Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/bXKLJw7_RsiSjwbqbKROf4mDqW4.roa
File: bXKLJw7_RsiSjwbqbKROf4mDqW4.roa (raw, json)
Hash identifier: AXCXilG6oC+jb+vnVWQdMkwZeBE4NTcz2BfyCCcVnDk=
Subject key identifier: 6D:72:8B:27:0E:FF:46:C8:92:8F:06:EA:6C:A4:4E:7F:89:83:A9:6E
Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial: 018A6BCC202745119557D2D1DD4680EC9A11
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/bXKLJw7_RsiSjwbqbKROf4mDqW4.roa
Signing time: Wed 06 Sep 2023 18:40:54 +0000
ROA not before: Wed 06 Sep 2023 18:40:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62462
IP address blocks: 185.35.42.0/24 maxlen: 24
185.35.41.0/24 maxlen: 24
185.35.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 11:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:cc:20:27:45:11:95:57:d2:d1:dd:46:80:ec:9a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Validity
Not Before: Sep 6 18:40:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d728b270eff46c8928f06ea6ca44e7f8983a96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:de:4c:c2:33:66:4f:ea:b3:b4:ec:63:29:
9c:9a:eb:cc:65:31:c5:1a:4f:4f:57:2f:76:ac:d6:
c7:59:12:20:93:c2:ff:8f:7c:30:17:ee:af:62:ae:
27:db:6a:e1:b4:d9:92:e1:54:77:9f:cf:c1:d3:6a:
e0:1d:06:f0:86:32:98:84:92:db:23:92:4b:1a:cf:
f8:1c:57:c9:2d:a0:62:84:9f:09:78:a0:d4:e2:31:
87:19:fc:eb:32:15:0b:1a:35:18:b9:07:4a:40:f6:
e0:20:76:aa:d0:75:8e:df:bb:d3:c7:82:56:00:96:
60:e7:d3:83:66:18:25:0a:f4:06:b9:09:c4:a5:e7:
2e:d6:c2:af:5a:93:fd:8d:9b:93:15:6a:85:07:c5:
86:9d:79:02:ce:32:a2:d8:da:e9:7b:f8:6c:92:f6:
a6:e6:12:8d:b8:bb:76:87:32:17:a7:56:e7:3c:ed:
01:50:cc:bc:b3:c0:c2:29:79:8d:dd:29:2b:16:c0:
46:81:a6:40:c9:09:be:25:a1:8d:26:4b:fe:1f:64:
c0:d2:3f:58:a0:bc:25:2d:d8:88:8c:ba:41:8f:33:
8d:21:21:c8:e2:cd:81:f6:09:6f:bd:ea:43:23:c8:
fa:cd:7f:5e:62:b9:68:ec:b0:11:cd:a5:e1:9f:47:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:72:8B:27:0E:FF:46:C8:92:8F:06:EA:6C:A4:4E:7F:89:83:A9:6E
X509v3 Authority Key Identifier:
keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/bXKLJw7_RsiSjwbqbKROf4mDqW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.40.0-185.35.42.255
Signature Algorithm: sha256WithRSAEncryption
2d:7e:de:75:4f:c0:23:53:5a:66:ca:08:99:c9:a6:2e:af:8e:
0b:02:09:e8:5a:40:6e:32:48:0a:ca:6a:94:3e:81:90:2c:3a:
6f:2f:30:fb:10:b2:cd:da:62:8b:0f:98:cb:85:34:d4:3f:df:
3e:41:13:e2:88:07:bf:1c:a3:18:53:fd:b9:96:13:1f:c8:19:
29:5c:14:94:bf:c5:22:a9:8f:db:bc:02:16:b7:02:7a:f7:5b:
ba:39:6a:b9:4d:54:c7:56:67:1b:90:6c:18:0d:86:a5:d4:3d:
f9:b7:34:c6:63:35:16:4b:a7:ee:f7:3a:fd:ad:68:8d:dc:c9:
b3:da:0d:fa:56:53:87:5f:11:0e:c9:44:c2:a2:53:74:ce:4a:
82:57:91:c9:92:48:36:4e:33:75:a5:4e:67:b3:7e:09:62:24:
3d:9d:61:7b:77:0c:64:98:59:75:7c:ca:34:65:b7:c7:3b:e8:
30:2b:e8:26:60:23:06:b9:87:a5:12:cc:52:2b:91:d3:91:8c:
4c:79:9f:aa:43:d9:38:ce:a8:5d:dd:56:4e:9d:38:53:df:78:
ef:fa:85:d9:da:cd:28:1f:e5:b8:b5:2f:9c:85:f0:c4:de:b6:
d8:f5:63:10:ef:64:5d:4b:5c:80:ce:38:02:db:01:c3:0f:63:
7e:d7:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:28 2024 by rpki-client on console-ams.rpki-client.org