Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/K1EOjTNrIPRq_65tTDLsZgDx6WA.roa
File: K1EOjTNrIPRq_65tTDLsZgDx6WA.roa (raw, json)
Hash identifier: ZaCCYXMd/TauFB+sW69bWEAwwkHhBPp5LFfT1oJdy1Y=
Subject key identifier: 2B:51:0E:8D:33:6B:20:F4:6A:FF:AE:6D:4C:32:EC:66:00:F1:E9:60
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018A9B1D67527108B9FF03667DF97147BD46
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/K1EOjTNrIPRq_65tTDLsZgDx6WA.roa
Signing time: Fri 15 Sep 2023 23:11:50 +0000
ROA not before: Fri 15 Sep 2023 23:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206505
IP address blocks: 185.221.26.0/23 maxlen: 24
185.221.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9b:1d:67:52:71:08:b9:ff:03:66:7d:f9:71:47:bd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 15 23:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b510e8d336b20f46affae6d4c32ec6600f1e960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:a4:58:a0:4f:67:83:d5:f0:55:69:d5:54:
dc:2e:60:4e:4e:19:8a:93:db:82:2c:43:0a:00:34:
e7:21:13:eb:e8:15:0a:7a:48:f2:b6:a2:87:8b:3c:
6a:c3:c5:f5:a3:1f:2e:2d:9f:0f:a2:60:9c:e1:b6:
d0:fd:67:36:55:51:a7:16:f9:61:26:12:31:b1:26:
af:42:ee:3d:66:39:3b:27:f7:dc:19:11:4f:36:0b:
13:b4:28:30:9f:c6:91:a2:2a:61:58:21:0e:40:9e:
3c:67:18:72:0d:d3:0c:46:79:d3:eb:e2:d6:27:47:
aa:06:7f:d1:de:e3:f0:1c:6c:6d:56:06:54:14:d9:
f8:50:47:69:1c:f8:ae:00:0d:e0:30:a3:7d:79:45:
03:c6:cc:2e:36:68:e6:cb:66:d2:7b:8a:0f:d4:4c:
05:ab:4c:37:7b:24:cb:88:00:28:47:6d:6f:97:6c:
db:7b:ec:fa:aa:c1:7d:ad:00:a6:47:71:0a:ae:4e:
71:d7:04:92:2d:26:74:65:5b:72:91:ed:6b:da:01:
93:9a:a7:ba:0c:c6:32:31:c4:36:de:63:bb:81:4a:
dd:fe:5b:df:b8:8b:69:16:33:ee:12:ab:e6:39:6d:
2b:d3:77:1a:57:64:ff:60:a3:0d:cb:66:01:01:23:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:51:0E:8D:33:6B:20:F4:6A:FF:AE:6D:4C:32:EC:66:00:F1:E9:60
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/K1EOjTNrIPRq_65tTDLsZgDx6WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.26.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:3e:03:c6:26:50:8f:86:03:8f:96:68:bb:a0:0e:80:b7:3c:
2f:7e:bb:6a:b0:d7:88:da:30:9c:58:4e:99:a5:fb:30:28:50:
d1:2e:c2:f8:a0:b0:2d:c2:7d:49:cd:78:95:40:31:8b:70:f4:
dc:d1:ee:56:9f:e7:1a:d0:30:4d:c1:c9:f1:2c:01:7f:49:ec:
b7:30:9b:d8:71:e5:98:54:ac:2c:e6:af:93:4c:30:df:72:29:
a4:bc:19:5f:50:ca:b7:9a:db:36:c9:6d:33:02:6f:49:ed:42:
a1:d9:62:91:7d:ef:80:67:5a:68:0d:9d:2e:8e:0f:ab:66:26:
ef:36:54:5f:65:9e:65:9d:d5:1f:e0:89:d6:03:8e:3c:3f:c0:
3d:05:3d:1c:fe:f3:d9:4c:54:3e:1e:07:64:fc:b6:1f:e4:4e:
2c:6f:65:37:1a:59:d7:8e:b8:c5:3a:ef:9f:a6:e0:6f:81:35:
8e:6c:cf:26:ef:51:e7:db:d3:5f:f9:c7:76:cb:07:da:86:5b:
36:67:42:35:17:42:88:82:9e:97:07:00:a6:45:de:6f:ab:7e:
e3:fa:c8:fe:95:fc:d1:c3:12:93:20:c2:e4:19:07:38:93:52:
2d:3b:b4:61:0e:2e:77:51:2a:67:70:84:0f:09:12:d7:57:cd:
8e:4b:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org