Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/12o0h2RsH8Ij81heEt1_wOU2JFg.roa
File: 12o0h2RsH8Ij81heEt1_wOU2JFg.roa (raw, json)
Hash identifier: 1iy2XTmckA1D+zdS+4JDOLtL3icEttxPD3Tzz8CLUq4=
Subject key identifier: D7:6A:34:87:64:6C:1F:C2:23:F3:58:5E:12:DD:7F:C0:E5:36:24:58
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018D4504154204BF1CB3031F37C3B92DB327
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/12o0h2RsH8Ij81heEt1_wOU2JFg.roa
Signing time: Fri 26 Jan 2024 09:05:11 +0000
ROA not before: Fri 26 Jan 2024 09:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.155.252.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 07:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:04:15:42:04:bf:1c:b3:03:1f:37:c3:b9:2d:b3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 26 09:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d76a3487646c1fc223f3585e12dd7fc0e5362458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:97:84:6a:8c:25:31:c3:42:cb:c2:04:85:7f:
bc:a3:96:69:b7:b0:25:f9:95:87:32:2d:e4:d4:01:
dd:95:25:5b:1f:99:68:db:cf:35:75:3d:01:a9:02:
5c:61:75:54:49:00:b9:ed:2e:8d:56:d1:fa:98:4d:
64:26:bc:2d:a0:90:0d:80:6b:4b:68:f5:f1:b6:bd:
16:ed:e1:d3:70:30:2d:04:98:04:04:2e:fb:1d:18:
fc:85:e9:45:fd:8b:fd:ac:95:04:ce:1b:4d:5f:9c:
da:52:a2:e8:0a:13:10:ae:4c:48:53:3b:9d:13:e4:
1a:be:31:92:26:55:5c:3f:1d:e2:13:ab:1a:bb:9a:
9d:73:5d:7e:d9:a3:c5:24:2c:27:e9:99:f4:d3:88:
b5:1e:1e:48:45:69:cf:be:6e:78:a8:4e:2b:c7:3d:
67:de:8e:e5:70:67:e6:5f:20:50:ed:2e:6d:b4:d3:
15:f6:d6:94:bc:c5:dd:c6:64:8a:61:c1:8a:25:f7:
26:53:e3:6b:30:14:0d:4b:a4:4f:06:1a:50:53:5c:
f3:ad:6d:d4:3f:e5:26:f4:9b:24:d4:c0:f5:b2:34:
f6:15:97:aa:d6:82:23:97:fa:6a:63:f3:ce:72:80:
15:5f:73:85:46:c5:0b:99:32:59:e6:67:48:ef:9a:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6A:34:87:64:6C:1F:C2:23:F3:58:5E:12:DD:7F:C0:E5:36:24:58
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/12o0h2RsH8Ij81heEt1_wOU2JFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:99:9a:6b:82:83:5a:cc:a5:a9:d7:6a:49:9a:8c:c2:14:d6:
14:15:f1:dc:d1:d0:e8:3a:8a:b0:a6:c5:4e:40:e5:4c:45:e1:
93:58:da:51:1d:e2:a7:cb:fb:e7:d0:1b:09:54:88:6d:3b:d1:
0b:53:e5:ff:5e:1d:a7:ef:dc:76:a2:c5:bb:ad:bf:bd:f7:cf:
37:4b:09:ee:af:04:c1:cb:ff:cc:7f:90:5f:3a:d3:b7:55:ac:
b1:34:f7:10:87:07:ba:c3:16:8e:02:4d:55:8a:03:13:b7:ad:
56:40:bf:20:d2:1b:80:9a:8c:33:74:30:e0:8f:e9:0a:a9:ea:
d9:68:46:b1:0e:60:63:c3:f5:df:6e:14:fe:fb:b9:57:13:7e:
38:47:6e:6c:90:60:24:08:52:90:7b:13:6c:e3:8a:d7:8a:87:
78:7d:00:b6:13:f8:f6:b6:66:cd:e0:0f:bd:8b:48:a8:d7:5a:
50:90:6d:cd:92:35:13:77:99:90:56:f8:fe:ff:ba:e3:b5:62:
c0:9e:f7:90:11:d8:ba:8f:ff:61:38:9a:c9:b3:df:b3:77:4d:
5c:f7:0e:5c:8b:b8:e6:9f:36:95:6e:c8:cf:bb:27:6b:c1:65:
43:2b:56:ae:57:4f:16:fd:46:a4:a2:57:87:2a:4d:0e:d6:f6:
46:74:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:34 2024 by rpki-client on console-ams.rpki-client.org