Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0MjbM4BCexLacdCyhu-FkDqQH_s.roa
File: 0MjbM4BCexLacdCyhu-FkDqQH_s.roa (raw, json)
Hash identifier: B48hFvAZXgqVNGov/Epb6QZRlW9omp/XSzaZSltw5Wo=
Subject key identifier: D0:C8:DB:33:80:42:7B:12:DA:71:D0:B2:86:EF:85:90:3A:90:1F:FB
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018CEDAE6E35ED149DD44B1FF0740317867F
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0MjbM4BCexLacdCyhu-FkDqQH_s.roa
Signing time: Tue 09 Jan 2024 10:04:40 +0000
ROA not before: Tue 09 Jan 2024 10:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205663
IP address blocks: 45.157.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 23:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:ae:6e:35:ed:14:9d:d4:4b:1f:f0:74:03:17:86:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 9 10:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0c8db3380427b12da71d0b286ef85903a901ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:c1:30:3c:ec:14:c0:b7:ac:19:36:d3:4a:
49:52:4c:1f:24:41:3f:ca:d8:55:8f:c4:c8:d2:94:
71:c3:69:ff:a8:84:8a:45:fc:ff:23:49:55:b4:d2:
af:58:2f:9b:02:19:b8:f7:f8:e0:66:1f:df:9a:91:
f9:53:66:17:88:d7:c4:71:aa:84:9e:d9:95:8c:7e:
41:c3:e4:fb:59:39:1b:3d:27:dd:2d:af:7d:0e:cf:
ec:ed:3d:d7:0f:54:f9:90:f0:af:7d:33:2c:c6:32:
1a:ba:cd:85:06:e7:75:b9:2b:66:b3:8c:4e:c8:cc:
b3:b6:53:a2:7f:cb:76:c6:d6:55:cd:77:7f:50:a6:
79:a3:11:c8:fc:5a:41:73:15:02:05:31:b5:5c:0c:
8b:f9:91:32:2f:c7:c7:65:41:d8:8d:15:0c:1f:c0:
a7:f1:9c:c5:65:18:5d:bb:88:a0:06:e5:f5:1f:e7:
a1:b3:7d:ce:60:08:ed:e5:6e:cc:fb:aa:bb:a2:22:
d8:74:a1:ad:9e:c6:29:c8:66:e5:a3:60:cb:55:72:
e0:76:9c:a5:63:50:2d:b8:7c:45:98:ec:5c:f5:a3:
ef:3f:51:53:f9:5b:2f:57:86:f6:02:90:e3:de:74:
80:f3:0a:da:bd:50:a5:1f:21:a5:d0:4b:e2:fc:d3:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C8:DB:33:80:42:7B:12:DA:71:D0:B2:86:EF:85:90:3A:90:1F:FB
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0MjbM4BCexLacdCyhu-FkDqQH_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c7:06:f4:b6:84:e9:fe:62:29:f0:74:be:52:ac:0a:04:69:
fe:1d:06:56:30:08:68:1b:27:26:a7:06:b6:a9:5b:f2:d0:b3:
a3:d6:fd:34:4b:31:3d:58:34:74:46:13:dc:1c:73:72:1a:e9:
64:21:91:2c:3e:c4:5b:93:8b:1c:cf:dd:ee:2a:2c:72:d6:c0:
6f:b2:39:cc:69:63:c3:fd:dc:8f:e5:27:fe:77:4e:1c:49:ad:
c9:7a:29:fd:50:68:db:c2:94:54:ca:72:26:dc:18:01:a0:da:
1f:33:22:e8:6a:32:d2:96:08:84:03:2b:da:8b:97:ce:83:44:
34:d0:80:a1:cb:74:53:d6:2c:bf:5c:91:9d:ae:a0:a3:e6:9f:
dc:57:e6:22:f3:b1:4d:c8:68:e8:6f:97:a6:72:f5:f8:a7:8b:
f6:4d:80:bb:1c:5f:c4:ae:7c:da:1c:db:e5:45:fc:07:66:01:
a3:be:52:3f:42:76:25:3b:84:27:64:ea:d2:ab:33:8a:8c:fe:
0a:25:01:d4:14:3f:fb:a6:63:5b:37:69:65:17:2d:28:e1:cb:
bf:de:49:d0:a8:bd:dd:da:b0:cc:a3:4c:92:ad:70:17:81:9e:
5c:f0:6a:8d:85:ad:0f:a4:5f:b6:2a:05:6d:06:83:28:80:b9:
b0:cd:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 03:57:53 2024 by rpki-client on console-ams.rpki-client.org