Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/kXv-GSAgWiEaxOP8O_a8NaVrm2Y.roa
File: kXv-GSAgWiEaxOP8O_a8NaVrm2Y.roa (raw, json)
Hash identifier: UIQyIZ9oIGd+hHdkozTqn7bRqUkLxVQXxBsSJkJfDc4=
Subject key identifier: 91:7B:FE:19:20:20:5A:21:1A:C4:E3:FC:3B:F6:BC:35:A5:6B:9B:66
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018857785974E5C15283B760E94E23DF93E3
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/kXv-GSAgWiEaxOP8O_a8NaVrm2Y.roa
Signing time: Fri 26 May 2023 09:51:24 +0000
ROA not before: Fri 26 May 2023 09:51:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.171.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 22:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:78:59:74:e5:c1:52:83:b7:60:e9:4e:23:df:93:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 26 09:51:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=917bfe1920205a211ac4e3fc3bf6bc35a56b9b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:49:0a:d3:ce:d7:b4:63:f0:10:85:5b:b1:
3e:1b:ed:af:28:71:f5:48:24:9c:34:89:d2:50:11:
8d:c3:c6:7c:95:be:72:ec:8b:73:16:07:76:34:a7:
72:88:c5:1b:82:ba:b7:48:76:7e:ed:f6:85:1c:64:
6d:e0:77:67:2e:74:25:75:ac:3a:84:67:2f:4b:33:
9e:f5:40:ee:a4:ad:98:1a:17:97:21:9c:ea:d3:94:
62:23:7c:f6:de:e9:d0:d4:6d:e4:14:fd:20:cd:ae:
11:ab:62:20:5a:3e:35:9e:ad:fe:bb:cd:c3:a2:69:
66:bd:2d:ab:7c:31:81:d9:49:26:61:31:b7:ef:cb:
63:cb:0f:37:18:e7:fe:1d:fd:8f:6b:2d:9f:e9:b7:
7f:32:e1:3c:68:db:d1:df:d2:51:ed:0a:f1:b6:58:
cc:58:80:86:53:63:cf:df:27:29:cf:0e:43:51:27:
e0:b9:e6:52:d6:cd:bc:7d:39:d4:ca:7d:ab:b0:53:
67:09:d3:6f:6f:75:60:5c:7d:e2:7a:3f:e1:5a:81:
49:9c:49:91:eb:c1:65:1f:68:a7:bf:26:12:82:36:
7c:9a:0d:5c:1e:95:df:e5:bb:d9:d6:73:ed:b5:9e:
3b:46:0d:86:0a:9a:f4:c8:b2:87:84:49:da:91:27:
71:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7B:FE:19:20:20:5A:21:1A:C4:E3:FC:3B:F6:BC:35:A5:6B:9B:66
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/kXv-GSAgWiEaxOP8O_a8NaVrm2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.149.0/24
185.225.171.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7d:48:5b:e8:b9:69:84:6c:d5:4b:ef:9a:ec:f4:af:5a:79:
d0:3c:ab:14:4e:2e:4f:f1:7a:fd:3f:59:35:e2:dd:0e:38:d2:
39:00:2c:49:6d:8c:d0:dc:15:9a:70:4b:5d:20:85:95:04:de:
f4:31:73:66:e4:51:9d:c6:d5:c0:e6:c8:58:c6:33:b0:cc:fd:
ae:26:79:a9:79:40:82:f8:d9:31:9d:d4:18:05:c1:d9:01:7f:
28:9b:02:4f:f7:d6:67:b7:77:a2:5c:54:02:33:af:00:73:63:
1b:9e:1c:13:ea:7f:a3:f0:e1:d3:be:49:96:2d:f2:8b:39:9c:
2c:a3:c9:39:64:e1:c3:9b:89:73:88:25:c9:ce:b5:56:f6:43:
e5:54:37:bd:cc:a6:20:d9:c9:ef:58:d7:34:fa:ec:ab:75:ea:
1d:79:25:be:5d:b0:58:53:44:69:1a:60:15:e6:b2:be:31:19:
ee:3d:76:71:ad:77:51:79:85:0d:56:ad:f3:63:b2:ce:b5:3c:
f7:59:a1:01:1f:bf:5b:ac:a1:5d:40:4a:6c:f1:99:6d:53:57:
1b:cd:e2:94:7e:68:b3:cc:e1:00:94:75:92:87:c9:f2:20:b8:
86:93:1b:62:8a:ec:06:14:ae:ac:64:0d:be:4e:58:0b:85:95:
f6:97:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org