Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/451wICpKEjZ9zpmyc5EuKGZNsmI.roa
File: 451wICpKEjZ9zpmyc5EuKGZNsmI.roa (raw, json)
Hash identifier: sMLUi5RRduzQS/A6OvqEDcumT5+9G+pdKvIAMpk2wWY=
Subject key identifier: E3:9D:70:20:2A:4A:12:36:7D:CE:99:B2:73:91:2E:28:66:4D:B2:62
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018C552E836F12A28E525A2014524A15AF2E
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/451wICpKEjZ9zpmyc5EuKGZNsmI.roa
Signing time: Sun 10 Dec 2023 19:22:40 +0000
ROA not before: Sun 10 Dec 2023 19:22:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
185.199.212.0/23 maxlen: 24
194.146.92.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
45.157.211.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
79.98.246.0/23 maxlen: 24
185.199.149.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 23:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:55:2e:83:6f:12:a2:8e:52:5a:20:14:52:4a:15:af:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Dec 10 19:22:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e39d70202a4a12367dce99b273912e28664db262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:86:dc:b0:cd:07:22:8b:eb:6f:a2:6d:c4:
ee:20:77:0a:dc:ff:ce:6b:9a:83:5a:db:de:4f:f3:
d4:23:c1:72:9e:ab:ce:0f:ca:68:db:e6:0a:6d:35:
80:a5:f4:d5:63:41:74:53:4e:11:fe:df:10:c9:79:
bc:34:a8:00:7b:a6:36:20:8e:c1:17:2a:c2:80:01:
4a:20:6a:7e:dd:e9:ce:ef:5a:23:81:f3:3c:cc:9f:
44:75:3a:79:3e:e0:27:bd:f4:7b:f6:64:b4:30:82:
2e:d8:eb:a4:58:80:70:42:e7:80:33:e7:f5:c4:fc:
db:cd:d5:46:d0:3f:ed:f2:02:6e:c2:42:ec:2b:1c:
10:f0:82:0f:56:e7:84:52:53:57:55:27:6a:94:a0:
42:e5:c4:a4:d7:55:78:ce:c1:ff:3f:e8:87:c3:e6:
3f:3a:2d:28:50:ae:09:96:9b:37:38:6b:5d:77:10:
03:9c:9c:9c:34:84:8d:ab:22:60:21:9b:9c:b8:1c:
f7:2b:96:a4:70:30:8b:95:30:af:f9:db:c0:ec:94:
de:aa:b9:23:e2:ef:0a:61:df:2f:4d:cf:0d:6e:b5:
a4:19:7e:f1:f5:f1:48:c7:a6:51:51:7f:7c:e9:b4:
50:cd:68:6f:dd:8a:8a:04:47:a0:58:02:37:2f:ac:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9D:70:20:2A:4A:12:36:7D:CE:99:B2:73:91:2E:28:66:4D:B2:62
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/451wICpKEjZ9zpmyc5EuKGZNsmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.211.0/24
79.98.246.0/23
176.125.251.0/24
185.199.149.0/24
185.199.151.0/24
185.199.212.0/23
185.250.26.0/24
194.146.92.0/23
Signature Algorithm: sha256WithRSAEncryption
00:e2:12:0d:67:b0:99:cd:87:2d:02:54:19:d8:61:90:6f:0b:
28:cf:f6:65:9b:61:87:1a:85:8e:27:59:49:fe:d4:48:4b:c6:
71:86:3c:88:e4:46:6b:0b:d3:81:43:7a:bc:75:84:be:bb:1c:
10:47:cd:a2:2a:4f:aa:22:ab:03:b1:2e:49:d2:e1:f4:5b:46:
0c:5d:5c:fb:72:f9:93:69:f5:8d:78:b6:c7:99:73:28:7a:05:
0d:a9:4b:25:c7:a5:fd:03:69:be:72:d0:84:8c:27:25:23:ec:
c1:50:45:d4:26:bb:53:71:c8:a1:11:e0:90:b6:05:ed:ae:f2:
ea:5d:92:86:1b:97:23:fa:5e:d6:43:54:60:0e:57:dc:de:f9:
a9:6f:4c:fc:a0:4a:f0:07:ad:ab:3d:ca:18:29:52:25:19:89:
8b:76:9d:ed:cd:22:d8:cd:3a:44:55:71:59:7a:a9:74:62:51:
b1:79:fc:0c:e4:e1:84:2a:6a:f7:f0:9f:48:3b:67:06:db:a4:
3b:62:bf:46:ca:54:06:46:fd:c3:94:03:c8:10:68:0f:8a:f9:
cc:1a:90:5a:73:19:f8:6c:1b:20:aa:78:35:c7:66:cb:0f:c8:
46:c4:f2:49:d9:a9:c7:96:09:70:63:e2:15:1e:59:97:4c:10:
43:57:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org