Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/O6vDKCTIQ1tbFlVjNWQThWjI1g8.roa
File: O6vDKCTIQ1tbFlVjNWQThWjI1g8.roa (raw, json)
Hash identifier: zgC/I4JZGbhMgHD/31szibA/gkZtsfsIXDlfMln+zUE=
Subject key identifier: 3B:AB:C3:28:24:C8:43:5B:5B:16:55:63:35:64:13:85:68:C8:D6:0F
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0192B0A06E9A38470647AD6B448D78EF9CBC
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/O6vDKCTIQ1tbFlVjNWQThWjI1g8.roa
Signing time: Mon 21 Oct 2024 19:49:16 +0000
ROA not before: Mon 21 Oct 2024 19:49:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 12:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b0:a0:6e:9a:38:47:06:47:ad:6b:44:8d:78:ef:9c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 21 19:49:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3babc32824c8435b5b1655633564138568c8d60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:7a:f3:7c:7f:af:5f:5e:93:83:07:59:29:
2e:2c:e2:40:10:a1:2f:51:61:43:76:b2:26:bc:5a:
68:bc:45:9f:88:f1:ee:f4:d1:ff:60:cb:69:c9:da:
36:fa:3d:7b:ff:5b:b2:59:dc:f8:2b:1a:19:1f:89:
ae:20:98:cf:bb:3b:86:dc:07:b0:33:93:b8:11:3a:
24:0d:47:e0:dc:93:48:d0:de:5d:58:4d:b1:16:2a:
20:fe:75:a3:28:45:7d:a3:35:09:9d:3e:0b:b3:1d:
64:54:f0:29:3d:e8:3b:74:2a:dc:97:74:a3:c6:ef:
4f:a1:a9:65:89:9d:17:1d:0d:b6:72:a6:e1:64:fd:
06:41:54:de:e5:96:0b:76:73:23:e5:52:e2:f4:fd:
1c:84:02:15:9f:28:89:71:4b:fa:eb:10:2b:ff:8b:
5f:51:06:6f:f7:cc:5d:8d:89:cd:70:f8:a2:cd:b9:
a1:a1:53:08:c2:b2:77:be:d3:51:a0:de:1d:48:ca:
14:27:3d:8e:ad:83:3e:15:59:7f:5c:6f:43:f1:b4:
83:0e:99:b5:63:3c:43:ee:f2:d5:7b:09:af:32:00:
ac:2f:86:82:d5:0b:d3:5f:2d:05:72:6c:f8:4b:e5:
2e:e0:9f:b8:08:fb:65:c4:47:48:1d:f6:83:8a:2f:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:C3:28:24:C8:43:5B:5B:16:55:63:35:64:13:85:68:C8:D6:0F
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/O6vDKCTIQ1tbFlVjNWQThWjI1g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.213.0/24
185.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5e:26:e3:dd:8d:b0:36:27:64:37:f7:75:47:9d:ca:74:a2:
02:61:10:88:fd:b6:2f:88:10:bb:a2:77:34:cd:36:f1:0d:8c:
f7:14:56:74:96:12:37:87:63:cb:c0:75:59:fb:57:01:9a:c6:
c5:74:38:54:f9:64:95:a6:1b:2d:f3:5d:3e:e3:d4:85:34:b8:
a6:f6:79:41:4e:80:fe:0d:fa:d6:b7:9e:0f:5d:f7:7c:e2:94:
f3:50:f0:0f:70:23:66:ee:6c:e4:fe:0a:12:a7:cf:36:54:d9:
c1:0f:45:8b:86:b1:74:dd:a1:07:55:e6:4b:a1:8a:dd:dc:a2:
82:46:68:39:a6:5e:55:a7:a4:a2:4c:35:60:33:4e:47:9c:d1:
62:08:86:aa:dd:27:23:b2:b5:94:4b:46:b8:3b:53:14:69:21:
6b:e7:6e:d2:1c:f1:aa:fc:e2:8a:88:6b:fe:0d:af:f2:2e:5b:
22:52:78:5d:ef:5a:a3:5c:31:1d:f2:c5:52:2f:e1:14:5c:c6:
7f:89:d3:58:be:7d:24:d5:9f:5e:6d:f8:bf:c1:e8:83:3f:72:
c4:09:b9:7a:44:a8:f9:5c:3e:cd:84:4b:fd:03:39:1c:6f:fe:
c2:eb:f6:63:d5:ff:a2:5f:72:06:ab:d9:f0:97:6e:8b:a9:2b:
e0:17:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 14:16:24 2024 by rpki-client on console-fra.rpki-client.org