Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qlZ2eG9P__SImS-1q6wvmOpChVg.roa
File: qlZ2eG9P__SImS-1q6wvmOpChVg.roa (raw, json)
Hash identifier: GupO8kAofqd3Piaxv+ILAPc/bufAAHb1XcL9ggPbvHw=
Subject key identifier: AA:56:76:78:6F:4F:FF:F4:88:99:2F:B5:AB:AC:2F:98:EA:42:85:58
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01887C21399EAC8FD33870C7D4887FE74999
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qlZ2eG9P__SImS-1q6wvmOpChVg.roa
Signing time: Fri 02 Jun 2023 12:42:12 +0000
ROA not before: Fri 02 Jun 2023 12:42:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.199.212.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Jun 2023 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:21:39:9e:ac:8f:d3:38:70:c7:d4:88:7f:e7:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 2 12:42:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa5676786f4ffff488992fb5abac2f98ea428558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:90:76:83:81:7c:6e:18:54:2e:e5:e3:f2:
c5:a4:90:e6:98:ea:ed:3f:62:81:bb:4f:f3:e2:81:
80:44:83:41:d1:e8:f0:8b:fd:42:72:81:99:21:db:
d4:aa:90:41:ae:d1:37:af:4a:dd:d6:c1:6f:61:f5:
c9:6a:17:34:39:b9:cb:14:33:9c:d1:73:18:7f:23:
8c:b2:ec:57:a2:a5:98:89:b7:5e:4a:0c:95:68:62:
0a:4b:b0:d0:9b:49:7b:2c:a4:0c:f7:f4:b0:5e:81:
2e:ae:91:12:68:e8:4f:13:52:74:29:1d:51:1c:70:
ba:fb:d9:b8:60:9e:8a:f4:ce:ec:cf:9d:e1:db:53:
56:c5:ee:6d:67:ec:13:20:79:ae:5f:1a:5d:d4:4b:
b3:16:0a:44:be:ee:e7:0d:7b:c8:4c:0e:d4:39:32:
f8:d5:a0:03:74:22:b5:eb:af:1a:18:e6:7f:96:6d:
a9:85:d2:ba:10:6b:a0:f7:4a:b8:55:14:56:26:6a:
44:11:1a:2f:9a:7d:bd:5f:51:6c:bd:33:ec:d3:27:
ff:1d:7c:e6:d3:bd:92:35:99:ca:16:26:e2:6d:27:
82:25:a3:5c:56:f3:d6:62:f5:8f:20:44:6c:19:67:
0a:53:bf:26:0d:23:ed:9d:88:4f:9b:d9:8e:fe:41:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:76:78:6F:4F:FF:F4:88:99:2F:B5:AB:AC:2F:98:EA:42:85:58
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qlZ2eG9P__SImS-1q6wvmOpChVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.149.0/24
185.199.212.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6b:3f:08:c4:61:29:ea:2a:51:e5:4d:5d:c3:e2:f3:6e:e3:
fc:c4:35:5b:8a:63:f9:d6:1f:96:12:a7:a2:b1:c9:21:0e:50:
03:cb:25:9d:f1:a3:5c:a5:ed:87:a5:46:2d:86:41:5e:9b:ea:
48:39:e8:f4:19:0f:a3:2a:8a:51:0f:61:bc:75:c5:54:cd:60:
d3:0e:20:f0:c4:41:e8:00:c2:bb:d3:f4:31:66:83:a8:99:9e:
fa:1c:bf:47:80:b8:3e:44:40:42:ee:4a:06:88:5e:1a:3b:94:
43:e3:25:f6:ed:ba:8f:f7:5e:57:1c:7d:04:26:87:56:8d:64:
2d:cf:97:6b:f8:b1:b1:b8:d5:91:dd:02:44:b2:ed:ba:29:8f:
2a:a2:74:48:41:0b:6a:3a:a0:6d:c6:de:24:42:8c:6a:1e:e7:
06:16:9e:23:46:de:1f:fb:b9:e5:31:01:00:cb:e6:85:ca:73:
97:bf:a5:1f:ce:b9:e5:a6:a8:73:f9:6b:95:87:f4:08:95:55:
cc:3d:8f:1c:66:60:ef:62:ea:33:01:4b:f0:03:09:72:76:84:
43:7b:52:5c:d6:6a:fc:01:3a:73:03:4f:c6:5b:31:6b:5b:b8:
2c:d9:17:f8:4e:cf:8f:9f:0b:e0:66:8d:fc:6c:c6:b5:6d:61:
b0:96:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org