Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fi_WLmUhf-amGeFVwGmt0gvYs14.roa
File: fi_WLmUhf-amGeFVwGmt0gvYs14.roa (raw, json)
Hash identifier: 2jc8GAxsgO9+T6GOsjtJYQeKDnbKz+z78DTRuyJGl20=
Subject key identifier: 7E:2F:D6:2E:65:21:7F:E6:A6:19:E1:55:C0:69:AD:D2:0B:D8:B3:5E
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0187776553F1AD82C89F54B5D63FB95EB6AF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fi_WLmUhf-amGeFVwGmt0gvYs14.roa
Signing time: Wed 12 Apr 2023 21:35:41 +0000
ROA not before: Wed 12 Apr 2023 21:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 185.250.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 May 2023 06:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:77:65:53:f1:ad:82:c8:9f:54:b5:d6:3f:b9:5e:b6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 12 21:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e2fd62e65217fe6a619e155c069add20bd8b35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:fe:f9:ce:d1:a0:60:d2:51:37:7f:b9:4f:
13:a3:d3:7d:8f:75:0f:e4:bd:2b:49:f4:f8:e5:64:
5b:30:d3:79:8f:d0:14:7b:e8:75:3a:84:3a:42:ee:
b7:57:73:d3:72:94:a6:96:54:5f:0e:9e:e2:c7:42:
6c:c4:54:b8:af:b2:39:b4:6d:6a:b4:79:79:83:30:
29:90:bf:c6:25:73:0e:32:b2:7d:2a:92:7f:4b:28:
41:ae:17:b4:50:7b:9d:c7:28:91:9c:b2:85:78:47:
8e:9a:43:8c:de:45:4c:b2:5e:3e:c9:34:1d:b8:b2:
41:de:5b:a1:31:af:a4:14:46:5e:43:00:d1:9e:a0:
55:02:5f:23:b9:77:ac:bc:48:aa:e1:a5:e7:fa:32:
5f:20:57:19:91:96:5a:29:94:bd:80:78:63:f9:bc:
af:7b:8b:a2:92:44:00:51:ef:12:64:0b:0a:6c:50:
44:20:21:b9:91:63:a9:16:16:3c:a6:cb:37:a9:1f:
6e:18:ad:6f:ff:ab:00:9b:19:68:06:20:47:1c:64:
71:39:16:1a:0f:28:10:ec:43:58:4e:5b:4a:1e:db:
f2:08:0a:4d:1a:6d:00:d9:de:8b:a2:8e:dd:7b:7b:
91:9f:c3:2d:14:49:1a:2d:30:36:ce:b4:4c:12:bd:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2F:D6:2E:65:21:7F:E6:A6:19:E1:55:C0:69:AD:D2:0B:D8:B3:5E
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fi_WLmUhf-amGeFVwGmt0gvYs14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:70:dc:f8:91:22:e5:b0:41:66:25:60:10:46:30:c2:8b:b2:
c5:e7:c3:ee:f6:f9:5a:af:82:19:7c:80:8e:b6:2c:12:51:51:
04:5f:09:76:27:dd:a8:b1:5e:81:f0:ad:20:47:f9:b5:63:68:
c6:de:a7:ed:a2:fb:97:f4:6a:a4:65:ad:98:5b:bb:60:67:81:
e3:67:53:b5:bd:8d:81:c2:c6:30:cd:f9:a7:e0:89:2b:c6:41:
31:f5:7c:03:bb:67:ed:9a:d0:65:ca:58:71:2d:91:20:1a:3b:
c0:62:31:aa:21:01:cb:b4:94:ef:83:70:59:dd:44:3a:d7:34:
47:04:73:cb:ea:11:09:1c:70:a0:04:9f:e1:e8:e6:11:3c:f9:
dd:69:37:c4:77:8f:c6:36:74:c8:5f:da:75:9a:55:d5:f7:9f:
e2:cd:b2:a0:77:0d:1e:74:c6:58:3d:17:e0:1a:c3:56:e7:b9:
6d:67:91:38:a7:5f:d8:19:e0:2e:e6:8d:1a:41:f5:ab:f2:49:
ae:5d:02:fb:20:b0:63:62:17:ab:e3:cc:21:87:82:f6:0e:a9:
8b:67:fe:09:f7:29:fe:a4:eb:c0:af:c9:21:b6:7d:3e:78:3a:
d6:eb:02:80:df:a4:5c:27:b3:01:52:ae:7c:e9:14:62:d9:04:
8a:31:27:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org