Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/bs8NSEJIz6yRO7XleKJUbOH82yQ.roa
File: bs8NSEJIz6yRO7XleKJUbOH82yQ.roa (raw, json)
Hash identifier: yrIcV5CVXtqjEeDMXJXldC1H0wBIRT6c9yuY1w2fONY=
Subject key identifier: 6E:CF:0D:48:42:48:CF:AC:91:3B:B5:E5:78:A2:54:6C:E1:FC:DB:24
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019164CB7BEEEE6095CB24E3863D6C4BA875
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/bs8NSEJIz6yRO7XleKJUbOH82yQ.roa
Signing time: Sun 18 Aug 2024 09:22:22 +0000
ROA not before: Sun 18 Aug 2024 09:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.226.180.0/23 maxlen: 23
194.146.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 06:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:64:cb:7b:ee:ee:60:95:cb:24:e3:86:3d:6c:4b:a8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 18 09:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ecf0d484248cfac913bb5e578a2546ce1fcdb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:d8:e9:93:ce:2d:81:0a:51:37:cb:cc:24:
67:17:39:3d:74:ef:38:7a:7c:21:4d:ef:da:d5:db:
ef:29:4c:37:b6:9a:b4:f3:9d:46:e9:09:df:1d:fb:
2f:52:a7:f1:42:da:a5:92:6b:04:c0:9f:c5:2d:58:
75:3e:ba:b5:68:86:51:60:e1:2c:1e:76:af:82:d8:
c3:fb:bb:30:21:81:a8:6d:50:16:c2:85:77:57:99:
b1:d6:b7:a9:88:79:e9:30:e1:8d:d0:44:0c:fd:b7:
6a:62:80:c2:3a:28:a5:81:6f:78:0a:ce:f2:93:6a:
53:9e:a6:9a:3b:cf:3b:92:32:22:44:ea:df:b2:08:
ea:7a:88:13:61:00:b7:c5:62:ea:38:98:8a:8c:ee:
83:1a:05:1c:4d:26:e9:35:91:72:39:16:69:0c:d7:
a5:44:6e:15:c0:0a:de:14:0e:88:49:9a:cd:60:16:
e2:7d:1f:7e:aa:81:e8:03:78:51:fd:6f:f4:aa:9d:
3d:7a:4b:ed:36:1d:ca:17:46:26:40:66:cd:18:45:
30:8f:ea:85:c3:76:f8:55:95:59:fb:90:28:15:aa:
43:07:04:55:97:3b:b4:2d:ce:f7:8c:7e:03:60:3e:
8e:72:42:8b:1e:32:ba:da:aa:c5:50:4a:e1:e3:da:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CF:0D:48:42:48:CF:AC:91:3B:B5:E5:78:A2:54:6C:E1:FC:DB:24
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/bs8NSEJIz6yRO7XleKJUbOH82yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.180.0/23
194.146.92.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9c:b2:cb:a3:4c:fe:32:0d:5e:da:47:e4:27:73:0c:20:2e:
82:42:9c:e4:56:b1:df:a3:20:82:38:a7:80:04:79:f4:d7:f8:
62:60:d7:42:5b:01:41:cf:7e:b5:4c:53:ae:37:2c:50:e0:b9:
35:80:70:8a:6f:67:63:48:14:89:a0:14:d6:4f:48:7b:c7:e5:
47:96:8b:0e:ad:0b:85:c8:39:5e:b4:02:b2:37:79:1f:f1:d1:
fe:95:b4:64:c0:eb:b7:f5:cb:e2:51:e1:8a:9f:d7:30:98:39:
12:e2:09:fc:f9:cd:d6:de:df:b3:26:81:70:b3:17:28:bb:53:
b1:65:7e:88:a3:12:bc:61:9b:25:98:ba:d7:b5:f5:ba:ae:b8:
23:6e:fa:1a:31:75:53:5b:77:01:0f:27:06:33:bb:72:da:1e:
df:6d:31:ac:4b:d8:db:f0:86:d3:3a:17:79:b5:da:e8:3a:4a:
ea:21:4a:09:fc:fc:eb:e9:74:b7:55:01:e6:90:b1:6a:ac:7f:
17:e5:1e:59:ac:93:c7:cd:66:5b:ea:53:e7:8e:89:62:73:14:
f2:31:3f:ff:d8:a8:9c:fb:65:f7:30:4b:37:e0:5f:e8:f7:e5:
3d:f0:40:de:f9:ba:2c:34:7a:0f:b4:64:40:d4:60:a9:10:a1:
b2:84:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 08:12:27 2024 by rpki-client on console-fra.rpki-client.org