Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/5c1GF63ZTpToRWLesK2BCBbpc8M.roa
File: 5c1GF63ZTpToRWLesK2BCBbpc8M.roa (raw, json)
Hash identifier: gnQDNq27o2OJGAvO/4+Q1GkcXlkAeeUnxUJvmnw7kKA=
Subject key identifier: E5:CD:46:17:AD:D9:4E:94:E8:45:62:DE:B0:AD:81:08:16:E9:73:C3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0189DF314F4C3FA7061D746FAB2F331331D1
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/5c1GF63ZTpToRWLesK2BCBbpc8M.roa
Signing time: Thu 10 Aug 2023 11:24:58 +0000
ROA not before: Thu 10 Aug 2023 11:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
185.199.212.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
185.221.24.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
185.221.26.0/23 maxlen: 24
185.221.25.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:31:4f:4c:3f:a7:06:1d:74:6f:ab:2f:33:13:31:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 10 11:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5cd4617add94e94e84562deb0ad810816e973c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:61:de:8c:f6:95:bd:80:c4:8d:d6:15:9c:
3e:36:37:2d:4a:45:3f:e1:3c:13:02:b8:23:dc:c0:
6f:8b:60:b6:cb:f8:94:0e:1b:d3:bb:61:07:17:13:
99:03:f8:7a:97:53:d0:8a:72:45:51:0c:66:86:e7:
eb:93:ba:1f:5f:ca:67:76:71:50:fc:e0:42:02:9c:
c6:71:27:29:88:e1:27:36:5f:12:e6:e6:24:b5:ef:
e7:49:5f:4c:ae:0b:48:1d:7b:9a:67:f2:ce:08:3f:
78:4e:78:68:12:c0:40:92:c1:f7:80:c0:a7:6b:a9:
b2:72:58:c5:1a:5a:a0:df:52:0d:2f:30:51:4d:7a:
9f:87:eb:f5:b2:06:47:2d:c9:5b:f1:1c:06:b1:7d:
2d:ba:7d:2d:64:e2:9a:56:0c:56:e4:20:2b:f3:23:
03:cd:d5:ee:ee:de:d4:46:65:c9:63:51:f0:0a:eb:
0a:65:d1:48:c2:1a:76:d5:4a:3d:28:b9:56:35:5f:
2a:62:15:0d:f4:55:6c:4d:75:40:93:97:9d:ba:fd:
08:c5:be:34:07:b6:51:e5:83:e3:12:62:c9:83:e7:
39:fd:b2:82:0e:0a:c9:40:d5:86:c3:97:6b:68:3a:
1a:db:b7:86:b7:54:96:68:a2:da:04:9f:5a:35:3d:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CD:46:17:AD:D9:4E:94:E8:45:62:DE:B0:AD:81:08:16:E9:73:C3
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/5c1GF63ZTpToRWLesK2BCBbpc8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.209.0/24
79.98.247.0/24
176.125.250.0/24
185.199.151.0/24
185.199.212.0/23
185.221.24.0/22
185.225.168.0-185.225.170.255
185.250.26.0/24
194.146.92.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:fa:b5:35:fc:b0:52:90:da:aa:af:47:68:36:f3:d9:46:76:
1b:da:7b:10:4c:21:b7:d0:59:67:21:5c:71:22:33:2a:54:d4:
7d:0d:78:64:ed:92:5f:41:a8:22:d0:94:5d:35:98:b8:d7:47:
0a:83:a8:5d:53:b6:5f:d2:e0:3e:55:2e:c6:4e:87:9b:81:4c:
c5:40:6f:e9:78:76:0c:e0:42:94:81:3f:ce:e4:a5:06:e0:81:
1f:11:00:7e:6c:98:fe:1e:a9:57:f3:04:9e:cb:9f:c7:e9:e9:
39:dd:c8:bf:b9:8c:67:d6:15:01:54:3e:97:0a:ab:1d:c3:0e:
59:36:06:2e:8b:c0:ce:1e:4d:c7:51:29:30:35:c1:a6:d4:aa:
35:0b:67:17:bb:5e:48:10:f2:ad:71:86:c5:d3:4c:fa:cd:6d:
c6:d6:24:81:95:65:1b:a3:42:cc:f6:c4:d6:9c:34:6a:52:5d:
0f:cd:3d:e5:a4:4b:82:40:67:c0:cf:8b:e9:d8:91:73:e2:95:
a2:40:f1:5b:d6:c0:84:69:2b:2a:2b:fc:ed:37:1e:61:56:fe:
57:ba:b2:04:1b:1f:5b:0d:17:1e:85:5d:77:e5:af:7b:31:1f:
e3:a8:59:6b:04:27:d0:8a:eb:4e:ff:f5:64:78:f4:2c:16:40:
dc:81:68:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 00:24:25 2023 by rpki-client on console-fra.rpki-client.org