Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VSdCSztuVXvv4EgyRCJZeU-xe6o.roa
File: VSdCSztuVXvv4EgyRCJZeU-xe6o.roa (raw, json)
Hash identifier: CfHUwBSx5/cmZq+9LOSavUplkcOq2jLIQAWhHRveDtU=
Subject key identifier: 55:27:42:4B:3B:6E:55:7B:EF:E0:48:32:44:22:59:79:4F:B1:7B:AA
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018BF40D69DF35127971290630AD78260159
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VSdCSztuVXvv4EgyRCJZeU-xe6o.roa
Signing time: Tue 21 Nov 2023 22:43:21 +0000
ROA not before: Tue 21 Nov 2023 22:43:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 185.225.168.0/23 maxlen: 24
185.225.169.0/24 maxlen: 24
79.98.244.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f4:0d:69:df:35:12:79:71:29:06:30:ad:78:26:01:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 21 22:43:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5527424b3b6e557befe04832442259794fb17baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:14:d0:51:d8:7e:c8:e2:40:0a:43:36:cd:
af:c6:cf:6e:1c:e6:06:3d:f3:a2:b1:56:5d:5a:81:
db:c2:b6:68:eb:e4:0c:3c:12:02:41:9a:a1:ff:fc:
a5:dc:0e:fb:39:27:dd:b3:4c:95:a2:50:ba:24:65:
c3:d7:b8:4a:0c:95:1c:c7:5f:78:a2:16:13:b9:bb:
21:29:10:4a:3c:48:3a:e2:a5:de:da:6a:51:14:24:
a0:3d:b6:0c:c0:8f:f6:ae:b1:42:50:54:42:a0:19:
16:dc:73:fa:4e:33:a1:53:ed:35:8d:dd:05:aa:0a:
c7:b1:00:d5:6e:da:0d:09:64:d4:3f:2c:52:e5:8a:
18:88:a9:c0:97:05:15:80:6f:c0:4f:ad:f3:ea:25:
82:33:86:63:31:e4:0c:c5:92:a5:eb:ba:c3:b3:b9:
db:a2:c5:2e:9f:fb:6d:99:79:b9:09:e3:03:9a:87:
26:ac:71:f4:dd:51:04:58:e2:6e:4d:92:2a:58:e6:
ae:c2:17:3e:d4:d5:f8:cd:bd:43:c9:04:4c:e0:47:
cf:f1:ed:0f:40:d2:ec:95:c2:0c:44:1c:12:49:19:
db:25:e1:12:d8:a7:54:d2:1f:3f:ec:6c:0f:2c:ad:
58:0d:ea:3b:75:71:13:17:e7:cf:b0:07:3d:91:3f:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:27:42:4B:3B:6E:55:7B:EF:E0:48:32:44:22:59:79:4F:B1:7B:AA
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VSdCSztuVXvv4EgyRCJZeU-xe6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.244.0/23
185.221.24.0/23
185.225.168.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:db:a2:c8:ed:9e:d3:1b:12:9d:23:8c:8d:a0:b1:0e:bd:3a:
d1:93:2b:14:d0:37:60:f9:85:e0:7a:8a:4a:b1:ea:4f:5f:3f:
0e:d2:aa:3b:8e:ad:f9:55:8e:86:bc:49:08:99:bf:a5:36:0a:
0b:7d:a6:db:1b:36:69:2e:3f:13:1b:fc:75:3d:71:04:b1:99:
3c:7f:fd:77:22:d4:cb:84:07:35:6a:1c:58:d5:97:fc:40:6c:
10:eb:96:00:08:21:dc:58:9e:88:4a:a6:79:7c:ee:13:5d:b6:
ab:9a:4f:bf:3d:00:a9:50:b4:7e:15:8b:63:f4:fc:c8:77:53:
7b:1a:89:a4:73:62:c3:fd:c3:f2:96:40:8b:d2:e0:aa:0e:ba:
39:ca:b5:fc:3b:51:a7:34:c7:ee:10:40:d8:b0:20:ca:df:6d:
79:a8:d0:9b:ee:88:45:96:a2:0a:4b:90:76:4f:9b:6d:2f:9e:
6e:4e:d4:0c:ea:27:87:36:dc:86:f0:f0:f1:8a:0f:01:91:3c:
33:e4:d5:3a:9a:cb:bc:2f:a7:49:15:cd:13:c8:03:25:48:f1:
79:21:45:8a:7b:8f:60:cc:51:9b:a5:60:6c:ae:ca:b9:86:90:
37:c5:07:f4:bd:0f:39:a1:2c:5f:f1:5d:27:9d:2d:2d:91:82:
61:4a:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 07:57:56 2023 by rpki-client on console-ams.rpki-client.org