Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_DOz22IIg3y_DM_3zozRoqOhGcw.roa
File: _DOz22IIg3y_DM_3zozRoqOhGcw.roa (raw, json)
Hash identifier: HvhygKq3z6h0SEktKRvk3Ymf75ljx30I2lAjTL3ObTs=
Subject key identifier: FC:33:B3:DB:62:08:83:7C:BF:0C:CF:F7:CE:8C:D1:A2:A3:A1:19:CC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190BF8EA2B686E9A12DB1F5C4A7963FB637
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_DOz22IIg3y_DM_3zozRoqOhGcw.roa
Signing time: Wed 17 Jul 2024 07:18:34 +0000
ROA not before: Wed 17 Jul 2024 07:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 185.198.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 03:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:8e:a2:b6:86:e9:a1:2d:b1:f5:c4:a7:96:3f:b6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 17 07:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc33b3db6208837cbf0ccff7ce8cd1a2a3a119cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:ac:39:96:13:45:7b:9d:64:8c:bb:c2:1f:
97:77:cb:e4:90:01:1c:01:67:f0:48:1c:da:dc:80:
33:d4:06:a3:a2:9d:48:55:aa:7e:0b:db:e9:cd:1c:
dc:3e:8b:1f:9d:c5:92:02:c0:56:16:8e:7c:2a:f7:
74:7b:a7:1c:a6:d9:98:d9:88:4f:7c:33:06:65:4e:
c8:51:ce:bb:f2:7a:5b:c3:1e:61:d7:55:69:d5:90:
4e:9d:09:9f:96:82:61:9d:13:f2:f3:b9:2b:bd:21:
f4:3b:27:4a:3a:53:54:01:5b:45:4a:96:8e:90:9b:
8d:5b:69:78:2f:26:51:ea:e2:4c:f6:e6:90:d8:f7:
20:12:7c:25:cf:0f:ac:bb:af:ec:0a:bc:07:08:7c:
75:7e:ed:91:9a:cb:9d:80:68:32:22:ef:90:57:d3:
9b:4a:0e:da:23:1f:22:77:03:ec:7f:65:8d:bb:31:
fd:b8:de:af:f2:9d:92:ba:07:4d:96:6e:fb:e5:30:
34:be:4c:54:40:e7:14:57:c2:c5:57:6e:a7:ae:fc:
22:d6:24:ed:03:cc:34:3b:eb:f6:7f:ab:3c:2c:75:
3f:49:99:7b:91:a0:93:b2:8a:44:86:4a:60:8c:15:
c2:98:a5:b8:e5:11:0c:76:80:66:ec:ff:f6:44:43:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:33:B3:DB:62:08:83:7C:BF:0C:CF:F7:CE:8C:D1:A2:A3:A1:19:CC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_DOz22IIg3y_DM_3zozRoqOhGcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.235.0/24
Signature Algorithm: sha256WithRSAEncryption
26:72:4f:89:ee:3a:30:b0:95:5e:b1:3c:16:c3:fd:67:1a:4b:
f0:85:dc:40:c7:5f:ac:4a:0c:a7:44:2b:f3:94:e1:04:63:51:
de:f5:25:70:48:19:0f:93:e9:46:dd:c4:6a:31:8a:35:c9:bf:
51:a9:fc:5f:0b:2b:c5:ab:77:6b:16:f0:4c:32:18:48:05:04:
97:68:08:d8:21:28:e2:2b:c4:e9:d7:51:d5:24:d5:a6:9f:bb:
92:7a:3f:60:8c:e8:e3:16:3f:8d:c3:25:ad:55:61:79:9b:24:
ac:e1:ba:61:22:35:f7:99:f5:a3:14:c0:87:51:b8:77:3b:1e:
1d:bd:9c:ab:d7:51:36:eb:bc:db:0f:5d:8e:0b:a3:00:0d:82:
2b:bd:4f:62:f2:33:25:45:c3:77:95:94:3e:fc:47:48:1b:c0:
80:a2:20:1b:88:82:dc:9a:2b:32:b0:1b:3c:cd:8b:7c:e4:7e:
24:86:31:27:d0:07:55:42:64:a7:46:66:2c:af:68:70:c1:a6:
89:8d:9d:e3:0a:b3:97:38:9a:cd:0e:59:ff:05:f8:e8:bf:4d:
41:a3:50:f0:37:7f:3c:83:11:a3:c0:e9:4b:f6:c8:4c:94:8e:
b3:35:ad:0e:c2:88:75:ab:61:71:18:5a:01:65:8d:c6:48:63:
49:e5:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org