Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ReuEbsrNKPA-TA02lTqvLUJwB94.roa
File: ReuEbsrNKPA-TA02lTqvLUJwB94.roa (raw, json)
Hash identifier: 9JUnklE0W0uPdy8sM7Sm00K8lj1UxwzfNhe7Dkc9GH0=
Subject key identifier: 45:EB:84:6E:CA:CD:28:F0:3E:4C:0D:36:95:3A:AF:2D:42:70:07:DE
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019068F13DE09E14107E4177F0988F078051
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ReuEbsrNKPA-TA02lTqvLUJwB94.roa
Signing time: Sun 30 Jun 2024 11:39:18 +0000
ROA not before: Sun 30 Jun 2024 11:39:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.199.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 20:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:68:f1:3d:e0:9e:14:10:7e:41:77:f0:98:8f:07:80:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 30 11:39:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45eb846ecacd28f03e4c0d36953aaf2d427007de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:92:f6:4b:18:6c:11:4e:17:02:62:c4:cf:
ba:37:26:ab:6f:57:d5:3d:d5:65:83:a0:57:5b:ea:
10:32:fd:3f:5c:3c:fa:d1:1c:c7:8f:44:f8:f2:c2:
78:22:c6:69:47:be:73:eb:35:ad:77:9d:dd:a8:13:
b5:cf:80:49:cc:5f:f9:e5:89:ea:22:f5:f4:60:b1:
93:b6:00:46:69:fc:44:c2:25:23:6b:71:ec:e4:bf:
ee:6d:01:52:5f:58:bf:36:31:1a:51:be:53:5c:2e:
0d:f3:d2:8a:99:5f:2c:21:91:81:fc:db:81:15:06:
aa:1b:c6:db:6e:44:8d:5a:c5:e3:91:bd:1a:da:0e:
42:00:8c:58:65:85:c5:c9:cf:2a:aa:ee:dd:ac:9e:
28:09:93:18:f3:c4:98:be:79:84:ff:20:57:fd:a2:
70:6e:6c:79:dd:ce:66:70:6b:2b:89:f0:33:06:bf:
df:63:d0:6c:b2:ba:3f:cc:f3:7f:20:bc:4e:ec:a9:
41:ca:07:ae:e1:82:59:90:0c:9b:3f:8f:99:6a:17:
e7:fb:bb:85:4a:b0:e0:f5:76:9e:05:a1:df:9c:b5:
4a:76:d1:71:3b:80:48:b7:b2:5a:de:0e:de:1d:96:
14:ee:ae:65:92:8b:1d:32:a5:38:88:d9:df:9e:cf:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EB:84:6E:CA:CD:28:F0:3E:4C:0D:36:95:3A:AF:2D:42:70:07:DE
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ReuEbsrNKPA-TA02lTqvLUJwB94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.213.0/24
Signature Algorithm: sha256WithRSAEncryption
33:61:36:ba:ed:d7:60:02:72:04:86:1e:3e:0a:d0:91:d4:b1:
4a:14:be:57:8d:67:fb:68:2d:11:16:88:8e:a7:bb:14:d7:2d:
6e:72:d2:9a:0d:80:f8:63:3d:c0:20:11:54:11:01:c8:d6:30:
5d:5c:01:8a:06:aa:a6:4e:47:f3:10:1e:17:38:be:6b:00:71:
80:30:35:35:02:e3:6b:4d:44:e3:6a:7f:d5:cd:39:1c:c9:73:
75:16:33:cd:b4:d4:08:8e:b8:22:d6:4f:b8:0e:d3:34:cf:a9:
3b:bf:05:d8:64:03:ab:20:4e:4b:6d:b6:ee:b7:23:de:ef:ce:
a1:c3:94:5b:b9:e5:39:fb:35:16:d0:20:2c:d5:37:14:ae:e5:
f3:be:61:71:cd:58:84:96:f3:cf:d4:96:ee:4b:c3:eb:d4:a7:
68:ce:72:06:08:0c:d4:bd:cd:d9:ed:e2:85:1e:22:ca:e9:78:
f1:bb:e2:5b:7e:41:8d:3b:a2:e5:0f:04:1c:14:fe:db:cd:c3:
17:1a:e0:06:df:ae:95:35:62:c4:dc:a2:99:32:de:6f:95:97:
1b:40:0d:aa:e8:54:08:5f:a1:78:53:7a:8c:ce:e1:99:8f:38:
f4:f6:fa:60:c0:b7:42:7f:c8:57:7a:9b:a1:83:a4:42:c2:92:
4d:11:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 21:23:36 2024 by rpki-client on console-ams.rpki-client.org