Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/auA7762mm6rcxAK8wJG1A-gnvR8.roa
File: auA7762mm6rcxAK8wJG1A-gnvR8.roa (raw, json)
Hash identifier: UC+NLT1N3L5ohNiGUhY2cYvKpGhOzCwHnk9BuUqCNGo=
Subject key identifier: 6A:E0:3B:EF:AD:A6:9B:AA:DC:C4:02:BC:C0:91:B5:03:E8:27:BD:1F
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01880D0EBC678DB9C11B356E99FBA043293E
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/auA7762mm6rcxAK8wJG1A-gnvR8.roa
Signing time: Thu 11 May 2023 23:04:09 +0000
ROA not before: Thu 11 May 2023 23:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 185.199.212.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jun 2023 12:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0d:0e:bc:67:8d:b9:c1:1b:35:6e:99:fb:a0:43:29:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 11 23:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ae03befada69baadcc402bcc091b503e827bd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d3:29:b9:83:9d:21:fd:a2:4f:91:5a:bc:2f:
0f:e2:b5:90:de:0b:a7:a7:29:49:32:46:17:20:ef:
4f:67:da:f3:b5:3a:cc:08:47:03:87:06:d1:f9:bb:
06:d4:80:65:4b:95:cf:2d:cc:12:49:bb:b2:22:1f:
2d:0e:06:cb:21:27:4c:ca:06:6d:64:82:00:16:70:
8c:c9:ba:7c:15:ba:b3:b1:7e:27:57:ad:92:c4:c4:
e3:f8:82:62:1f:71:58:6c:8a:63:22:a1:9a:ff:bc:
9b:26:fc:c8:7d:c6:fc:1a:b8:d5:f5:95:da:c0:c2:
dc:50:cf:5a:9d:da:c0:16:10:82:48:61:84:ed:8d:
ae:d0:06:12:34:04:d8:6a:8c:56:96:56:2c:0d:d9:
6b:b2:4c:4a:2e:5a:16:4c:08:57:96:c1:9b:4d:b4:
69:f3:78:a3:64:d3:a5:08:d7:62:37:29:02:bf:19:
19:1d:f9:43:bb:45:4c:29:92:ac:50:3a:29:56:7b:
6a:0a:8c:45:90:0b:9d:d9:68:f3:32:19:3d:70:80:
e8:7f:3c:28:e6:56:96:78:0d:9d:a8:3c:ff:f6:4a:
bf:e9:b1:b8:e7:5f:47:c5:27:33:cb:9f:94:6a:b1:
9c:47:3b:36:64:ae:85:95:eb:bc:14:4a:b9:bf:47:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E0:3B:EF:AD:A6:9B:AA:DC:C4:02:BC:C0:91:B5:03:E8:27:BD:1F
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/auA7762mm6rcxAK8wJG1A-gnvR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.247.0/24
185.199.212.0/24
194.146.92.0/23
Signature Algorithm: sha256WithRSAEncryption
34:c4:d1:ef:19:97:22:56:6f:2b:8b:35:9e:2e:62:3e:c0:f5:
5b:9d:eb:e6:c7:91:1a:4f:15:0f:40:a1:d2:25:ca:fc:a5:d9:
a8:21:d1:7d:41:4c:5b:23:08:a1:71:d2:30:d0:c8:7c:11:11:
d5:26:6c:eb:96:10:c5:7b:8d:9d:58:fb:6c:9e:60:1b:e1:98:
76:d5:38:9e:23:7a:50:13:99:30:f3:60:62:2b:65:ea:f6:18:
2c:87:c7:8c:53:40:db:25:06:cc:55:a8:b1:e0:50:5b:13:f6:
bf:83:9e:b3:23:76:62:3d:68:8c:4a:85:a3:36:3a:29:55:0e:
62:f8:94:68:c0:35:ea:12:d6:b4:03:05:78:a1:13:88:2f:1b:
c1:86:aa:71:32:7a:ae:c6:c0:2b:61:e8:13:5f:dc:9c:7b:56:
13:69:cc:84:b6:e0:30:04:74:6f:a3:38:e4:64:5e:4b:03:a5:
4b:c7:bd:62:bf:bd:56:90:77:9d:73:ef:29:ec:32:7c:38:aa:
c0:2c:07:0b:fb:d9:5d:4d:92:9f:02:22:d4:e3:52:ed:0f:d6:
87:8f:e1:f3:11:19:35:d0:4f:54:8b:17:e7:5c:30:d8:43:22:
d6:ef:bf:3b:d4:67:b2:e1:ca:0c:bf:03:a5:3a:b1:14:cf:c5:
2f:0a:1c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org