Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9-8fmHg5l7UjKrB_eQu7A3mEY8U.roa
File: 9-8fmHg5l7UjKrB_eQu7A3mEY8U.roa (raw, json)
Hash identifier: Iv5SenjbS/aM5mhg42MQmHwFL3dMOpFqy/WXwwd8fG4=
Subject key identifier: F7:EF:1F:98:78:39:97:B5:23:2A:B0:7F:79:0B:BB:03:79:84:63:C5
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188CA9248F93B09C8359F2444578E875F26
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9-8fmHg5l7UjKrB_eQu7A3mEY8U.roa
Signing time: Sat 17 Jun 2023 18:16:04 +0000
ROA not before: Sat 17 Jun 2023 18:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 08:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ca:92:48:f9:3b:09:c8:35:9f:24:44:57:8e:87:5f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 17 18:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7ef1f98783997b5232ab07f790bbb03798463c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:57:5a:60:a3:3e:d3:29:d5:fd:02:80:05:52:
23:52:6d:2f:1f:69:8d:5a:d3:76:7b:42:4a:46:27:
79:08:53:b8:5e:1e:cc:30:cf:56:1b:a5:b5:31:e9:
62:12:09:ce:0c:7d:91:14:32:6c:8a:58:db:e0:10:
8a:c1:bf:db:35:0d:8d:20:9b:ef:1f:fb:3b:ba:b1:
20:a3:4e:57:6e:5f:34:05:b6:d4:97:40:80:25:cd:
9d:ae:ca:5e:62:52:48:ff:2a:48:76:9a:03:79:f0:
ff:fd:f7:2f:d3:f0:09:9a:ea:bf:ff:85:4c:ff:a2:
cc:d7:7f:2f:e7:cf:a4:ae:32:8e:fb:a5:a2:1a:e0:
ca:7e:e6:15:8b:74:de:e9:1c:31:65:c0:8b:c9:f3:
a3:1f:a5:b2:94:bc:88:bb:56:19:e2:4f:b4:3c:e0:
df:07:8d:d0:af:42:ae:4d:0f:4e:91:27:cc:95:ae:
1a:6f:54:c5:16:a6:87:6c:37:4a:9e:18:45:9e:8c:
18:b1:03:c4:e3:b9:5c:fe:c2:c5:37:88:31:96:63:
02:77:c9:7a:06:40:77:0f:34:cc:06:5c:89:3b:54:
e7:f6:52:58:bd:e6:42:c4:12:10:3e:e0:03:64:cc:
f2:e4:b4:a4:b8:14:65:c2:2b:e8:2a:1c:40:3f:d0:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EF:1F:98:78:39:97:B5:23:2A:B0:7F:79:0B:BB:03:79:84:63:C5
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9-8fmHg5l7UjKrB_eQu7A3mEY8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.255.0/24
45.157.209.0/24
79.98.247.0/24
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
62:39:3f:b6:bd:41:f8:8b:de:63:f0:6b:1c:53:55:37:e0:19:
d1:79:d5:c6:65:50:f9:34:23:1d:24:39:32:f4:08:cd:c5:b5:
1a:ec:1b:d9:be:ec:6b:a0:cb:de:e3:1c:94:d2:89:49:94:39:
5c:d8:b1:b0:40:2c:79:93:2c:e8:6e:73:4f:60:c1:6b:8f:aa:
7b:41:9e:9b:74:6b:06:3e:f6:b1:f6:ac:0f:b3:fc:ec:55:23:
c0:86:aa:35:8c:eb:54:02:f7:d0:0e:13:ce:98:ca:ce:66:a5:
66:dc:94:eb:41:df:ce:eb:f8:c1:f7:ad:a5:3d:71:f3:1f:eb:
e8:58:5e:13:48:95:c9:fe:bc:08:c8:cb:29:9e:60:57:04:bd:
4a:3e:b5:6e:0e:10:94:75:f7:cd:96:f9:1f:04:83:36:fa:e4:
17:49:5f:66:c2:18:f9:91:56:3a:f3:7b:e8:af:39:a3:f7:58:
d5:a3:4f:de:74:b2:b0:ab:78:de:f1:53:32:11:ad:42:a3:02:
0d:8a:ed:e0:2e:68:38:28:3d:7c:74:ce:fa:ee:fb:0e:1c:dd:
b1:77:73:29:81:31:40:47:51:46:c3:d3:97:30:fd:d8:ef:44:
c0:d3:78:9e:f0:fa:13:14:5f:c9:73:a7:40:e0:1e:3b:af:5f:
1e:34:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org