Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-SBz6ML0ZKlqMmOR_wOiD91n4WI.roa
File: 1-SBz6ML0ZKlqMmOR_wOiD91n4WI.roa (raw, json)
Hash identifier: Q0Dsf+hfGIM5f2d/nnJGRNeptcXeuiWi1u4DCvFKK1s=
Subject key identifier: F9:20:73:E8:C2:F4:64:A9:6A:32:63:91:FF:03:A2:0F:DD:67:E1:62
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01914A42D5C4F75195401DD197D10B713A08
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-SBz6ML0ZKlqMmOR_wOiD91n4WI.roa
Signing time: Tue 13 Aug 2024 05:42:59 +0000
ROA not before: Tue 13 Aug 2024 05:42:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.226.180.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:42:d5:c4:f7:51:95:40:1d:d1:97:d1:0b:71:3a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 13 05:42:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f92073e8c2f464a96a326391ff03a20fdd67e162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:8d:41:32:b8:9c:5e:aa:96:3e:68:bc:87:
ae:68:a3:a2:5d:82:a8:13:85:27:4b:b8:18:5a:e0:
eb:59:a5:bf:61:fc:d2:0a:ce:35:86:ce:e4:31:b2:
71:b6:d6:01:c0:98:51:68:88:1b:79:f9:ee:88:7a:
be:02:28:26:14:2d:6a:49:c4:6f:92:5a:9f:16:31:
24:ff:6e:f1:f0:54:ad:f7:c7:6e:84:75:e4:3f:e9:
7f:1e:11:4d:81:a1:34:f4:30:aa:e4:4f:1c:c7:95:
10:15:fa:87:0a:26:7b:2c:db:90:4b:58:fb:35:3c:
21:af:11:a4:9d:e4:76:75:07:7b:6d:4d:76:28:31:
49:7d:0f:6c:cb:ce:11:6e:81:68:f4:28:95:1f:64:
d9:7b:d0:67:91:21:3b:e2:10:6b:55:68:d7:14:48:
02:3b:33:34:eb:ee:e2:9a:7a:6c:7d:65:8b:e7:18:
55:33:e5:0a:6e:84:d3:77:b3:7b:8e:10:08:0c:4e:
bf:00:16:60:1c:06:0b:da:94:b1:59:e4:4d:0a:98:
81:35:c6:12:20:6d:26:19:79:ed:91:0b:21:d0:e4:
83:9a:30:94:05:50:bd:2b:43:1c:6d:b4:12:db:91:
6b:d9:05:61:48:5f:60:10:a1:84:c2:f6:af:6b:6e:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:20:73:E8:C2:F4:64:A9:6A:32:63:91:FF:03:A2:0F:DD:67:E1:62
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-SBz6ML0ZKlqMmOR_wOiD91n4WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
79.98.246.0/24
185.199.213.0/24
185.226.180.0/23
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
40:91:ce:ad:77:ee:5e:98:87:fc:b0:31:03:37:10:52:b7:08:
ed:91:d2:48:21:83:84:94:0b:ad:08:75:b2:95:b9:78:05:56:
75:ed:ea:3b:b3:34:0c:6d:60:c3:37:9a:c2:d4:ed:63:5c:3e:
9d:e2:7f:e1:ec:99:a7:02:9b:05:ae:3c:c4:45:06:de:29:a6:
55:11:9b:5c:77:bd:c4:81:7d:cf:54:d5:8e:8e:bd:a5:0f:9c:
82:df:6f:8b:4a:6a:90:0e:23:a2:ba:98:13:38:37:d5:ff:f2:
66:6f:47:f6:a0:21:63:d0:0c:72:be:53:b2:72:37:75:3e:80:
c6:0a:19:83:8e:3d:a0:57:2e:b5:ee:75:c2:49:24:99:5d:12:
6d:df:18:46:77:99:5a:68:33:d3:3b:69:39:a5:22:96:b6:fe:
50:df:12:f9:49:e7:55:18:76:ca:8c:93:2e:22:12:23:33:f5:
69:04:45:47:d7:fe:cf:22:84:d1:28:f8:6f:f0:98:3e:96:7d:
c8:5e:60:95:ef:ee:58:1f:6b:82:71:0c:08:7a:69:97:70:9d:
d0:08:eb:7c:cd:4e:f3:45:50:9c:68:15:47:16:2d:40:a6:46:
a3:1c:b6:dd:27:14:60:b1:be:1b:d4:35:22:d3:e0:83:dd:80:
0f:8a:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 15:30:37 2024 by rpki-client on console-ams.rpki-client.org