Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-y9zkuafWc_fNogBAdo_lJ3mXcU.roa
File: 1-y9zkuafWc_fNogBAdo_lJ3mXcU.roa (raw, json)
Hash identifier: oeh6SEOD8GZ56y0oLHPdYWE58utAvg4i5Psre76odjI=
Subject key identifier: FB:2F:73:92:E6:9F:59:CF:DF:36:88:01:01:DA:3F:94:9D:E6:5D:C5
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018D68BCEA644A2FFE244BA5FD2C302DA1AE
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-y9zkuafWc_fNogBAdo_lJ3mXcU.roa
Signing time: Fri 02 Feb 2024 07:33:47 +0000
ROA not before: Fri 02 Feb 2024 07:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.155.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 00:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:bc:ea:64:4a:2f:fe:24:4b:a5:fd:2c:30:2d:a1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Feb 2 07:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb2f7392e69f59cfdf36880101da3f949de65dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:42:32:64:6e:00:7e:63:a3:26:54:c0:c3:7a:
a0:d8:ca:a4:fa:5c:77:eb:2c:bc:84:c7:fb:b9:e7:
27:47:a6:7e:37:b4:cd:d4:85:2a:8f:02:0c:8f:15:
2c:76:2d:c5:66:4c:99:c9:38:68:1b:ed:cd:89:cf:
90:76:5b:8d:cf:10:51:47:ae:7c:b0:37:58:a2:5e:
9e:05:4f:9e:3c:68:d9:63:7b:b4:ff:b0:77:ee:01:
91:c5:4a:31:27:eb:b5:73:67:92:33:6e:a7:8c:b4:
7a:99:cf:d9:ec:4a:e6:4f:b3:56:9f:ff:20:b3:b1:
62:55:5e:5c:5e:36:1c:72:79:0a:1e:60:c9:9c:d8:
29:95:5e:c6:4c:77:c4:87:23:30:e3:2f:ee:d7:df:
09:2f:c7:1e:0f:02:d1:58:5e:51:35:da:f8:52:dc:
d1:5d:42:e2:30:c9:11:e8:3a:6c:2c:b1:79:5e:21:
9a:88:50:d1:2a:7a:a3:fb:9e:b8:c2:30:9d:65:14:
40:50:c7:5a:34:b2:84:4a:11:17:de:41:92:ff:cd:
e9:75:3a:ae:77:c6:b7:4a:89:9e:16:91:43:67:a9:
82:64:d9:aa:76:ea:ab:d6:47:16:b2:e4:89:da:f1:
b9:37:3c:a8:45:3a:37:a0:b6:c4:fb:e3:f9:fd:f4:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:73:92:E6:9F:59:CF:DF:36:88:01:01:DA:3F:94:9D:E6:5D:C5
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-y9zkuafWc_fNogBAdo_lJ3mXcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f8:50:19:8c:19:ef:ed:5c:9f:50:18:c0:da:60:72:8c:79:
3e:51:8c:cb:25:ca:23:e8:07:2e:1b:b6:9a:22:89:d2:ce:ab:
17:c9:89:4d:3f:c8:cd:02:64:f2:30:cd:de:10:32:4b:d5:e9:
c8:50:2c:43:7f:75:1c:6c:83:e7:8a:26:1a:74:39:9b:de:f6:
02:3e:75:a0:d1:cd:cb:9c:49:37:88:e6:bb:ae:ee:c5:aa:72:
41:9e:45:75:13:8d:0e:3a:5f:fe:c0:c6:c4:a1:01:83:cd:34:
a3:68:83:12:fe:e4:44:a2:51:3d:c6:ca:fd:6b:52:2e:cd:7d:
52:5b:1a:90:52:83:24:3e:53:39:bf:cd:1f:94:b6:8d:83:15:
e4:76:39:75:63:68:8d:fe:8d:d3:37:b1:93:5c:50:9c:f1:3a:
d4:62:21:30:50:b7:0c:41:1d:27:cd:87:6d:41:d8:96:cf:28:
b4:50:61:40:a4:20:dd:58:f2:68:d9:cb:40:3b:98:fa:7f:ac:
98:5e:75:ad:e2:4f:ba:6c:00:58:5f:37:42:b0:4e:66:08:c0:
80:83:1f:bd:05:f5:21:c2:57:66:cf:15:03:d9:6d:3c:db:58:
5a:a6:19:02:9e:ea:59:e8:01:84:67:a8:48:6e:dc:ab:37:44:
e7:47:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:34 2024 by rpki-client on console-ams.rpki-client.org