a4:1a:a6:97:da:77:
44:63:b1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org