Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/LkeSYzrh-gqcQKDQ0pCZZvun90U.roa
File: LkeSYzrh-gqcQKDQ0pCZZvun90U.roa (raw, json)
Hash identifier: XNcNsEoMxKMWuK9VMll7hct0n6KIEDDpkpKKo+fFXp8=
Subject key identifier: 2E:47:92:63:3A:E1:FA:0A:9C:40:A0:D0:D2:90:99:66:FB:A7:F7:45
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01895441E833681AE5FA9F719B7B84070D51
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/LkeSYzrh-gqcQKDQ0pCZZvun90U.roa
Signing time: Fri 14 Jul 2023 11:55:52 +0000
ROA not before: Fri 14 Jul 2023 11:55:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.199.148.0/24 maxlen: 24
185.226.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 06:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:41:e8:33:68:1a:e5:fa:9f:71:9b:7b:84:07:0d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 14 11:55:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e4792633ae1fa0a9c40a0d0d2909966fba7f745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:f5:b9:2d:4a:5d:03:42:30:84:1c:3a:2b:
ce:59:c6:6b:74:ff:2c:07:0d:c6:e3:c2:14:2d:95:
57:42:e9:3b:b6:32:5a:86:f7:e8:cc:e4:cb:e3:3b:
75:af:43:08:84:5e:be:bf:1d:e1:9e:db:1d:c9:30:
34:27:15:47:7e:af:a3:4d:59:55:a4:73:2a:0d:54:
ea:75:a5:78:89:9a:76:a3:1e:97:64:7d:7c:a0:79:
26:80:5b:31:df:e0:5b:b7:cc:0f:74:0e:02:47:b3:
aa:70:e2:23:6c:b8:d8:18:40:db:60:9a:3e:15:d9:
6e:48:fc:b7:15:50:a8:20:d7:e4:c0:04:c9:ed:56:
92:cd:91:8a:63:02:c8:f7:35:d7:66:a4:7a:a0:e1:
da:ed:4c:2c:2e:73:67:35:48:71:46:8d:29:06:1a:
40:73:b8:5f:2f:ce:e3:a7:da:ea:08:11:50:16:f2:
c9:65:32:2f:1e:2e:55:ec:b1:ad:c7:5f:31:05:ad:
96:03:a9:75:f6:c0:d9:65:bf:fa:3e:e7:ac:6e:fe:
04:88:f1:02:16:12:f3:8f:56:71:aa:98:d2:b3:83:
4e:51:dd:c7:2d:a9:17:83:3d:bf:a7:e2:50:f2:16:
16:6d:8e:76:da:73:73:6d:36:b3:5b:94:60:c0:be:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:47:92:63:3A:E1:FA:0A:9C:40:A0:D0:D2:90:99:66:FB:A7:F7:45
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/LkeSYzrh-gqcQKDQ0pCZZvun90U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.148.0/24
185.226.183.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ff:3e:2a:43:de:50:04:75:e8:24:9f:71:29:f8:73:de:4f:
83:71:32:dc:c9:05:28:35:00:0a:cb:8d:b6:ab:e6:df:1f:1f:
d5:c8:e9:81:25:ca:ca:3d:69:16:5d:bf:b1:f2:b9:28:f4:af:
7d:7f:3c:9f:ea:13:9f:75:fb:19:29:11:fc:91:15:d0:e7:9b:
7f:9a:8d:d4:d5:3a:65:37:8a:69:48:06:56:0d:0a:75:23:66:
53:46:81:c0:a6:cb:68:03:6a:85:e5:a5:cf:a2:12:bc:3c:43:
28:d9:82:d4:fa:45:d3:2c:f4:3d:b9:7b:7b:e8:d8:99:a7:0f:
8d:24:cf:c4:82:7f:18:b1:ce:19:00:0f:5b:0e:6d:32:2c:a0:
30:ca:b9:e2:ac:c8:26:6f:d7:1e:d2:3c:63:bd:e4:9a:cb:ca:
ee:f2:57:00:de:42:24:c8:dc:7e:3f:f1:09:3b:01:d4:de:51:
4c:78:5c:0b:0d:79:11:fe:48:d0:72:59:41:7a:2b:f9:80:a2:
fa:53:35:42:56:fa:de:e7:5f:5e:51:44:96:0d:83:7a:91:db:
ae:44:8c:18:ee:d3:c5:69:8f:ff:5e:5e:f6:9f:7c:88:9b:39:
b8:85:d3:3a:f4:0d:69:78:4d:44:88:aa:e1:cd:7a:5e:fd:33:
c6:96:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org