Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wZ8BL4fZ-ab4v95mafnOaIOwEGY.roa
File: wZ8BL4fZ-ab4v95mafnOaIOwEGY.roa (raw, json)
Hash identifier: gp6a2d0Q0m/FJTV2MrlPPZJvC61LIBtLTCMTfsS0ozQ=
Subject key identifier: C1:9F:01:2F:87:D9:F9:A6:F8:BF:DE:66:69:F9:CE:68:83:B0:10:66
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0186D5A7414BCCEA583EE4A1D7D1DF9B7DCD
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wZ8BL4fZ-ab4v95mafnOaIOwEGY.roa
Signing time: Sun 12 Mar 2023 11:49:13 +0000
ROA not before: Sun 12 Mar 2023 11:49:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 185.199.214.0/23 maxlen: 24
45.157.211.0/24 maxlen: 24
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
79.98.244.0/23 maxlen: 24
185.221.24.0/23 maxlen: 24
185.221.26.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 22:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:a7:41:4b:cc:ea:58:3e:e4:a1:d7:d1:df:9b:7d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 12 11:49:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c19f012f87d9f9a6f8bfde6669f9ce6883b01066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:db:00:11:a0:82:54:96:2e:5d:7b:2e:7d:
dd:47:1f:5c:b3:fd:61:08:26:df:39:e9:f0:19:d0:
3d:fb:cd:7e:96:0d:48:59:01:b4:0e:19:7f:1e:82:
c9:6a:dc:eb:14:8d:e0:98:6e:ca:90:07:9a:c7:2b:
14:72:f5:07:fd:6a:68:01:8f:76:2f:dc:3e:96:35:
fe:1a:71:b3:b2:a5:93:54:d6:34:29:d1:6b:af:66:
a2:4e:fa:4b:4e:f5:29:23:1f:46:68:ee:5d:c1:e3:
a6:33:fc:18:fc:d5:b1:41:e6:f1:84:c8:ed:cc:3d:
d0:e2:08:9f:38:12:6d:ac:02:03:21:d1:87:0c:1e:
fe:04:fc:68:c0:67:0e:00:b8:2b:46:eb:3f:ed:c9:
d0:eb:7e:78:10:90:59:33:e5:fb:27:95:ce:55:42:
e4:ce:8e:24:e9:73:38:78:b7:ad:f0:e1:44:53:cf:
0b:4d:ca:26:50:66:cf:65:16:30:9a:38:d1:5c:6b:
b7:14:5a:28:e5:65:dd:45:dc:fb:cb:e2:19:a0:a1:
08:32:3e:9f:0d:ed:a8:7c:9e:59:20:4c:c3:8d:cb:
a2:16:3c:78:27:45:29:24:7e:2c:6f:09:00:bb:8e:
7f:71:b0:db:55:71:1d:e6:65:0a:78:ec:58:9e:8c:
4b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9F:01:2F:87:D9:F9:A6:F8:BF:DE:66:69:F9:CE:68:83:B0:10:66
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wZ8BL4fZ-ab4v95mafnOaIOwEGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.211.0/24
79.98.244.0/23
185.199.214.0/23
185.221.24.0/22
185.225.168.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:03:ed:d8:d0:a9:db:55:3d:a9:a4:5c:29:5d:a1:ec:c0:0f:
a1:83:62:0d:b6:93:94:ff:1f:4d:d5:d5:5f:7d:83:da:22:63:
c3:b5:6d:6f:de:d7:96:b5:2c:13:b5:3b:c5:2b:c9:de:9d:11:
6e:8d:2d:e2:26:65:2e:fb:7b:eb:98:db:d6:36:e9:bc:31:a7:
82:88:ec:e9:7a:a2:f2:8c:0f:67:83:e6:2e:0a:d8:58:3c:83:
bb:89:0f:1e:6c:f7:0e:58:f4:a0:e6:6b:3b:ba:f0:ca:46:26:
20:bf:7e:a4:3a:40:0a:a2:67:a7:02:e6:c5:e7:68:41:8b:39:
24:ca:ec:e2:4d:2f:9b:12:cb:13:3f:63:64:44:00:7f:27:77:
1d:d2:3b:48:d3:46:92:3d:84:9c:ff:d5:56:5d:5f:5e:28:a8:
1d:de:a3:78:a1:bd:31:13:4d:40:66:24:b7:03:39:f5:b7:1b:
08:08:1e:a1:86:e2:42:fa:07:ac:ef:3a:8a:6e:b1:d4:9d:73:
5b:27:40:4c:d4:50:8c:ad:af:9c:0b:e6:c5:cd:f8:62:27:d8:
64:4a:2b:d5:1c:26:02:45:58:39:e6:95:6a:54:75:bf:45:e8:
b4:61:30:e8:5c:04:96:18:e7:eb:47:a1:27:09:e6:4b:6d:9e:
5d:3c:a0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org