Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/NdcntJI_LzyNwTvu-jPdpvcHrYg.roa
File: NdcntJI_LzyNwTvu-jPdpvcHrYg.roa (raw, json)
Hash identifier: 70y5R+V5awOIyHgHP27Am2e8la281Ag01ZGC4Ae7PGI=
Subject key identifier: 35:D7:27:B4:92:3F:2F:3C:8D:C1:3B:EE:FA:33:DD:A6:F7:07:AD:88
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 0186BB1B18BA26CD30BD725159C4BDACCF34
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/NdcntJI_LzyNwTvu-jPdpvcHrYg.roa
Signing time: Tue 07 Mar 2023 08:06:00 +0000
ROA not before: Tue 07 Mar 2023 08:06:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208821
IP address blocks: 185.252.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Mar 2023 09:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:1b:18:ba:26:cd:30:bd:72:51:59:c4:bd:ac:cf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Mar 7 08:06:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35d727b4923f2f3c8dc13beefa33dda6f707ad88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:4c:04:dd:21:1b:ce:11:96:62:95:81:b8:
c8:24:df:76:95:a0:01:34:fc:93:7a:01:53:40:ed:
f8:26:3b:80:98:d8:d2:53:24:36:c8:86:38:b3:e1:
36:96:7f:b3:f9:43:66:db:02:2b:d7:4e:c7:51:ff:
40:0c:9c:db:85:57:ee:87:d6:d5:66:22:a2:5a:34:
cd:14:75:d7:52:af:47:03:4e:1e:7b:9c:6c:0c:1f:
16:a2:71:21:93:09:0b:9a:0d:17:4c:f4:44:23:df:
ea:f3:0e:9f:41:2e:52:96:a1:d8:50:bb:87:ae:dd:
7d:68:32:56:75:f6:fc:c5:7c:a6:ae:1a:c5:e9:ba:
7d:f3:f0:34:cc:b9:cb:10:a2:e1:fe:80:51:f5:24:
e4:c0:d8:21:87:66:de:2b:c2:d8:77:59:9d:d6:f6:
a0:16:b2:92:41:73:48:88:f8:ba:8f:b6:52:12:41:
23:e3:53:48:fa:5d:80:5e:d9:d2:c9:1f:bb:6e:73:
1a:f5:c5:b8:ad:a7:dd:6a:ad:ac:57:47:3a:65:b3:
fa:e0:ab:9c:20:f6:6f:1d:81:d7:e0:72:c3:73:26:
c6:41:d0:72:a6:cc:c5:42:f7:f5:8e:5e:13:6a:64:
10:13:05:f6:83:25:6a:99:89:a7:69:36:13:be:b6:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D7:27:B4:92:3F:2F:3C:8D:C1:3B:EE:FA:33:DD:A6:F7:07:AD:88
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/NdcntJI_LzyNwTvu-jPdpvcHrYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d9:db:59:05:fb:ff:7f:84:8b:7c:0c:7b:29:2e:cd:e3:6d:
06:a2:98:e8:d9:20:fe:e4:c7:94:8a:6c:71:c0:1f:a8:0d:1a:
2a:55:fd:d9:ad:06:75:38:49:75:2f:e8:c1:86:35:53:6d:36:
e9:4b:35:c5:70:22:1e:40:96:39:4b:34:2e:5d:13:19:e5:b2:
b4:10:43:3f:d8:3e:44:77:41:08:16:8e:0b:76:8b:74:71:4b:
a2:fa:86:c8:da:2f:da:bd:42:1b:e9:ac:84:15:b3:3d:60:38:
5c:d5:33:ca:ff:d2:01:fa:fd:7d:c6:cb:67:09:ce:0c:0a:8c:
59:24:f4:70:ca:47:04:a8:02:7c:f5:5a:66:20:c1:c5:e3:5f:
19:c5:6d:24:be:13:ce:b5:3b:87:7f:28:dd:2c:c2:1d:84:99:
02:f4:0b:0e:37:cf:a8:81:6d:1b:6f:8d:28:59:72:10:7e:46:
93:1e:01:9f:ba:c1:2a:c1:e1:f8:df:4d:90:5b:4f:b0:06:b3:
87:7b:c0:d0:12:e1:7e:0f:59:7a:d8:4b:48:ff:c3:2e:54:45:
68:e9:8b:60:5f:58:14:e6:e8:f8:cb:11:e8:86:d4:df:d1:22:
1e:f3:26:bc:eb:1d:ef:04:c5:f2:8c:2c:a5:c7:69:74:c2:bb:
16:95:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:50 2024 by rpki-client on console-fra.rpki-client.org