Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Tjtf195LDYIIQJw4sJuXjB1fpH4.roa
File: Tjtf195LDYIIQJw4sJuXjB1fpH4.roa (raw, json)
Hash identifier: UPTUwyjqULzJJG9rzdbrTjS5W9r1Lqx9w4Z20lJ7N40=
Subject key identifier: 4E:3B:5F:D7:DE:4B:0D:82:08:40:9C:38:B0:9B:97:8C:1D:5F:A4:7E
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0187E0BAFC654D67572154C95EEB52AF962A
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Tjtf195LDYIIQJw4sJuXjB1fpH4.roa
Signing time: Wed 03 May 2023 08:29:23 +0000
ROA not before: Wed 03 May 2023 08:29:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.226.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 May 2023 09:51:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:ba:fc:65:4d:67:57:21:54:c9:5e:eb:52:af:96:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 3 08:29:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e3b5fd7de4b0d8208409c38b09b978c1d5fa47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:93:40:2d:f8:e6:4c:72:69:71:e9:30:ac:
93:45:e9:70:fb:59:de:52:cf:be:e7:9b:5d:7c:21:
a6:02:18:3f:87:ff:4b:5f:e1:a0:7a:bb:a5:87:21:
b3:23:50:da:11:94:20:e1:7b:af:1b:a6:70:c3:ff:
58:a7:2a:c2:39:e9:bd:40:48:20:b4:22:b9:f7:6f:
a3:11:5a:40:41:de:4c:95:4d:67:3a:96:5e:51:df:
f9:67:5d:d6:91:96:fa:47:59:b3:44:af:95:0a:3e:
c7:45:86:9b:74:3c:f0:a8:d8:e3:35:6b:df:b5:e6:
85:2c:32:90:03:74:f4:08:e2:e6:29:9c:ca:40:87:
e5:91:83:84:62:e1:ab:b8:0c:8f:75:3a:ca:32:84:
23:b3:7c:b1:c3:61:9b:e9:c6:57:74:95:2d:ed:0e:
82:e2:20:b9:56:86:e7:ed:0a:6c:d8:96:45:cc:00:
86:f8:40:88:49:40:12:82:84:fe:f7:60:00:85:43:
53:f4:e6:e9:f4:ee:ff:30:c5:a2:df:77:e2:3c:f1:
0a:81:fa:f3:d7:28:a7:68:df:43:9a:4b:19:9c:68:
b8:40:5f:b9:45:8f:1b:27:6f:4e:29:41:e0:c7:61:
f5:e1:a5:bc:2c:76:44:65:16:1d:4b:9d:5a:2f:de:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:5F:D7:DE:4B:0D:82:08:40:9C:38:B0:9B:97:8C:1D:5F:A4:7E
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Tjtf195LDYIIQJw4sJuXjB1fpH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9c:ad:5f:48:97:e1:ed:3e:e0:f0:82:b8:c4:1b:69:9a:e3:
3d:43:f2:f6:e7:08:2b:ba:39:ca:2c:84:5d:67:31:14:e9:b6:
6f:2d:91:c8:57:33:06:fc:79:6a:e4:23:9b:22:5f:65:3f:a3:
84:03:f3:45:f0:4d:7b:86:f9:f9:fa:27:7e:e1:50:dc:25:ce:
d0:00:3c:b2:36:2a:f7:7e:e0:2c:70:b5:c3:f2:0d:70:33:e7:
31:72:e6:0d:bc:50:67:60:91:2d:aa:c5:33:2a:52:4e:71:4a:
08:6a:fb:3a:29:3f:ed:ab:72:e2:64:02:63:1a:77:55:51:76:
1a:38:e6:3b:47:aa:a7:c8:36:a2:38:2e:8b:c3:ad:7b:54:19:
30:d2:a1:32:48:88:96:58:99:54:14:0c:d7:c0:80:2f:f2:85:
7e:e2:b2:af:f1:16:90:14:6d:bd:da:aa:3d:d4:14:c9:b4:40:
9c:22:80:72:38:3a:86:b1:9c:04:08:40:ad:26:9e:c8:6d:6d:
6b:c8:e9:37:1c:f9:fa:7e:fe:6d:21:e4:27:03:57:98:3c:e9:
1b:af:29:20:3d:10:ce:b0:8a:04:7b:fd:e2:3f:7f:6b:d0:ad:
f4:83:d3:74:cd:87:6a:4f:39:d7:22:f9:b4:87:52:f0:d5:ac:
d5:5e:57:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org