Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/B36iP_KaRqc_q_eIT2n4h2VrNhw.roa
File: B36iP_KaRqc_q_eIT2n4h2VrNhw.roa (raw, json)
Hash identifier: qOQYhTNWSyeMeWvT9L9+NebgSiRxWlj1/31Xf36fqyY=
Subject key identifier: 07:7E:A2:3F:F2:9A:46:A7:3F:AB:F7:88:4F:69:F8:87:65:6B:36:1C
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 01886AB4F69AE56550A62EDC1B0E6034DDA0
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/B36iP_KaRqc_q_eIT2n4h2VrNhw.roa
Signing time: Tue 30 May 2023 03:30:24 +0000
ROA not before: Tue 30 May 2023 03:30:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.200.209.0/24 maxlen: 24
185.200.211.0/24 maxlen: 24
185.200.208.0/24 maxlen: 24
185.200.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 03:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6a:b4:f6:9a:e5:65:50:a6:2e:dc:1b:0e:60:34:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: May 30 03:30:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=077ea23ff29a46a73fabf7884f69f887656b361c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:40:1e:c2:8d:4c:05:d0:28:a5:85:2e:0b:a1:
19:82:23:ec:b4:51:f7:e3:20:99:d5:55:53:89:be:
d1:e9:1b:14:76:9e:bb:93:9f:65:24:fd:61:6c:08:
e6:7b:ec:5e:28:f6:ac:07:0a:d8:b9:9c:99:dc:65:
4f:24:82:a7:cc:e5:19:ff:35:93:2b:d0:f2:b2:53:
ec:12:a8:6f:09:ea:8b:e3:e2:0a:3d:01:37:2a:5b:
ff:13:dd:b8:54:3f:95:29:ee:73:ee:d0:08:de:8e:
d0:05:67:c1:9b:fa:2f:21:a1:bd:e2:fe:0f:e9:33:
cd:d7:c1:76:56:fa:6b:70:7d:19:37:0a:51:c0:3d:
2a:4a:36:49:22:72:d7:0d:e2:ac:7a:1e:85:bc:12:
8b:2b:c1:4d:64:bf:c1:9f:7d:3e:c0:77:50:07:a1:
c3:5c:d4:23:cc:d2:4b:6a:06:c0:52:5a:84:2f:d3:
aa:d9:98:bd:90:4e:8e:70:7a:54:83:66:5f:f0:de:
ab:ce:3c:b3:ca:19:3e:79:68:fa:44:5c:55:c9:0f:
7a:aa:7c:b5:07:00:c0:b2:e5:18:d1:cd:44:74:8d:
79:f5:c5:79:12:ce:10:15:38:17:f2:06:ee:39:23:
b2:9a:4d:c3:8a:c1:b1:a9:e3:da:53:88:bd:8f:6b:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7E:A2:3F:F2:9A:46:A7:3F:AB:F7:88:4F:69:F8:87:65:6B:36:1C
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/B36iP_KaRqc_q_eIT2n4h2VrNhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.208.0/22
Signature Algorithm: sha256WithRSAEncryption
64:03:3c:09:ee:0e:40:b4:83:91:b0:e6:cf:91:ac:f6:28:5d:
19:e2:9d:ce:00:22:6a:e9:8b:40:87:83:81:70:0d:70:de:d2:
3e:d1:88:d2:c6:f3:d2:c6:5d:3a:15:55:eb:d2:c8:fc:e0:75:
7b:ab:a8:bb:89:35:2f:3b:4a:e5:20:1b:8d:fc:7c:72:b6:dd:
ee:61:d5:8b:f8:bf:af:e5:fc:3e:7a:c7:ba:96:a9:a6:8e:58:
26:c8:48:f4:3d:2d:8d:27:9c:ee:86:a8:34:98:89:7a:92:6e:
98:fe:a5:e4:2f:58:61:30:24:b5:20:5a:86:94:8d:05:bd:7b:
0d:17:85:d2:76:80:c5:84:07:af:61:1b:9e:e5:87:2a:53:e4:
e4:d2:9d:be:6e:59:59:d9:ae:76:d6:7c:2b:34:8e:53:f3:ce:
f7:ff:07:71:33:54:c7:ce:2d:f0:62:38:df:45:e4:15:29:c0:
2b:c5:aa:97:68:91:4e:50:70:a4:4a:5c:b3:4e:5f:b7:6c:43:
c8:ce:52:7e:68:64:ad:21:d1:04:49:bd:f7:8a:2b:93:b4:d8:
57:b5:0c:4c:09:21:af:f9:d8:e5:fd:8c:5a:be:6f:0b:88:96:
d2:c0:33:61:5b:b7:d2:e1:a0:1a:34:ca:3a:6b:34:3a:ad:92:
76:64:b5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:48 2024 by rpki-client on console-fra.rpki-client.org