Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Nf0cU_jxxC-t-OVquwBVte7W8kw.roa
File: Nf0cU_jxxC-t-OVquwBVte7W8kw.roa (raw, json)
Hash identifier: UlZfNdVRqKouTixJ7fIPdORRvJ+9qWSXfERtX8idtkg=
Subject key identifier: 35:FD:1C:53:F8:F1:C4:2F:AD:F8:E5:6A:BB:00:55:B5:EE:D6:F2:4C
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0188C3DAE94A864160C68E49485CF92BD9E8
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Nf0cU_jxxC-t-OVquwBVte7W8kw.roa
Signing time: Fri 16 Jun 2023 10:58:03 +0000
ROA not before: Fri 16 Jun 2023 10:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.180.0/24 maxlen: 24
185.169.183.0/24 maxlen: 24
185.169.182.0/24 maxlen: 24
45.133.37.0/24 maxlen: 24
45.133.36.0/24 maxlen: 24
45.133.38.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 17:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:da:e9:4a:86:41:60:c6:8e:49:48:5c:f9:2b:d9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jun 16 10:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35fd1c53f8f1c42fadf8e56abb0055b5eed6f24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6f:4c:7d:d6:94:8e:7f:11:86:8c:f1:df:01:
57:bb:4d:59:67:3b:6b:6a:58:61:8d:c6:1e:f9:4d:
f7:4b:92:dc:65:5c:93:4a:76:e1:3f:d9:c1:a9:da:
73:00:1e:63:33:75:48:9a:78:87:92:f6:97:d0:bc:
15:37:94:5a:89:78:d3:92:a6:4a:6a:93:68:91:ef:
61:e9:26:59:37:f3:b5:7d:83:09:1e:5a:e3:52:d9:
0e:6e:9b:eb:12:b3:3d:27:1b:42:95:8b:b2:bc:c8:
0d:d1:8b:ca:99:a6:0d:b7:a8:98:4c:6c:1f:d3:bc:
5e:0c:a3:26:16:32:cc:49:98:c2:a2:7c:d0:01:ac:
3d:58:80:32:be:be:5c:81:a2:8e:cd:2b:64:8c:50:
d2:7e:d5:95:41:72:1f:f2:38:a8:f6:c9:ce:63:00:
ad:09:38:68:f7:37:6e:0e:80:d3:b5:30:f1:3b:4c:
10:70:a2:a0:b2:08:05:7c:0c:32:60:e8:05:54:3d:
4b:76:ae:74:fa:f3:f5:c2:d8:90:f0:bf:d7:1e:d8:
96:93:2a:44:a7:5e:d1:29:06:e9:95:84:62:08:ce:
bb:1f:56:db:83:bd:05:de:4a:54:fe:ee:d2:e2:fa:
1a:a1:87:ba:bf:6f:b2:39:11:dc:6a:39:82:a1:97:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FD:1C:53:F8:F1:C4:2F:AD:F8:E5:6A:BB:00:55:B5:EE:D6:F2:4C
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Nf0cU_jxxC-t-OVquwBVte7W8kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.36.0-45.133.38.255
185.169.180.0/24
185.169.182.0/23
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
48:61:fc:cc:bc:cb:69:cf:86:e5:d7:8b:cc:4f:4d:68:11:e1:
c7:4f:b2:bb:ef:70:a2:89:77:30:dd:12:c1:b1:a2:12:12:26:
f9:ed:32:5f:b0:6c:8b:45:51:90:3e:d2:57:70:a7:38:eb:12:
37:21:c0:07:a9:4e:e2:a1:12:25:f4:fc:7b:08:e8:fa:3e:96:
a7:21:83:2d:ba:e1:dd:97:ae:a9:37:53:7f:f3:4c:69:9a:25:
0c:95:98:0c:0b:71:b3:5d:1c:20:c8:42:15:57:99:91:80:6d:
e0:50:22:f0:14:97:92:a9:f3:96:2c:ab:c0:fc:0f:86:95:89:
84:2a:0e:8f:81:50:5b:57:b9:32:7f:a0:11:d0:06:06:27:64:
84:40:2e:07:e7:d4:f7:03:ca:c3:5f:fe:3b:84:c4:73:8e:39:
d1:d7:bc:ba:66:b1:d2:d0:63:33:f8:75:60:5e:d6:82:6e:59:
23:d1:4f:29:fd:c0:3f:4c:5e:b6:bc:e6:08:b4:53:52:87:9d:
89:23:cb:66:16:f9:20:9d:fa:a9:f2:2f:42:9f:78:9d:19:99:
ba:8e:09:2b:51:2a:8d:8b:b0:e6:eb:54:a0:1d:43:12:83:92:
6a:71:e7:d1:81:9e:13:d6:5d:49:8a:fa:1f:14:c8:ea:b8:cb:
fe:b6:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org