Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/Ox-HLuzC4Ar7vSDqLipzLRvfzjo.roa
File: Ox-HLuzC4Ar7vSDqLipzLRvfzjo.roa (raw, json)
Hash identifier: GSkeT014x2a7SsYKos1DCohMsX94drBoq/jbYWwbMgw=
Subject key identifier: 3B:1F:87:2E:EC:C2:E0:0A:FB:BD:20:EA:2E:2A:73:2D:1B:DF:CE:3A
Certificate issuer: /CN=286f9a9bbb868ce6d43a154e2a7e298b6b2365b2
Certificate serial: 01874FB71BEB86D822BF623A15DBF28CE08A
Authority key identifier: 28:6F:9A:9B:BB:86:8C:E6:D4:3A:15:4E:2A:7E:29:8B:6B:23:65:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KG-am7uGjObUOhVOKn4pi2sjZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/Ox-HLuzC4Ar7vSDqLipzLRvfzjo.roa
Signing time: Wed 05 Apr 2023 04:40:12 +0000
ROA not before: Wed 05 Apr 2023 04:40:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213305
IP address blocks: 185.252.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:b7:1b:eb:86:d8:22:bf:62:3a:15:db:f2:8c:e0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286f9a9bbb868ce6d43a154e2a7e298b6b2365b2
Validity
Not Before: Apr 5 04:40:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b1f872eecc2e00afbbd20ea2e2a732d1bdfce3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:f9:28:27:08:d8:b7:55:3d:b6:9e:24:02:
4e:61:d0:db:2e:20:1b:92:57:3f:19:5b:26:c6:8d:
af:b4:ef:a3:89:cf:5c:b4:2b:6c:f7:d2:ee:e0:44:
fd:ab:6b:1d:28:74:12:27:2f:62:da:7b:64:ea:bd:
76:27:6a:6b:63:26:27:ae:da:df:8e:f7:67:17:cb:
58:7d:3d:9d:66:f7:6a:10:c1:75:9d:a7:ed:cf:af:
b6:9c:81:a8:52:4f:28:0a:b0:80:72:80:77:3d:f1:
e1:e3:64:46:a1:6b:35:ee:1f:d8:ec:62:52:61:4f:
8d:f7:0c:44:c7:1e:a2:a4:32:99:4c:87:58:88:b9:
f7:f6:37:32:c7:3d:99:8a:b7:0c:2b:47:28:e7:32:
b8:a9:df:a0:87:e1:f9:9d:23:7c:66:23:cc:05:71:
d4:c3:25:12:d7:54:1c:a5:88:3a:bf:82:bd:ed:67:
f6:85:4b:af:e2:09:59:dd:c3:b5:b3:d5:53:e6:f5:
24:ce:b0:91:b0:f1:50:94:dd:20:41:a5:05:19:45:
01:d8:63:95:2c:52:16:9c:84:e7:b8:98:51:bc:27:
55:1e:ae:ec:60:5f:13:b0:55:8a:71:59:62:a5:59:
f3:29:c7:94:07:93:02:43:7e:6a:6a:66:f7:b8:4e:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:87:2E:EC:C2:E0:0A:FB:BD:20:EA:2E:2A:73:2D:1B:DF:CE:3A
X509v3 Authority Key Identifier:
keyid:28:6F:9A:9B:BB:86:8C:E6:D4:3A:15:4E:2A:7E:29:8B:6B:23:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KG-am7uGjObUOhVOKn4pi2sjZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/Ox-HLuzC4Ar7vSDqLipzLRvfzjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/KG-am7uGjObUOhVOKn4pi2sjZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.211.0/24
Signature Algorithm: sha256WithRSAEncryption
44:99:f3:27:9a:f4:82:2b:3e:77:e7:1e:ae:22:16:01:2a:6d:
5c:0f:21:1d:b4:a9:46:fd:b0:fa:a6:8f:e4:b4:fa:c2:3b:c1:
d2:59:f1:a3:ef:67:93:f1:8c:25:4b:bb:63:d9:4b:7a:d9:be:
86:aa:d8:9a:90:e7:2d:a7:bd:1b:56:6a:24:0a:0e:f8:ba:41:
23:55:42:6c:fb:74:67:cf:97:07:29:10:e6:cd:46:68:ff:cf:
f5:e2:69:de:af:bc:f8:25:57:09:b5:a7:18:80:54:8c:08:62:
18:01:da:4a:cf:ef:6b:13:92:19:66:99:7d:0f:1a:16:1e:1a:
e1:8d:46:52:a8:a4:d1:f9:04:9b:d5:c0:5a:e7:3f:b7:c4:69:
83:5e:28:b6:24:e3:f7:01:a1:12:57:73:13:f0:a5:f6:bc:91:
1d:20:50:ec:6a:46:4b:a6:18:5c:21:6c:dd:33:55:4f:2e:29:
cf:47:ac:d4:49:d5:03:56:e2:f3:ec:86:3a:88:b7:b8:a4:0d:
a6:99:64:49:7b:a6:55:a3:ba:2b:b1:e3:4c:34:ff:0c:ef:2a:
0f:14:27:b3:53:53:9d:35:26:cb:a8:70:78:e3:d8:28:5c:73:
f6:01:cb:b4:66:d1:d0:ba:24:62:ae:08:5f:2f:4c:fb:02:a7:
1c:bf:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 07:16:57 2023 by rpki-client on console-ams.rpki-client.org