Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wMsccm0io_CuqoqzvVyNk-Kl3uA.roa
File: wMsccm0io_CuqoqzvVyNk-Kl3uA.roa (raw, json)
Hash identifier: KauleOfk43th8VJplatJFRapIPFYDgQFYIRy1bX+m+Y=
Subject key identifier: C0:CB:1C:72:6D:22:A3:F0:AE:AA:8A:B3:BD:5C:8D:93:E2:A5:DE:E0
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018596E0478940790D873942AADA7B139C69
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wMsccm0io_CuqoqzvVyNk-Kl3uA.roa
Signing time: Mon 09 Jan 2023 14:12:38 +0000
ROA not before: Mon 09 Jan 2023 14:12:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 185.199.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 06:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:e0:47:89:40:79:0d:87:39:42:aa:da:7b:13:9c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 9 14:12:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0cb1c726d22a3f0aeaa8ab3bd5c8d93e2a5dee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:e4:1f:35:7a:ed:ab:a7:a7:b6:27:f8:38:
5d:17:47:69:88:d2:3c:88:ca:1a:f7:37:71:c0:a4:
06:67:46:81:bd:74:91:22:1e:b9:a1:a7:3f:cd:13:
46:f9:c3:37:6c:ec:da:f9:78:25:fa:21:1a:1d:0a:
ad:13:f7:43:82:f1:37:ed:4e:4c:92:6b:0b:26:fc:
70:bc:13:50:97:58:cc:e7:85:6c:0b:cf:1f:7f:df:
ba:7b:e1:71:52:a0:61:1d:51:ff:f2:58:c2:74:d2:
93:3b:d3:53:13:25:22:49:e8:d0:91:ea:1c:5f:bb:
d5:cc:f9:42:03:9e:8c:b0:44:16:29:0e:36:fa:1c:
7c:82:64:28:3d:f6:cd:46:88:06:4d:9b:a2:57:2e:
17:16:62:c4:e8:54:46:a2:54:ce:e4:9c:c0:b8:77:
14:10:25:0b:47:09:b8:bf:15:08:ab:90:e0:3a:57:
c6:f1:34:01:f2:3e:b9:a3:e8:f2:64:89:7f:59:d6:
e5:43:45:38:0d:40:55:54:54:ba:3c:18:f9:a7:7c:
03:84:11:42:42:51:a0:f9:57:6b:ea:99:e5:c9:93:
e3:8e:5f:65:e4:a9:9c:e0:39:bf:e3:72:e9:36:38:
67:b2:a5:65:a8:7a:27:44:f1:b0:83:fe:69:64:9d:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CB:1C:72:6D:22:A3:F0:AE:AA:8A:B3:BD:5C:8D:93:E2:A5:DE:E0
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wMsccm0io_CuqoqzvVyNk-Kl3uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.149.0/24
Signature Algorithm: sha256WithRSAEncryption
12:61:0e:a3:91:ba:fd:9c:0e:57:ae:88:ca:3d:ea:6b:21:66:
53:74:07:b0:20:59:7e:dc:fe:42:5a:c6:9d:da:f5:12:7f:37:
3a:a3:f4:6c:49:08:2d:b2:60:bc:b8:25:46:55:fc:b0:26:aa:
34:46:8f:cd:20:73:54:f7:c4:59:f0:77:b0:1f:54:ca:27:37:
50:99:84:e8:dc:0b:3f:61:a5:dc:d8:6c:b2:06:cf:8f:40:9c:
0c:c7:1a:8f:ec:6b:75:22:7e:a8:57:9a:6f:ac:2c:f1:08:38:
f0:bf:d1:bf:e2:47:f3:e4:e9:a8:b0:c4:c1:9e:d2:06:d9:cd:
6a:39:1d:8c:02:a3:48:4c:6e:8d:f1:5b:64:2f:e3:f2:02:4d:
16:25:e2:ec:87:9a:d8:45:89:e4:08:50:dc:14:a9:0f:63:59:
66:cf:01:47:35:f5:82:c5:e8:52:b2:e1:26:47:3c:1d:b2:58:
01:bc:c0:07:69:a0:d7:f0:ec:a4:2c:59:b5:2b:0d:44:35:51:
29:7f:cb:33:f3:b2:4d:b8:b7:ce:6f:40:53:a2:3d:32:c4:14:
33:1e:8f:42:ea:5f:7a:37:61:b9:85:06:49:fa:16:08:2b:79:
6e:26:46:a4:e1:ce:bb:20:09:41:7e:65:b7:86:7a:e3:1b:ba:
2f:c9:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:36 2024 by rpki-client on console-ams.rpki-client.org