Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/OBb9x3xCTYxpCn1n-3P0KubnG3Q.roa
File: OBb9x3xCTYxpCn1n-3P0KubnG3Q.roa (raw, json)
Hash identifier: hkZfV59pqrmoTTsU2rc2MY0T6VyPhMJKyAfItxzhlgU=
Subject key identifier: 38:16:FD:C7:7C:42:4D:8C:69:0A:7D:67:FB:73:F4:2A:E6:E7:1B:74
Certificate issuer: /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial: 018FD82EA8CA8C4F80ABDCA593BB9105C604
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/OBb9x3xCTYxpCn1n-3P0KubnG3Q.roa
Signing time: Sun 02 Jun 2024 09:01:27 +0000
ROA not before: Sun 02 Jun 2024 09:01:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56548
IP address blocks: 185.188.114.0/23 maxlen: 24
185.199.208.0/24 maxlen: 24
185.199.210.0/24 maxlen: 24
185.199.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jun 2024 09:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d8:2e:a8:ca:8c:4f:80:ab:dc:a5:93:bb:91:05:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Validity
Not Before: Jun 2 09:01:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3816fdc77c424d8c690a7d67fb73f42ae6e71b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:b9:b5:ca:72:75:bc:a5:87:72:51:d2:a3:
66:cb:bc:40:bb:b8:d7:fe:47:79:6e:bb:f4:03:76:
03:bf:fd:41:55:fe:53:80:64:a2:90:28:47:dc:e1:
b0:08:f3:3c:b2:1b:df:75:32:4e:5f:0e:95:92:dc:
ed:84:76:dc:6c:2e:c4:2c:12:b0:fe:7d:38:e3:93:
1f:96:6d:f9:dd:f4:91:d9:51:9f:09:9c:25:c8:9b:
90:28:95:b3:39:c1:d8:17:92:3f:95:96:06:09:dd:
96:cb:7e:80:66:8d:0e:c1:e2:48:cc:8b:13:5d:9c:
fd:96:e9:8e:dc:0d:d9:45:f5:42:ed:74:af:47:9c:
c2:07:74:2b:45:ed:a3:00:58:d9:9f:cc:22:3a:69:
f2:f7:79:d3:df:f3:70:0d:f6:0d:63:96:db:1f:be:
2a:1b:30:2a:7b:72:75:64:1c:1a:5b:a5:0a:de:7e:
c1:ed:b7:16:a1:43:84:04:80:d9:b5:e1:4e:0d:6c:
ab:f9:6d:0e:46:4a:31:4d:95:d6:65:1e:68:79:12:
82:47:78:34:f6:00:62:1e:ae:0c:d4:3a:1f:67:8b:
2e:c4:7d:bc:a1:83:c0:dd:1c:2f:33:3f:ab:4c:ae:
e4:f9:e5:ef:c0:3c:2e:8b:3c:72:ef:a0:ca:b8:4c:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:16:FD:C7:7C:42:4D:8C:69:0A:7D:67:FB:73:F4:2A:E6:E7:1B:74
X509v3 Authority Key Identifier:
keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/OBb9x3xCTYxpCn1n-3P0KubnG3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.114.0/23
185.199.208.0/24
185.199.210.0/23
Signature Algorithm: sha256WithRSAEncryption
31:67:32:39:28:75:dd:ef:b4:d1:a4:49:3e:3c:15:4d:1c:ee:
7c:4e:23:50:f9:e8:42:39:8a:46:ad:e6:4e:19:7b:78:c8:2c:
5b:61:b2:97:2b:d2:24:da:7b:9a:41:8c:d3:df:9e:1a:07:f9:
63:a9:b8:39:52:f4:dc:ec:07:1c:9a:03:3c:65:a8:9b:dc:8f:
25:af:fa:11:f7:1a:10:4b:83:4b:46:9a:3c:c6:2f:51:90:3a:
19:f9:e6:4b:7e:e8:1d:85:c9:bd:56:80:38:e1:96:eb:2c:f0:
8b:86:a5:47:b4:77:34:be:71:0d:04:20:b0:ee:de:0a:b8:bb:
10:e2:e9:fe:85:1b:85:d4:eb:46:10:4f:72:d5:e1:d2:2c:cb:
5b:c1:37:e8:8e:a2:00:23:27:3f:fd:8b:3f:48:02:d6:3b:bb:
c0:a5:a7:fd:78:12:47:d0:15:63:61:94:0a:43:dd:a0:45:a7:
35:61:6d:60:64:49:f2:5e:6a:da:eb:ae:de:8d:21:6c:46:23:
e8:b3:4e:93:88:4c:ab:eb:3b:58:7d:4e:04:39:24:b1:70:24:
28:f8:66:c2:84:6c:85:04:f2:1f:e4:cc:27:23:d0:36:64:39:
54:9f:c6:ca:3e:fc:1a:9e:b0:9c:da:65:60:32:91:91:4c:1a:
92:7c:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 22:05:39 2024 by rpki-client on console.sobornost.net