Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/XDuOGg-GtctsmFcUEbD0A-cfE_Y.roa
File: XDuOGg-GtctsmFcUEbD0A-cfE_Y.roa (raw, json)
Hash identifier: jWg8RjDW+GHcrZJphcATaQtgpToCqEjx5wvsf52ptV8=
Subject key identifier: 5C:3B:8E:1A:0F:86:B5:CB:6C:98:57:14:11:B0:F4:03:E7:1F:13:F6
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018E61F541587D9A5DD01E0E037943AF2438
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/XDuOGg-GtctsmFcUEbD0A-cfE_Y.roa
Signing time: Thu 21 Mar 2024 17:00:46 +0000
ROA not before: Thu 21 Mar 2024 17:00:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59895
IP address blocks: 185.226.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Apr 2024 07:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:f5:41:58:7d:9a:5d:d0:1e:0e:03:79:43:af:24:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 21 17:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c3b8e1a0f86b5cb6c98571411b0f403e71f13f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:82:43:31:b4:57:15:22:c7:b0:cb:17:3d:
35:e9:84:d4:eb:83:1f:a3:7b:90:1c:5d:c0:f3:70:
1a:53:6d:f0:15:34:6f:b8:76:56:5a:19:10:52:5b:
36:41:2f:44:d3:80:01:9f:64:4f:d1:8c:e6:88:aa:
74:e1:64:4c:56:91:9f:2a:54:6e:7f:af:5a:c7:5b:
eb:63:21:cf:c5:4c:86:53:4f:fa:0f:c6:95:88:4f:
46:91:50:e5:df:f8:fa:71:c3:b0:98:c4:40:5e:d1:
e0:16:55:ce:b7:b2:d1:5a:64:0f:d0:ff:04:6f:0c:
cd:b6:ce:61:f9:e5:1d:89:a7:a3:37:0c:83:80:ef:
51:65:60:e0:67:20:ab:86:af:08:d3:e3:e1:11:7e:
6d:54:a6:3c:58:a5:fe:05:14:89:be:67:27:1d:36:
ab:81:02:b9:4b:7c:80:ae:d4:a4:e6:d3:da:71:cb:
0a:99:d2:fc:19:4f:93:87:58:6a:1b:ed:5c:e4:01:
bc:52:63:ce:f2:c6:4d:96:67:e0:86:20:51:ac:a6:
d4:30:85:60:2d:08:30:49:3d:f3:11:48:e5:68:23:
bd:0e:fb:1d:7e:f4:32:fa:a4:33:ca:5b:bd:dd:ee:
4e:bc:98:43:3c:52:13:ce:c2:a9:e3:de:d7:51:0f:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3B:8E:1A:0F:86:B5:CB:6C:98:57:14:11:B0:F4:03:E7:1F:13:F6
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/XDuOGg-GtctsmFcUEbD0A-cfE_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fe:29:bd:ec:c0:e1:ea:38:92:27:dd:64:67:fe:77:8b:4c:
a4:16:ef:30:63:71:3e:8d:0f:96:b8:cd:4a:53:cb:b5:9a:7a:
4e:1f:82:aa:92:ce:5e:dd:92:a4:08:de:b9:e0:cb:64:8a:a2:
e2:97:c9:85:38:ac:5d:2a:21:02:51:ba:a5:b8:0a:9d:47:02:
21:22:af:1b:b0:41:fe:54:fd:ed:39:af:2f:b2:4b:36:05:1a:
29:3c:be:c0:9d:6a:62:9c:e0:ec:63:35:cb:83:c2:17:af:ea:
d3:36:53:07:c1:3f:dd:aa:17:5b:02:68:b4:1b:f2:b7:ac:69:
19:cf:4f:19:20:f1:98:7f:62:38:93:8c:c9:a7:e4:0c:da:c6:
2c:e2:d9:e6:d3:ba:d2:f6:11:a0:b4:1a:1f:d9:99:d4:35:57:
ab:83:dc:d1:ba:86:0d:44:a7:b9:b3:a3:ab:08:2f:93:d9:63:
8e:74:e5:65:4e:c1:2b:5b:f3:9c:18:69:c0:44:ad:14:50:2e:
c7:c6:74:40:0a:12:00:95:cc:b6:69:eb:9d:a5:9e:d1:9a:64:
39:e5:5f:73:a4:dd:d7:0f:d3:72:3d:99:12:04:55:ee:47:b4:
a1:c3:1a:1a:2d:ef:49:94:f2:13:19:e4:5e:e2:a4:05:96:0d:
ea:35:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org