Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Awh_RcL87vXgzSoSNwQR0QYfTUY.roa
File: Awh_RcL87vXgzSoSNwQR0QYfTUY.roa (raw, json)
Hash identifier: XBG4zr1CHoMsLPzmeLJgnIRo/k6i6r2xawwTflu6y0M=
Subject key identifier: 03:08:7F:45:C2:FC:EE:F5:E0:CD:2A:12:37:04:11:D1:06:1F:4D:46
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018D31D7057CBC376BB4EE3C8C2F298EE221
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Awh_RcL87vXgzSoSNwQR0QYfTUY.roa
Signing time: Mon 22 Jan 2024 15:43:11 +0000
ROA not before: Mon 22 Jan 2024 15:43:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 09:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:d7:05:7c:bc:37:6b:b4:ee:3c:8c:2f:29:8e:e2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 22 15:43:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03087f45c2fceef5e0cd2a12370411d1061f4d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:ba:87:0a:74:b7:82:72:fc:b3:24:dc:88:
45:0b:33:3c:ad:96:ac:c0:1a:f9:a6:f5:05:95:36:
d2:44:7f:80:d6:c1:09:85:b4:97:2f:b5:4f:05:7f:
5b:c1:3c:78:d6:1b:b1:c7:8d:59:f0:c2:c2:53:7d:
73:5b:d6:2e:a1:23:bc:f3:a0:7a:34:5f:59:d4:0e:
15:e0:8f:92:e4:87:d0:39:d7:58:0f:ec:25:28:13:
14:f8:02:a2:a6:24:7b:d1:b3:3d:e9:d6:88:3c:aa:
85:a1:fc:fa:08:4b:2c:4a:52:53:6c:8a:c2:04:10:
5e:be:5f:67:ee:32:cb:d5:5c:e4:d3:fc:f5:f4:63:
f2:3a:ee:c5:6b:2f:e0:77:9e:e7:72:be:0b:00:40:
b6:69:8d:b0:22:ed:da:a3:61:5b:1f:16:80:a6:fd:
ef:aa:49:b1:06:d9:9f:9d:91:57:ed:1c:97:48:6c:
cc:5f:b4:74:b8:b3:68:3e:51:85:c0:10:d5:39:03:
0c:5b:65:9e:4a:fc:85:17:94:d8:8e:ab:d4:2f:b3:
78:a1:20:c4:b0:9d:7c:db:9e:22:d5:b6:1d:9f:02:
c2:49:84:14:50:35:c4:b9:30:ce:43:6c:7e:89:42:
72:12:8c:5a:d9:7c:d3:58:97:16:7b:ec:e6:80:64:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:7F:45:C2:FC:EE:F5:E0:CD:2A:12:37:04:11:D1:06:1F:4D:46
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Awh_RcL87vXgzSoSNwQR0QYfTUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.255.0/24
45.157.209.0/24
79.98.247.0/24
185.199.151.0/24
185.199.213.0/24
185.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:27:da:4a:38:8b:92:73:a1:8c:8c:a0:a5:4a:97:54:a8:fa:
ec:ec:f9:fc:89:37:7a:b6:ad:c9:ab:86:31:cf:07:cf:a2:a7:
99:82:42:e3:af:4a:9a:d5:87:27:06:8c:a1:8d:72:b4:d0:01:
09:13:79:97:a9:f1:34:92:b2:b7:b4:ba:43:30:58:51:c5:8b:
35:4c:7d:87:2e:ec:15:e0:ee:64:d8:ed:37:ce:40:bc:cf:02:
dd:f0:e8:f3:89:ce:f2:11:eb:01:9e:7e:f1:54:10:6e:d1:81:
ff:e0:4d:ac:3f:0c:b7:a8:ba:bb:f6:81:c6:af:f9:51:c3:ca:
8a:02:9a:47:f8:ac:00:13:55:f9:31:30:fb:33:22:23:bd:48:
52:c2:a8:56:9e:6f:37:60:f8:2a:36:5b:7b:70:5d:70:0a:5d:
e8:f6:cf:2c:d8:75:58:09:7e:fd:94:8b:a9:33:ed:c0:fb:e8:
f5:4d:16:10:4a:31:2a:20:b7:c0:d9:eb:82:ba:f0:76:d3:df:
65:e9:3b:5a:b1:c4:89:71:47:bf:ec:58:c4:5a:f3:93:a9:ef:
00:8d:e1:96:74:28:26:f5:7f:54:46:68:67:e5:a0:36:e5:a8:
da:b0:aa:82:67:67:0e:06:86:eb:df:fe:c5:ff:af:39:8e:6d:
05:d9:e1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org