Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ozylX789qGy6D4gCv5J7zawuQik.roa
File: ozylX789qGy6D4gCv5J7zawuQik.roa (raw, json)
Hash identifier: /uICBfbAvtiHsiuTS5wdQdZoiuXTbYjtrm0yzqG8IZk=
Subject key identifier: A3:3C:A5:5F:BF:3D:A8:6C:BA:0F:88:02:BF:92:7B:CD:AC:2E:42:29
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018CC8DF14CCF20BA46A7013109F0EA71EDB
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ozylX789qGy6D4gCv5J7zawuQik.roa
Signing time: Tue 02 Jan 2024 06:31:52 +0000
ROA not before: Tue 02 Jan 2024 06:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.250.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 12:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:14:cc:f2:0b:a4:6a:70:13:10:9f:0e:a7:1e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 2 06:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a33ca55fbf3da86cba0f8802bf927bcdac2e4229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b9:74:c3:92:aa:5d:c9:5f:4b:76:91:e7:b7:
24:b9:f6:b7:e1:c9:15:2e:64:54:7a:20:bd:6d:d4:
f4:57:b5:16:60:a6:64:09:68:e3:ad:91:de:ff:a2:
0e:65:86:76:a6:45:98:05:52:19:3d:1d:a0:f3:52:
4c:a5:31:02:06:15:65:ed:59:cd:ac:06:5f:bd:9d:
c1:a7:fe:9a:4b:be:52:5c:3d:b1:ef:0e:c3:9b:43:
a7:2a:45:7b:1d:8e:f2:4d:8f:02:04:10:cb:cd:2b:
22:17:b6:a4:28:cd:2b:ed:9c:71:df:29:7a:ef:16:
2f:2d:70:b5:72:4d:fa:10:92:61:d3:ce:54:1c:5c:
ba:e6:cc:ef:ca:05:78:d8:9e:2c:8a:9f:ef:24:da:
95:16:fa:68:70:48:f2:f5:5c:b6:e8:9a:40:c5:f0:
bc:81:dc:5c:13:72:76:c2:b6:13:d7:8d:f9:0e:b5:
4c:bd:f6:c0:c4:bb:35:01:8f:e9:c4:17:0f:fe:76:
e5:05:3e:d2:d2:74:64:8d:92:0f:12:71:61:13:51:
be:d5:53:d2:36:c9:5e:2c:4f:6c:ef:19:bf:9d:5f:
5f:6a:42:90:78:8d:ab:d3:9b:bb:33:1a:8a:59:d8:
2b:c2:a7:f4:c6:ea:00:21:b8:08:7a:f8:e3:34:f2:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3C:A5:5F:BF:3D:A8:6C:BA:0F:88:02:BF:92:7B:CD:AC:2E:42:29
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ozylX789qGy6D4gCv5J7zawuQik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.27.0/24
Signature Algorithm: sha256WithRSAEncryption
92:31:9e:36:ee:89:90:ba:a9:76:85:3b:8d:39:e0:71:65:26:
07:eb:5a:da:8c:fb:75:58:15:53:8e:31:49:d7:2d:9b:82:de:
a1:e2:04:db:ee:a6:41:f8:9f:28:05:57:46:f5:2c:39:4a:0b:
98:59:d4:2a:14:17:6f:d9:24:c4:a6:6a:cb:fb:ac:77:c6:aa:
48:de:7c:d5:e2:ab:4e:ee:a8:b2:43:7c:ab:f3:3d:9d:fe:df:
5c:e7:d5:93:27:79:5d:9d:31:0e:03:7a:f3:b2:15:47:46:08:
63:8a:55:2a:e6:ea:e7:c3:b3:2c:f9:cb:76:93:4f:e6:e0:c9:
87:8b:89:4f:d9:bf:28:b8:53:c1:57:56:aa:5b:db:76:08:38:
ca:e6:75:b5:57:97:72:1c:a2:83:db:8d:4b:23:44:b4:fc:72:
a3:43:e1:1c:b6:95:52:cd:ef:87:1c:cd:1b:ff:f7:70:83:fa:
40:2d:6b:35:b8:ac:2a:b6:1f:74:70:78:cd:1f:26:a3:3f:a9:
5d:a8:ac:f0:b5:10:dc:6f:df:34:c1:61:7e:bd:d1:f5:9e:4a:
5c:cf:96:a3:e7:84:12:ba:3c:31:e6:7b:cd:7a:55:21:32:fe:
e7:bb:31:67:bc:67:97:19:ed:11:a9:ca:4d:4b:bd:85:48:11:
54:42:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org