Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Mf3LgNIbjIPj31MKROWX0hYA_Rw.roa
File: Mf3LgNIbjIPj31MKROWX0hYA_Rw.roa (raw, json)
Hash identifier: ew368Pdf7auVy6Lddh8YrVGDGZ3XFkDNY+DvFboXE2s=
Subject key identifier: 31:FD:CB:80:D2:1B:8C:83:E3:DF:53:0A:44:E5:97:D2:16:00:FD:1C
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0190AD6FA994CC58D94E69024BA0E720791A
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Mf3LgNIbjIPj31MKROWX0hYA_Rw.roa
Signing time: Sat 13 Jul 2024 18:51:34 +0000
ROA not before: Sat 13 Jul 2024 18:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.199.213.0/24 maxlen: 24
185.226.182.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
185.250.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 11:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ad:6f:a9:94:cc:58:d9:4e:69:02:4b:a0:e7:20:79:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 13 18:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31fdcb80d21b8c83e3df530a44e597d21600fd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:53:81:92:ce:df:bc:b5:32:93:91:44:bf:
4e:d2:45:d0:88:be:a4:8d:54:1e:f5:7f:6e:6a:ec:
d3:7b:f2:43:5d:62:2f:c2:3b:93:7f:e1:d4:b7:a5:
03:07:61:47:9a:54:e4:14:bd:c6:c3:75:5d:93:6a:
73:64:58:43:71:35:96:e4:94:05:66:6a:ac:4f:0f:
62:a7:84:09:d3:a9:bd:9b:e9:16:c8:33:f2:9a:74:
e8:3a:0a:f8:0f:cb:90:20:8e:15:29:43:c1:fb:d9:
fd:9e:54:82:ce:9e:27:c2:4c:2e:c3:b0:37:3a:2e:
eb:cf:f7:e0:0e:dc:76:01:59:dd:a8:32:8e:33:70:
c8:09:53:90:a9:b3:98:8f:f6:7b:48:53:f3:03:0d:
4e:ae:28:29:01:62:62:d1:27:1a:1c:09:d4:69:eb:
c4:5b:4e:8f:2a:26:45:a1:f5:57:90:38:fe:99:16:
7b:2e:b4:78:1c:de:32:56:25:f5:ef:63:f7:fd:c9:
d5:b1:f3:87:b6:81:1b:c9:28:50:99:ea:fa:9f:c0:
a2:8a:8d:a5:73:fa:c8:1b:52:b4:1c:48:5c:06:f8:
1a:ef:c7:dc:7f:95:11:b8:90:d7:54:20:52:a1:9f:
d5:fb:1f:d5:82:39:49:f1:81:b3:6f:43:d2:b5:7f:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FD:CB:80:D2:1B:8C:83:E3:DF:53:0A:44:E5:97:D2:16:00:FD:1C
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Mf3LgNIbjIPj31MKROWX0hYA_Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.213.0/24
185.226.182.0/24
185.250.26.0/23
Signature Algorithm: sha256WithRSAEncryption
77:5a:04:59:96:42:43:72:81:98:2f:73:5c:cd:35:22:e8:14:
67:20:8b:5b:1c:b6:17:98:2e:03:7a:dc:5f:ac:e8:d8:8c:ad:
57:28:4c:6f:6f:2e:6f:cc:4c:b9:c6:77:9d:00:52:00:8d:04:
40:25:d6:f8:73:df:ac:49:64:17:77:92:f6:4f:d3:9d:d9:db:
7b:11:4e:23:d9:0a:9f:d6:98:d7:fe:b4:29:d3:e3:66:40:a1:
7f:9b:32:19:c7:91:3f:ae:7a:21:69:60:06:a1:25:33:dc:a6:
12:36:80:60:e4:fd:dd:ff:b2:57:10:0c:bd:7a:74:bd:e4:3b:
6b:7e:a7:8b:d8:75:55:f1:24:d0:9e:73:20:a8:a2:af:45:f2:
9b:d8:76:d5:ed:5e:a2:19:ce:02:fa:5e:d9:b4:50:99:4f:11:
9d:82:c1:ca:26:2f:d0:61:01:05:fb:1b:4f:ff:31:51:41:e7:
ec:41:3e:4f:b8:2c:15:4a:47:d1:d0:31:31:58:23:43:b9:de:
74:b3:22:26:18:17:71:bb:bf:8e:1b:9e:08:27:6f:3d:5f:ad:
77:77:11:95:8a:a3:a1:3a:79:66:2c:e5:ca:76:b1:80:c3:bb:
f0:31:40:18:aa:f2:a1:3a:e0:fa:4e:09:b9:5f:b7:3e:de:b8:
c8:67:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 14:07:27 2024 by rpki-client on console-ams.rpki-client.org