Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/AnwgQyNT75mQv4SF2p7HyYVw0TQ.roa
File: AnwgQyNT75mQv4SF2p7HyYVw0TQ.roa (raw, json)
Hash identifier: 4fN2I6ESUhcN6+UkaN3jdtTFzzYdqLQh1OpmyKdKAss=
Subject key identifier: 02:7C:20:43:23:53:EF:99:90:BF:84:85:DA:9E:C7:C9:85:70:D1:34
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018C4618F54BAC5854AA7744C100B5B7EEE9
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/AnwgQyNT75mQv4SF2p7HyYVw0TQ.roa
Signing time: Thu 07 Dec 2023 21:04:49 +0000
ROA not before: Thu 07 Dec 2023 21:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
185.199.212.0/23 maxlen: 24
45.157.211.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
79.98.246.0/23 maxlen: 24
176.125.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:46:18:f5:4b:ac:58:54:aa:77:44:c1:00:b5:b7:ee:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Dec 7 21:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=027c20432353ef9990bf8485da9ec7c98570d134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:02:bd:50:72:3d:c4:bd:a1:b5:b3:94:85:
4f:8c:79:af:c3:55:85:08:66:82:cd:a7:4d:ab:09:
6f:95:a8:45:d2:52:0b:52:01:80:07:38:f2:7b:c5:
94:ff:bb:06:79:f0:98:17:95:86:7f:d7:37:e3:ee:
2c:f8:2e:fb:1a:2f:0c:f0:e8:91:32:82:76:10:d3:
6c:de:b3:60:fa:b8:24:d3:ff:d4:4b:9e:a5:0c:0c:
40:64:b1:ae:32:74:56:04:13:20:34:68:26:b1:9a:
10:f7:35:b2:4e:8d:db:7e:aa:33:a9:78:cf:d5:e8:
cd:ec:a2:ed:b0:ab:0b:3f:99:ed:41:42:7b:2e:6b:
cd:0d:bc:13:45:03:5a:31:36:0e:c1:3a:a2:14:03:
41:3f:e7:18:9c:8d:8c:98:e9:8e:3e:9b:b1:b0:ac:
b5:1c:3a:92:2b:96:ba:8b:07:82:2a:37:60:be:43:
5c:e8:b9:5a:08:2b:b9:c2:df:70:42:1e:fe:fa:07:
4d:a2:41:96:57:bd:32:82:c4:5a:bc:d2:9c:ae:2f:
2c:7d:d7:ae:23:8b:be:e6:75:d0:82:37:da:9a:4a:
c2:0e:b7:33:5a:bc:72:35:38:6d:dc:c8:d6:07:ba:
79:fc:66:1e:25:e8:34:78:da:fc:10:87:1d:8e:82:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7C:20:43:23:53:EF:99:90:BF:84:85:DA:9E:C7:C9:85:70:D1:34
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/AnwgQyNT75mQv4SF2p7HyYVw0TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.209.0/24
45.157.211.0/24
79.98.246.0/23
176.125.251.0/24
185.199.149.0/24
185.199.151.0/24
185.199.212.0/23
185.226.181.0/24
185.250.26.0/24
194.146.92.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:e9:e0:07:2f:c1:45:70:d2:5c:41:24:06:86:14:d5:72:0f:
37:1e:66:dd:bf:1e:17:2a:06:b8:63:63:76:0e:2b:df:f0:56:
57:6e:45:92:7a:5f:5b:e7:11:1e:27:55:e0:ca:46:6b:0b:11:
2a:91:44:f4:48:f3:90:74:ec:38:c2:ef:ce:2c:e4:b1:77:de:
dc:a3:fa:bf:fe:7d:a5:9a:85:81:dd:ae:f8:31:46:59:d9:36:
eb:20:3b:b2:41:03:73:b5:7c:c7:46:04:a9:fc:bd:84:9d:03:
63:fb:50:95:8d:f9:01:92:55:7f:96:71:e5:ff:44:fd:05:1d:
5c:00:66:f2:08:43:a5:b2:60:28:46:13:5d:62:61:16:de:eb:
17:b7:1b:e9:0c:2d:29:db:5b:68:30:0e:11:61:3a:14:63:8b:
f6:80:5f:79:31:86:b0:5a:e0:e5:39:20:a2:d0:f5:63:40:6c:
7f:1d:51:9d:5f:58:5f:76:f8:9d:4f:55:47:9e:ba:4c:cd:58:
8f:c5:ad:d0:fd:22:0d:72:e8:78:4f:45:bb:ae:0f:02:e2:23:
a4:a3:10:3c:54:00:13:df:45:38:d1:f9:5f:d4:a1:a7:87:84:
d0:8c:15:2a:3e:06:ae:42:b0:9c:31:ee:81:60:47:4f:3d:9d:
69:73:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 9 13:37:42 2023 by rpki-client on console-fra.rpki-client.org