Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/DOzYY2iLyQSHzoBcOO7ufC2GiS8.roa
File: DOzYY2iLyQSHzoBcOO7ufC2GiS8.roa (raw, json)
Hash identifier: hyj65jf8x3LhXYYgg3d+kPJTpJENRW0BGwNTcZlarsA=
Subject key identifier: 0C:EC:D8:63:68:8B:C9:04:87:CE:80:5C:38:EE:EE:7C:2D:86:89:2F
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 018B236795682CFB0E11799D917EC7CADA71
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/DOzYY2iLyQSHzoBcOO7ufC2GiS8.roa
Signing time: Thu 12 Oct 2023 10:21:12 +0000
ROA not before: Thu 12 Oct 2023 10:21:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205629
IP address blocks: 185.228.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:67:95:68:2c:fb:0e:11:79:9d:91:7e:c7:ca:da:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Oct 12 10:21:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cecd863688bc90487ce805c38eeee7c2d86892f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:b0:9f:d5:a0:88:cf:8b:d7:1a:13:c1:8e:
6d:e0:4a:fa:6f:e7:a4:9d:fe:08:f9:42:45:73:10:
9f:18:e8:7f:46:87:e8:66:c1:79:11:47:da:2e:fb:
44:fc:dc:71:e0:dc:e8:05:31:f4:05:87:12:46:bb:
81:52:c5:a7:e6:f7:58:5e:e3:2d:2b:9d:5c:db:dd:
08:58:db:a1:66:26:c3:6a:63:6d:d0:18:a0:4a:7e:
d4:8a:c1:66:3b:5f:ca:a5:2e:9a:88:48:bc:57:9a:
b8:89:d4:2a:f5:53:6b:f8:d1:a3:78:1b:cc:a2:98:
02:dd:e3:ac:1d:40:b5:47:2c:f0:16:48:6d:dc:10:
e1:11:43:3c:b2:24:fe:5b:d9:dc:8c:45:8a:f2:98:
29:00:7a:bf:8b:8d:52:46:61:0c:28:95:b6:68:e6:
96:ee:60:11:51:a4:a4:11:cc:1f:d3:d2:71:85:29:
6f:95:52:82:fe:69:c3:18:fe:8e:c5:af:f2:41:d6:
60:39:4d:9b:56:e3:22:77:a1:4f:22:02:1e:c3:a0:
d5:65:f7:8d:84:33:1f:33:87:51:a1:d8:67:c6:9e:
dd:1b:7b:03:2a:ac:36:67:dc:18:e0:5a:e8:18:5e:
af:00:2d:1e:ae:b3:34:53:a8:8b:29:38:91:1a:a1:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EC:D8:63:68:8B:C9:04:87:CE:80:5C:38:EE:EE:7C:2D:86:89:2F
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/DOzYY2iLyQSHzoBcOO7ufC2GiS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:50:5d:79:92:6c:2d:94:c6:ed:82:e1:67:a4:94:02:51:f9:
96:6e:aa:8b:44:a5:b9:8e:1a:2b:2e:7a:1d:4b:87:13:1a:10:
b2:b6:80:e3:b7:6d:03:d5:8f:2b:f9:50:41:39:cc:09:8f:51:
80:ae:19:f1:bc:6b:db:f6:fb:e8:9b:85:90:6b:20:93:9a:7a:
aa:f7:9d:52:71:da:d4:7b:58:56:db:17:d6:ba:3a:89:f9:d3:
9d:54:15:50:44:a3:d2:ff:76:87:b1:d2:98:41:3d:9f:4d:f8:
97:e5:e3:b1:9f:1b:a0:7d:28:a0:83:24:b4:f0:57:38:59:57:
d6:29:ba:ef:5a:fe:6c:5e:78:40:5e:ab:91:9f:e0:99:a8:31:
aa:dc:62:89:82:0b:71:80:55:bf:87:2e:87:ba:9f:83:4a:80:
ff:e6:46:2e:4c:d3:64:ad:f4:8c:cc:da:a8:0a:3c:51:49:89:
bd:70:a5:bb:b6:6f:ea:8d:08:2e:72:e7:dc:00:d5:91:46:51:
15:21:5f:55:f6:d9:c3:c6:50:f8:84:55:7b:a1:e6:18:bf:d5:
84:75:8e:a3:51:d8:cc:e5:0e:1c:33:7d:57:15:f2:72:ec:2f:
50:e7:42:48:80:07:27:ee:a6:7c:45:16:e8:28:2c:25:70:1c:
77:b0:8f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:32 2024 by rpki-client on console-ams.rpki-client.org