Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/6rxyg8Ko7F8WJZbMF2Ua9mmLIT8.roa
File: 6rxyg8Ko7F8WJZbMF2Ua9mmLIT8.roa (raw, json)
Hash identifier: BF8jv4NuDz2O1i952c0l1ROViiCen6vcJcPHyKvBEig=
Subject key identifier: EA:BC:72:83:C2:A8:EC:5F:16:25:96:CC:17:65:1A:F6:69:8B:21:3F
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01895441E6E444C33ABB2CC6D9FF1A081049
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/6rxyg8Ko7F8WJZbMF2Ua9mmLIT8.roa
Signing time: Fri 14 Jul 2023 11:55:52 +0000
ROA not before: Fri 14 Jul 2023 11:55:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.225.171.0/24 maxlen: 24
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
79.98.244.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:41:e6:e4:44:c3:3a:bb:2c:c6:d9:ff:1a:08:10:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 14 11:55:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eabc7283c2a8ec5f162596cc17651af6698b213f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:e7:d3:6b:43:83:bd:22:dd:24:63:bc:91:
11:21:60:42:db:bd:d3:64:d0:72:fd:ad:68:c3:9f:
93:d1:a4:b6:9d:29:b0:1f:d0:b0:75:2e:a0:8c:e2:
57:f9:cd:2c:c2:d3:7c:0e:94:45:3c:d8:33:0f:fe:
98:c1:74:51:e5:b2:64:42:b8:c0:46:5c:7f:b3:d7:
f7:3a:05:a7:0e:1d:e3:b3:c0:9c:49:d2:6b:c4:33:
d1:e3:2c:dc:36:80:02:2f:c1:b1:ed:7f:49:55:57:
b9:f7:70:b4:7d:f8:a5:db:db:f6:ea:41:04:22:64:
07:8c:63:78:72:1f:b4:a9:59:ed:e0:76:1c:c4:cf:
36:08:83:57:7d:15:31:c1:3f:e1:6f:6e:02:61:35:
ca:0e:fd:90:a6:ea:05:88:8a:57:b0:98:4d:17:43:
d3:9d:c4:7d:f0:7e:a7:1b:b5:70:7d:ab:57:9e:90:
0a:dd:ca:76:03:f2:d8:25:25:0d:2f:82:73:4a:5b:
2c:32:52:b6:94:0f:5a:bb:ab:04:18:d4:f0:d4:9c:
21:50:33:40:cb:e4:9a:81:44:34:7c:2a:0f:30:c6:
41:4d:8a:b7:b0:fa:d3:a9:a5:78:9e:5e:c1:c4:db:
7d:d0:bf:f4:e3:5f:c5:e7:ea:15:7d:e6:84:9b:d3:
f1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BC:72:83:C2:A8:EC:5F:16:25:96:CC:17:65:1A:F6:69:8B:21:3F
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/6rxyg8Ko7F8WJZbMF2Ua9mmLIT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.209.0/24
79.98.244.0/22
185.225.168.0/22
185.250.26.0/24
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ea:30:14:2e:b5:97:22:ef:57:78:c6:e3:2b:f2:cb:dc:33:
c3:2a:65:fa:e8:11:27:15:37:e0:f0:d5:88:7c:5d:11:39:e4:
cc:91:47:87:4f:d2:44:b2:61:db:57:63:7e:b4:96:1d:30:ee:
e5:cd:3b:6d:f9:6a:d0:93:33:a5:b8:5b:f2:41:7a:6f:0e:bc:
fb:af:29:7f:a6:9e:c2:4e:59:12:8d:3f:a7:fb:07:1e:ef:ee:
26:a9:55:24:f2:25:d8:2c:d1:b2:36:98:5d:7d:b8:5d:25:c8:
29:5e:11:eb:e7:70:ab:9b:79:54:f3:80:c9:6b:d3:61:85:83:
4b:25:32:bf:0e:ec:97:6b:99:81:33:68:41:7e:81:c5:72:64:
b6:46:6d:42:7e:15:c9:47:93:61:47:d6:76:f1:f7:b8:3b:c7:
29:0c:28:da:5a:92:fa:dc:bb:b1:69:ad:ad:ee:2c:4c:08:cc:
6f:cf:2e:51:83:57:01:bd:fe:66:7e:22:3f:7a:53:7f:ce:6e:
07:78:46:f2:ca:09:77:31:9a:4a:dc:0f:c0:da:ac:a2:d1:9b:
d7:59:55:95:70:d9:94:c3:2a:58:6f:5b:21:40:6c:0e:c2:5e:
d5:23:ec:c6:64:b0:6f:76:bc:ac:71:30:27:78:41:cc:52:43:
f9:e8:0a:4a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYlUQebkRMM6uyzG2f8aCBBJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjMwNzE0MTE1NTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWJjNzI4M2MyYThlYzVmMTYyNTk2Y2MxNzY1MWFmNjY5OGIyMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6rn02tDg70i3SRjvJERIWBC273T
ZNBy/a1ow5+T0aS2nSmwH9CwdS6gjOJX+c0swtN8DpRFPNgzD/6YwXRR5bJkQrjA
Rlx/s9f3OgWnDh3js8CcSdJrxDPR4yzcNoACL8Gx7X9JVVe593C0ffil29v26kEE
ImQHjGN4ch+0qVnt4HYcxM82CINXfRUxwT/hb24CYTXKDv2QpuoFiIpXsJhNF0PT
ncR98H6nG7VwfatXnpAK3cp2A/LYJSUNL4JzSlssMlK2lA9au6sEGNTw1JwhUDNA
y+SagUQ0fCoPMMZBTYq3sPrTqaV4nl7BxNt90L/041/F5+oVfeaEm9PxaQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFOq8coPCqOxfFiWWzBdlGvZpiyE/MB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvNnJ4eWc4S283RjhXSlpiTUYyVWE5bW1MSVQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALZv8AwQA
LZv/AwQALZ3RAwQCT2L0AwQCueGoAwQAufoaAwQAwpJdMA0GCSqGSIb3DQEBCwUA
A4IBAQC66jAULrWXIu9XeMbjK/LL3DPDKmX66BEnFTfg8NWIfF0ROeTMkUeHT9JE
smHbV2N+tJYdMO7lzTtt+WrQkzOluFvyQXpvDrz7ryl/pp7CTlkSjT+n+wce7+4m
qVUk8iXYLNGyNphdfbhdJcgpXhHr53Crm3lU84DJa9NhhYNLJTK/DuyXa5mBM2hB
foHFcmS2Rm1CfhXJR5NhR9Z28fe4O8cpDCjaWpL63Luxaa2t7ixMCMxvzy5Rg1cB
vf5mfiI/elN/zm4HeEbyygl3MZpK3A/A2qyi0ZvXWVWVcNmUwypYb1shQGwOwl7V
I+zGZLBvdryscTAneEHMUkP56ApK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:11 2023 by rpki-client on console-ams.rpki-client.org