Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8dLPusWGm7WmrBXSM94MPnM3jI4.roa
File: 8dLPusWGm7WmrBXSM94MPnM3jI4.roa (raw, json)
Hash identifier: /xOlJWZxXxRpVexioZOi43APrjrTacV8995o2L2nPrI=
Subject key identifier: F1:D2:CF:BA:C5:86:9B:B5:A6:AC:15:D2:33:DE:0C:3E:73:37:8C:8E
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018AF012BA2602C2BC4F58B79AB8129F2CE1
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8dLPusWGm7WmrBXSM94MPnM3jI4.roa
Signing time: Mon 02 Oct 2023 11:07:53 +0000
ROA not before: Mon 02 Oct 2023 11:07:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
185.199.212.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
45.157.211.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.250.25.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.225.171.0/24 maxlen: 24
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
79.98.246.0/23 maxlen: 24
79.98.244.0/23 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.25.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Oct 2023 07:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:12:ba:26:02:c2:bc:4f:58:b7:9a:b8:12:9f:2c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 2 11:07:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1d2cfbac5869bb5a6ac15d233de0c3e73378c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cf:d7:3a:e3:f7:a0:44:a3:d5:c1:c2:ce:b5:
81:49:55:ad:26:7f:e7:84:ea:9a:9b:03:bb:b0:67:
09:99:a7:33:5e:9b:db:bd:06:67:c8:0b:cb:40:27:
f3:93:30:eb:18:84:5f:0e:5d:c9:e6:a3:3a:05:78:
e6:6b:1a:b8:de:52:41:b0:b2:c1:5e:79:95:f5:a5:
43:7b:29:ef:38:76:a1:38:00:55:ae:e5:0c:33:ca:
fe:d7:63:e4:45:0c:00:77:1d:3e:58:ab:01:0d:7f:
db:88:66:59:cd:f8:9a:0e:2f:d4:e2:1a:af:24:57:
8d:57:50:ef:10:30:6d:12:a9:a1:ae:7a:74:e4:aa:
cf:fb:0d:78:3b:2d:c2:31:05:79:c7:61:c1:9b:12:
ef:1f:9d:7a:ae:a1:51:ea:60:76:a7:9a:c5:8b:85:
21:66:dd:c5:6b:ff:db:02:b5:89:5f:46:ec:41:a1:
6a:9c:97:8b:a2:1c:e1:96:0d:0f:99:ab:30:0a:52:
99:e1:d5:c1:a6:c7:b4:f9:92:a9:43:12:73:f9:21:
93:b3:25:1f:06:6f:2f:1f:87:d6:a1:94:4c:72:73:
8d:c6:9c:30:cd:57:40:2b:71:a3:c3:b3:b6:0c:3c:
b1:c9:ee:65:58:fd:2d:e0:51:13:a3:ea:e5:fd:bc:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D2:CF:BA:C5:86:9B:B5:A6:AC:15:D2:33:DE:0C:3E:73:37:8C:8E
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8dLPusWGm7WmrBXSM94MPnM3jI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.209.0/24
45.157.211.0/24
79.98.244.0/22
176.125.250.0/23
185.199.148.0/24
185.199.151.0/24
185.199.212.0/23
185.221.24.0/23
185.225.168.0/22
185.250.25.0-185.250.26.255
194.146.92.0/23
Signature Algorithm: sha256WithRSAEncryption
63:15:85:e6:92:41:b5:ff:d7:81:40:55:c7:c9:80:87:6b:3e:
6e:a6:c0:98:1b:d2:68:5f:66:69:dc:f6:d7:e4:66:68:b6:2c:
b9:cd:e0:53:73:69:f3:df:99:b1:d0:3e:25:0d:aa:df:e5:5d:
b6:b7:7d:9a:11:15:5e:24:b9:3a:0c:1e:52:62:fd:3f:73:12:
07:9c:d9:59:a5:b5:63:db:d8:99:70:af:e9:ba:45:a6:c9:e6:
2b:b8:e9:68:3e:79:08:f4:ff:ea:67:a4:c2:31:d1:db:1e:64:
da:73:8d:33:8d:0d:57:44:97:64:ae:00:3d:7e:b2:41:29:b9:
bc:88:f9:56:38:4f:b3:7e:9a:74:bb:13:a1:02:92:a8:b3:43:
57:56:99:27:6d:2e:c1:04:cc:5b:f0:36:29:a3:7a:93:04:f8:
bf:3a:d2:21:b4:36:3e:31:c2:c1:86:bb:52:70:ff:1f:1b:33:
c3:65:4d:56:4a:74:56:01:c1:26:6e:6a:e4:59:0c:ba:fd:58:
3c:db:65:6c:1e:59:cc:bb:ac:8d:c6:c2:be:12:e7:78:78:13:
a7:ab:84:50:90:96:56:ff:54:e9:46:52:1a:9a:6c:f2:84:32:
02:cd:58:54:1f:b9:00:2d:94:ec:0a:df:ad:4a:90:02:b5:cd:
5b:32:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org