Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qWBAtfavsI5g-fSZ_lyt6tqyF2U.roa
File: qWBAtfavsI5g-fSZ_lyt6tqyF2U.roa (raw, json)
Hash identifier: dXTILa1a4HdN5ZThSSjy6MhYCj+WNazfK0b1qcre2J8=
Subject key identifier: A9:60:40:B5:F6:AF:B0:8E:60:F9:F4:99:FE:5C:AD:EA:DA:B2:17:65
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0190C068FA00066A519D66EAF940C92C23FE
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qWBAtfavsI5g-fSZ_lyt6tqyF2U.roa
Signing time: Wed 17 Jul 2024 11:17:03 +0000
ROA not before: Wed 17 Jul 2024 11:17:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 185.250.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 08:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:68:fa:00:06:6a:51:9d:66:ea:f9:40:c9:2c:23:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 17 11:17:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a96040b5f6afb08e60f9f499fe5cadeadab21765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:8b:8c:4d:c5:3e:e9:69:8d:49:62:1b:9f:
96:93:51:e9:a0:f2:78:ed:9b:72:d3:c6:17:5a:5d:
3f:fa:9a:70:cf:23:07:ad:0e:45:3d:cc:f3:78:eb:
8f:fa:5b:34:12:90:5e:02:c7:c5:2b:52:51:86:6d:
93:63:44:73:1c:6e:2e:bd:18:40:9e:b6:c4:f2:55:
95:e6:ee:db:18:c2:82:02:f9:0f:90:e7:60:09:bc:
05:ee:cf:0a:18:d8:54:19:f8:89:66:a3:b3:db:15:
a6:1c:8b:61:09:07:09:fa:2b:b4:bf:ed:54:00:b5:
c2:8e:5e:18:1b:34:99:d6:77:c5:8d:b0:57:cf:11:
6a:b6:3b:e5:a0:7c:a9:a8:32:9d:c5:d0:d0:59:59:
7c:12:ee:e4:d5:1e:2f:a9:6e:3f:a0:62:88:76:25:
c8:1d:78:dc:30:2a:84:3a:9e:cd:b8:8a:6b:18:eb:
7f:bc:37:39:66:42:c6:fb:df:63:43:36:15:8a:78:
df:90:2f:35:59:a3:52:70:d8:6f:29:15:12:02:f8:
0c:38:f3:05:cc:a7:f1:61:c2:fa:4d:b4:83:47:7b:
a5:37:8d:69:87:81:33:a1:3d:29:7f:d1:22:fc:8b:
a4:7e:c2:a7:6c:8e:ee:e3:0c:0f:2f:2c:97:36:51:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:60:40:B5:F6:AF:B0:8E:60:F9:F4:99:FE:5C:AD:EA:DA:B2:17:65
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qWBAtfavsI5g-fSZ_lyt6tqyF2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.27.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b6:1d:c8:e2:38:9e:c1:7b:f2:18:7b:26:88:7f:43:03:94:
1b:d8:89:19:34:41:e6:bd:5c:60:cd:ad:5f:05:37:d8:e4:cb:
53:6e:cb:12:7b:c0:86:e3:74:ea:b4:ac:11:51:7e:0d:44:e9:
77:f0:6b:dd:65:4e:53:d5:31:01:bf:de:bd:5b:eb:04:49:eb:
81:f0:ff:27:13:a0:b8:a6:0b:a0:37:ff:9d:5c:02:6a:e1:8b:
fa:7c:a8:69:18:24:71:74:ee:ef:6e:64:3d:5f:7b:5b:28:2f:
b1:ed:6b:2e:d2:07:b9:f4:ea:96:4f:92:c8:22:24:0a:9d:2d:
38:10:cf:1e:ad:89:71:c8:d3:c9:5d:c2:28:7a:e8:36:c9:25:
e5:99:9e:db:82:1a:96:74:8f:82:7f:b1:b1:38:46:c1:6d:45:
b3:62:25:2f:56:08:a8:6f:23:84:88:e4:61:e0:14:70:5f:6a:
90:14:99:f8:e3:6b:d8:02:4b:47:2d:30:3b:aa:ee:e5:e3:a7:
7a:fd:a2:35:62:d1:e0:bd:4a:e1:96:03:e5:d0:02:2b:8d:bc:
b8:35:00:dc:1f:b0:49:f2:0c:d5:0e:e9:a0:96:10:ce:50:03:
48:2b:82:a8:83:1b:d1:2f:6a:1f:ca:db:6c:53:f2:33:fd:68:
2d:c5:1b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 10:11:12 2024 by rpki-client on console-fra.rpki-client.org