Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/8nWz-4aMJv2gtJOQO2BsUxPSp3A.roa
File: 8nWz-4aMJv2gtJOQO2BsUxPSp3A.roa (raw, json)
Hash identifier: uq1EFCEovo9/asE57/zZFvrIq5GSA/JJ7TnDrhs2gkU=
Subject key identifier: F2:75:B3:FB:86:8C:26:FD:A0:B4:93:90:3B:60:6C:53:13:D2:A7:70
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 018E41A36D6729F11CF23AC551AA607FCD0B
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/8nWz-4aMJv2gtJOQO2BsUxPSp3A.roa
Signing time: Fri 15 Mar 2024 10:23:33 +0000
ROA not before: Fri 15 Mar 2024 10:23:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210973
IP address blocks: 149.62.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 12:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:a3:6d:67:29:f1:1c:f2:3a:c5:51:aa:60:7f:cd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Mar 15 10:23:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f275b3fb868c26fda0b493903b606c5313d2a770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:13:91:8c:38:9e:28:0d:b6:bd:41:17:7a:
50:bb:78:62:fc:4f:be:78:99:30:f3:69:cd:0f:17:
23:75:b9:c3:56:e6:2c:e8:d2:0a:be:be:66:59:e1:
63:5f:35:f8:98:ab:79:34:e9:c5:67:fc:77:1a:ec:
d7:53:41:59:0f:18:c0:3d:f2:ef:8d:0a:8f:4f:c5:
44:3a:b6:5a:95:d5:e7:53:ab:91:b5:be:48:59:a9:
5e:59:ba:e4:22:b3:60:53:9b:06:74:be:c6:d9:f0:
78:a1:30:57:90:2c:de:11:09:d9:ce:97:18:c1:11:
2a:d2:a7:14:51:e5:0e:77:90:36:cd:c4:ce:b6:b9:
cd:ac:86:77:57:4a:86:1c:16:c7:aa:dd:72:62:5c:
00:d7:a0:9a:d0:a2:14:9f:78:22:b7:1b:b7:09:f9:
2b:72:f0:94:99:d2:12:ae:c9:d5:50:a9:97:61:20:
a5:57:60:cb:e5:1e:3f:7e:dd:d4:c5:91:45:de:be:
fc:30:47:d8:3c:b3:e5:18:3a:2a:7d:00:60:fe:73:
72:e0:d1:10:89:ba:f4:07:7a:f2:be:b5:b4:b6:36:
74:db:f6:41:f3:89:0a:c5:7b:bc:96:84:ca:34:b7:
11:85:0b:c0:78:d4:f1:6d:b0:4c:fd:86:e9:18:2b:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:75:B3:FB:86:8C:26:FD:A0:B4:93:90:3B:60:6C:53:13:D2:A7:70
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/8nWz-4aMJv2gtJOQO2BsUxPSp3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.35.0/24
Signature Algorithm: sha256WithRSAEncryption
64:86:37:3f:fe:9e:cb:4e:f7:10:7f:d8:b7:de:36:b9:5b:60:
06:1b:8c:aa:42:9e:1c:c3:d6:44:92:56:ae:c6:94:63:0d:32:
ac:57:32:f3:66:d4:be:10:4a:cd:77:1e:22:42:98:d4:db:95:
f3:54:a9:3f:1b:7b:86:41:4a:c5:ea:ee:95:a4:a6:7c:29:40:
86:56:47:cc:06:55:6e:9c:42:cd:ca:68:47:1a:cb:6a:1f:d6:
0a:79:07:64:a5:4f:c9:27:d5:10:97:04:9c:e4:7e:b8:72:76:
9e:1d:31:ea:11:0b:65:7f:22:21:16:fd:e5:1b:a6:9c:05:85:
05:df:2a:81:dd:41:a8:1b:69:a8:66:36:7c:ca:58:b9:fa:f0:
89:71:79:ea:d8:ae:c2:cd:74:cc:fe:4c:52:b7:dc:e5:fd:99:
d8:aa:42:96:9c:29:ec:79:2d:54:0f:34:2a:a0:c7:55:2c:02:
76:9a:e9:e3:b6:14:dd:d0:32:1b:0e:32:5f:24:6e:20:cc:a2:
e5:91:45:e6:5b:9e:3b:57:9a:58:85:de:d7:6a:b6:cd:c6:86:
53:9f:37:62:b9:1b:0d:f6:1c:8a:24:b9:c6:36:85:19:2c:2c:
73:7a:5a:cf:02:44:1a:fc:e0:56:e7:58:1c:fb:ed:76:39:6d:
05:7e:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:23 2024 by rpki-client on console-fra.rpki-client.org