Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KP4Qg-3kxCYc5ry9MyoJrDTsDqo.roa
File: KP4Qg-3kxCYc5ry9MyoJrDTsDqo.roa (raw, json)
Hash identifier: 8cc+NboD/4u9eO7xzX1FsEhD55WQv5R2oR1aLNoD0YE=
Subject key identifier: 28:FE:10:83:ED:E4:C4:26:1C:E6:BC:BD:33:2A:09:AC:34:EC:0E:AA
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018CD374109D7288C61CFCC81C082AF98CA6
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KP4Qg-3kxCYc5ry9MyoJrDTsDqo.roa
Signing time: Thu 04 Jan 2024 07:50:48 +0000
ROA not before: Thu 04 Jan 2024 07:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211936
IP address blocks: 185.199.148.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 04 Jan 2024 07:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:74:10:9d:72:88:c6:1c:fc:c8:1c:08:2a:f9:8c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 4 07:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28fe1083ede4c4261ce6bcbd332a09ac34ec0eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:9a:cb:4f:5a:ef:9f:b7:36:df:be:3a:07:
71:58:db:70:71:7a:42:a3:9e:48:d2:6f:44:84:3d:
e9:07:2a:4c:70:a6:48:6b:89:7c:d4:ef:91:fd:28:
c6:3d:79:de:02:8c:36:ab:c0:6a:3f:dc:e0:c6:07:
8e:dd:4d:8b:17:88:36:24:7b:6d:e7:c0:ac:f8:d6:
d4:74:4a:aa:8e:12:fd:66:3a:02:7b:22:33:e0:03:
3b:25:fa:b4:b5:78:0b:2b:17:2e:02:d6:af:04:51:
6c:bf:a4:8a:63:76:2b:97:54:98:e1:b7:84:f1:f5:
47:4d:61:f5:93:80:96:c5:bd:b7:d2:1b:de:dd:84:
83:e3:9f:10:df:18:3a:f8:24:94:a7:ad:54:04:5d:
7e:ad:cb:0d:5c:da:96:c6:54:de:93:ad:4f:8d:f8:
5c:f4:f9:be:85:71:dd:98:84:dd:42:09:01:f5:9b:
35:07:fa:20:04:c2:c2:80:af:7d:41:d9:7e:f1:3c:
42:19:ea:2e:d5:5e:13:75:9e:26:66:cc:60:9f:d1:
6c:fd:a2:91:47:1d:b4:25:46:00:1e:bf:c6:29:78:
7b:11:b7:fa:06:db:9d:29:c3:1b:14:e5:4e:37:85:
6e:02:f2:9d:00:6e:f6:7b:7e:d3:3c:8e:09:ce:6c:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:10:83:ED:E4:C4:26:1C:E6:BC:BD:33:2A:09:AC:34:EC:0E:AA
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KP4Qg-3kxCYc5ry9MyoJrDTsDqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.148.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:65:ee:d3:c4:53:e1:0e:22:7c:c9:01:d9:86:5d:ac:22:0c:
bc:ec:74:80:d5:83:fe:c5:53:94:ba:3c:2b:e3:c2:9f:29:74:
31:e0:07:95:e9:f8:2f:94:5a:35:76:7c:7c:7b:20:49:ff:a2:
30:16:6d:6b:6e:13:ad:6a:64:53:0e:a5:76:f3:97:cc:b3:b3:
ef:c6:2c:15:68:69:12:24:11:d8:00:4f:e2:18:4c:60:c7:6e:
48:bf:58:1f:8e:4b:6d:4b:3a:50:1e:1c:a3:35:e5:04:a9:3a:
1b:40:0d:91:13:57:3d:4f:36:ea:5e:12:2e:39:d6:a9:44:33:
4a:f9:09:99:a8:74:6b:4f:b9:04:bc:c5:7d:35:ea:e5:d2:26:
ab:2b:08:ab:3e:44:c5:f6:a4:80:d6:3f:c9:0c:4e:dc:44:d4:
d7:39:86:58:11:45:5c:df:87:7b:70:c2:d9:03:31:e6:79:a2:
75:c0:d1:3e:8a:09:30:07:c7:c3:48:b5:df:9c:78:00:51:e9:
bd:fe:31:3d:a7:a2:b1:44:7a:92:f8:be:15:e5:53:27:59:54:
7e:0f:8d:38:07:0f:e8:56:8d:71:ae:b7:4d:de:08:3b:3b:c7:
ac:61:42:ed:69:94:ff:22:5b:df:32:58:29:44:27:66:1e:9c:
21:5d:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:51:50 2025 by rpki-client