Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/SRPpzdvtBzv5Ep_qa9ScKZTsPTY.roa
File: SRPpzdvtBzv5Ep_qa9ScKZTsPTY.roa (raw, json)
Hash identifier: h8BoIOD+nynSxS+CXMqBfqjutUhtNp9HEDNK7fK3jKc=
Subject key identifier: 49:13:E9:CD:DB:ED:07:3B:F9:12:9F:EA:6B:D4:9C:29:94:EC:3D:36
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01904E362102FA2092839C58798780C9BC5A
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/SRPpzdvtBzv5Ep_qa9ScKZTsPTY.roa
Signing time: Tue 25 Jun 2024 07:04:48 +0000
ROA not before: Tue 25 Jun 2024 07:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.221.26.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 11:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:36:21:02:fa:20:92:83:9c:58:79:87:80:c9:bc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 25 07:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4913e9cddbed073bf9129fea6bd49c2994ec3d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:a8:4f:70:6a:f9:e6:32:98:f1:b9:87:ca:
d1:45:04:9b:77:e1:4f:93:c9:a5:eb:9e:8a:93:2d:
ed:6d:b6:0a:77:d6:07:4a:47:1a:ab:4d:aa:5d:47:
9e:f8:7f:95:1c:5e:11:23:5d:7b:8e:18:81:37:19:
05:e1:68:47:7d:18:a0:13:cb:c9:94:e9:89:29:4a:
3d:9f:9d:de:a3:fc:46:59:98:af:6c:85:c1:01:cc:
42:62:32:86:22:51:3e:97:a7:33:b5:8b:7e:9c:9c:
f0:fb:67:d3:e3:c0:34:4c:15:9f:c4:bd:a3:d3:55:
09:b1:d8:a7:81:ea:c6:b8:45:88:47:f8:9e:3c:a4:
b0:d7:89:78:f3:20:f4:33:2e:2e:08:5d:db:e0:41:
17:d6:22:c5:f7:c7:d0:67:2e:c6:d0:36:47:f4:37:
00:8e:ea:7a:dc:fa:7c:01:5f:db:00:5a:48:47:65:
d2:a0:b5:fa:7a:34:90:db:32:a7:f8:ad:71:50:ba:
98:d1:90:b6:a4:06:cb:37:11:18:67:02:28:e9:7b:
07:43:d5:d2:03:e7:02:ec:4d:8c:7a:46:48:d6:44:
f7:24:66:1f:dc:90:05:27:3f:4d:37:a1:32:a4:2b:
03:89:30:24:42:ca:95:a8:f6:b8:92:d7:71:5f:d3:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:13:E9:CD:DB:ED:07:3B:F9:12:9F:EA:6B:D4:9C:29:94:EC:3D:36
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/SRPpzdvtBzv5Ep_qa9ScKZTsPTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.26.0/24
194.146.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:45:11:8d:f2:92:e0:86:2b:fa:6d:46:08:e1:8a:66:82:af:
c3:5e:b2:85:11:f9:42:98:06:02:f0:ab:d1:7e:0a:26:3b:3e:
70:c8:8f:3a:2d:f9:56:79:5b:15:8c:ad:6b:01:61:36:40:95:
83:c5:f9:d6:e5:d8:2a:16:8f:78:df:f5:e3:f5:8c:ec:c9:a1:
f6:c6:f7:90:4d:9d:ca:35:f9:36:dc:08:bc:b1:89:de:82:98:
a3:c4:8a:4e:9d:05:eb:a4:fd:f9:f8:af:74:fd:5b:2e:15:8e:
72:a5:e6:f2:ad:68:d9:cc:e1:08:e7:fe:55:84:5c:57:a2:f9:
c6:38:8a:6f:5c:64:e9:94:55:a8:80:3f:e4:88:97:32:09:f5:
a5:a8:59:a7:d2:a7:5a:5a:62:e4:88:b3:59:f1:18:10:a2:d5:
72:5a:2a:60:61:36:9a:70:fa:54:dd:57:bc:38:f3:21:c7:1d:
57:16:ad:07:ff:4e:50:57:45:30:c0:26:e2:c7:80:da:5a:2c:
7d:7c:2d:b1:e6:5d:f6:65:a6:19:2e:54:8a:29:c0:c0:8b:c6:
ac:e7:67:1f:be:5b:a3:3c:26:01:a0:88:1f:00:9f:5c:05:e9:
ff:7b:17:4f:5d:ee:ea:06:ca:03:ef:b9:3f:f7:c1:b0:d0:b0:
ca:49:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 14:50:08 2024 by rpki-client on console-ams.rpki-client.org