Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KAf0H52MaWyXtkkh2NDoNbzviRE.roa
File: KAf0H52MaWyXtkkh2NDoNbzviRE.roa (raw, json)
Hash identifier: fkXyhZcQiJGW0UkRsfrbvUoBQIHsCLDsMVU/hbqYzxA=
Subject key identifier: 28:07:F4:1F:9D:8C:69:6C:97:B6:49:21:D8:D0:E8:35:BC:EF:89:11
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01874D8B1A8D78FA28CC62B8D52005D7EFD1
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KAf0H52MaWyXtkkh2NDoNbzviRE.roa
Signing time: Tue 04 Apr 2023 18:32:54 +0000
ROA not before: Tue 04 Apr 2023 18:32:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.250.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Apr 2023 14:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:8b:1a:8d:78:fa:28:cc:62:b8:d5:20:05:d7:ef:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 4 18:32:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2807f41f9d8c696c97b64921d8d0e835bcef8911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:0d:a7:aa:6e:37:de:f8:d3:ea:85:d9:43:
39:31:5d:af:30:7b:f8:77:30:14:2c:27:a3:ef:26:
73:e6:05:a7:f0:d8:99:48:f3:56:f0:d5:58:fb:21:
60:51:f4:c7:4d:74:9b:b8:c8:7d:fc:9b:6f:39:a0:
fd:6a:05:3a:d3:98:1b:e8:5b:e5:d6:ae:cb:c2:8d:
b9:11:b1:45:16:8c:f2:0a:2d:82:f3:0b:95:ca:fa:
21:6a:c1:3d:59:cf:06:a3:d3:5d:c4:51:6b:6a:a6:
7a:b5:86:eb:c4:48:76:25:e3:a2:5a:ad:ba:d9:c3:
f4:01:ce:38:a8:c2:93:db:2b:b6:25:4a:65:84:37:
aa:05:3d:d4:b1:06:7e:d3:97:76:1a:e5:e2:ba:d4:
90:e6:a1:05:6e:01:87:6b:14:ce:aa:7a:90:85:36:
79:1b:0a:f7:73:61:4a:8f:a4:da:0d:92:19:0b:fe:
5c:dc:b7:c7:da:ef:99:32:8e:86:01:85:45:4d:e9:
0d:ca:3d:23:87:93:e9:8d:52:c3:29:6b:9c:bb:2d:
5f:b2:53:d9:64:40:e9:0a:70:3b:9d:f9:22:d4:12:
63:7c:4c:96:31:d3:a2:3a:38:f4:aa:41:a7:d3:ef:
d6:dd:0f:ab:a1:85:07:97:a3:57:6a:3c:12:74:f3:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:07:F4:1F:9D:8C:69:6C:97:B6:49:21:D8:D0:E8:35:BC:EF:89:11
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KAf0H52MaWyXtkkh2NDoNbzviRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e6:ad:0f:c2:58:9f:e7:65:f2:90:fb:09:fe:c0:6b:46:43:
70:ba:a8:e5:51:30:e2:a2:5c:b4:53:af:0b:cf:7d:d2:03:e2:
81:07:20:42:ce:6e:f7:d9:f5:2f:af:02:c8:c8:78:97:81:16:
58:a5:55:89:15:37:ce:0c:89:5e:9e:c0:e0:25:fa:64:b2:1b:
c6:77:ee:e4:99:14:f6:0b:a0:3a:d4:97:ad:84:cf:11:33:87:
76:56:22:6c:f4:39:cb:6b:00:27:c5:e7:14:2b:34:ec:26:1f:
57:aa:76:d5:31:2b:32:e5:0b:e5:dc:8a:67:52:0c:c5:ad:df:
44:89:a5:e3:45:cd:20:8f:35:bb:80:6c:42:31:5e:0e:47:73:
a9:67:16:c8:04:32:07:66:31:ef:be:38:3c:44:0a:56:0b:0e:
01:3c:43:f8:19:56:f7:d6:6e:6c:65:03:7a:7a:ff:38:ba:72:
20:a2:21:44:4c:06:d9:60:9d:1e:04:ee:d4:ce:a6:63:6f:16:
7b:58:ba:7a:72:69:e5:ad:90:5a:06:cb:0c:0d:c1:f2:79:b5:
b5:dc:e7:23:16:23:f4:f9:be:a0:36:06:7b:06:f2:63:7f:a8:
4f:18:2b:10:f0:46:4c:a0:35:c1:f5:6b:c0:46:89:7e:3a:b4:
c0:88:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org