Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/atLZxKI1nJnD8pZpAaFWb6fmrLQ.roa
File: atLZxKI1nJnD8pZpAaFWb6fmrLQ.roa (raw, json)
Hash identifier: pKW5jz5QsjB7VNXzj5ZcGXI42tNTqzqqMwTtA6AYPgg=
Subject key identifier: 6A:D2:D9:C4:A2:35:9C:99:C3:F2:96:69:01:A1:56:6F:A7:E6:AC:B4
Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial: 018A461B8AFC71834C546D36160827444A00
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/atLZxKI1nJnD8pZpAaFWb6fmrLQ.roa
Signing time: Wed 30 Aug 2023 11:02:04 +0000
ROA not before: Wed 30 Aug 2023 11:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62462
IP address blocks: 185.35.41.0/24 maxlen: 24
185.35.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 18:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:1b:8a:fc:71:83:4c:54:6d:36:16:08:27:44:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Validity
Not Before: Aug 30 11:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ad2d9c4a2359c99c3f2966901a1566fa7e6acb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:71:a4:b0:7b:a8:59:6f:bd:34:62:eb:59:
6c:30:6c:a1:eb:cb:cd:92:89:3d:c8:a4:7b:21:3e:
ed:ab:d9:29:f2:73:df:f1:db:78:bb:d9:f9:32:b2:
0a:a8:fe:e3:4e:27:5a:60:d6:ee:52:81:33:4e:c1:
8e:46:57:52:19:5d:8e:fd:9c:fa:05:dd:90:59:e4:
dd:45:ea:fe:e1:39:db:8a:d1:a2:3a:4b:05:5a:6d:
2d:72:fe:89:1d:c2:10:37:e9:7f:7c:3b:06:c1:5e:
e3:df:49:bb:3f:c9:74:11:1d:b9:70:f3:02:df:a7:
26:36:8e:70:0f:ab:b2:42:3a:2d:e9:b5:ac:85:fd:
d4:de:99:ce:8b:1e:3f:e2:a2:94:e0:3f:1d:18:4f:
ba:90:2a:eb:6e:40:c0:1e:0d:9e:48:d9:4e:cb:13:
f3:d9:ce:e9:b4:3a:de:cd:a8:e6:ea:ae:ee:75:ae:
07:ff:df:41:a1:2a:47:04:73:0d:b2:f6:c9:3d:b2:
7b:09:6b:5a:9a:66:a9:6d:5e:d6:28:b8:51:5a:4a:
2b:0f:bc:c2:23:05:5b:09:c4:80:f7:ae:bd:01:29:
b6:85:cd:11:fb:de:b1:66:cb:63:8d:58:02:41:17:
b7:a5:f1:64:ea:14:28:7c:c9:1a:5f:67:b2:88:34:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D2:D9:C4:A2:35:9C:99:C3:F2:96:69:01:A1:56:6F:A7:E6:AC:B4
X509v3 Authority Key Identifier:
keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/atLZxKI1nJnD8pZpAaFWb6fmrLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.40.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:7a:68:d0:c7:20:5d:e2:26:bd:39:01:f1:c4:72:2f:69:58:
0f:74:a5:de:1a:7f:ee:b4:2b:7b:bf:17:3a:14:b0:47:6d:b9:
9c:8f:f6:7c:3b:d2:71:6d:16:5a:ff:59:3f:90:21:06:a9:ba:
71:d0:44:0b:0b:32:e7:37:84:f3:13:17:66:f4:22:a1:40:ad:
eb:a3:25:d8:ff:88:2b:8f:51:19:ff:90:10:11:e6:5e:49:e9:
46:22:4d:1c:5f:9e:03:13:7b:50:ea:23:cf:75:c8:bd:33:d1:
95:9a:3a:55:50:17:33:1b:3f:9d:f5:56:d3:c0:5e:dc:96:70:
58:66:43:37:66:6c:9a:09:37:84:d2:10:09:d7:60:4e:f6:7c:
92:4f:3d:02:1e:1a:11:e3:ff:ba:fd:4b:8e:0b:65:31:e4:61:
ba:c0:9e:31:a1:d0:31:20:53:93:fb:c7:0b:92:d7:bb:cc:89:
0b:fe:89:7a:84:50:83:c1:f1:fc:7d:ea:60:0d:17:b9:3b:71:
03:fe:3e:6b:89:cf:38:2f:e1:96:2b:d5:37:51:c7:8f:ac:71:
bf:8c:77:a0:49:5a:cf:6a:e0:78:9c:67:15:54:9c:61:5d:07:
ef:7c:d6:c5:be:74:c2:32:9d:35:cf:62:b7:8e:fd:86:d8:be:
5d:b7:9a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org