Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BdsrmabZTMQ-3ghtD6UMPXRwwlk.roa
File: BdsrmabZTMQ-3ghtD6UMPXRwwlk.roa (raw, json)
Hash identifier: nLURpFF0aX4USELY4zlWACB6hDy5ggKgFaiIwh5HZI4=
Subject key identifier: 05:DB:2B:99:A6:D9:4C:C4:3E:DE:08:6D:0F:A5:0C:3D:74:70:C2:59
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01881698731150ABABDC6CBD34506C70A3EF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BdsrmabZTMQ-3ghtD6UMPXRwwlk.roa
Signing time: Sat 13 May 2023 19:31:09 +0000
ROA not before: Sat 13 May 2023 19:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 45.155.254.0/24 maxlen: 24
45.155.253.0/24 maxlen: 24
185.226.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:16:98:73:11:50:ab:ab:dc:6c:bd:34:50:6c:70:a3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 13 19:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05db2b99a6d94cc43ede086d0fa50c3d7470c259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:b4:f9:4b:3c:08:3e:3f:8f:c6:9b:36:89:
43:ce:83:f7:6e:c6:b1:a2:de:24:5d:1b:58:0f:bd:
3a:7e:8f:c4:24:09:3a:10:3d:ac:9f:3d:76:74:78:
64:e1:42:52:c1:1b:60:63:6d:56:05:e5:16:17:e6:
df:e0:bc:db:3f:8c:06:6a:5c:f9:6e:59:04:21:8f:
d0:97:f3:b9:78:e1:25:7c:7d:9b:1d:c8:3b:8c:7d:
90:41:ff:6f:69:b4:61:97:44:7d:35:5d:da:b0:24:
62:a7:e7:1b:c5:79:bc:1c:ca:89:b7:04:c6:67:ec:
46:ff:79:ce:9f:2a:06:11:47:78:a2:ae:93:36:bd:
b2:7c:36:42:cd:09:21:6d:49:95:fc:f6:5a:0e:4d:
f9:3c:c9:a6:f3:88:6e:74:34:c1:ef:3b:d4:97:4e:
f1:ae:c8:30:b3:13:87:3e:2c:4d:7f:21:64:17:f1:
3c:23:04:80:2c:e2:a2:72:6d:52:52:29:a7:4c:17:
06:f9:a2:fe:ac:dc:fd:21:1d:17:f1:ff:52:74:25:
31:35:8d:ff:bb:d1:f7:ff:2c:ab:ee:af:0c:17:ec:
5b:eb:4e:29:11:be:d4:8a:0d:96:b5:83:68:65:d2:
82:a5:37:ad:07:33:a9:30:9f:8a:b3:3e:95:16:bc:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DB:2B:99:A6:D9:4C:C4:3E:DE:08:6D:0F:A5:0C:3D:74:70:C2:59
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BdsrmabZTMQ-3ghtD6UMPXRwwlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
185.226.180.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:a4:a8:0d:59:9c:1b:ea:42:d9:3a:4a:3a:9a:ec:88:36:96:
a9:ce:86:4a:c9:30:8a:e0:cd:93:35:4b:35:25:c8:7b:87:ab:
b4:5f:e1:3c:46:e9:53:c8:7b:fd:de:78:e1:d2:09:e2:81:94:
8e:df:4c:66:fb:b7:01:f5:f0:7a:b5:8f:b7:db:84:af:ca:1c:
d2:98:ff:90:17:7f:57:8c:70:50:f8:de:9d:4e:cf:63:31:1b:
85:8b:2a:8f:d1:79:37:b7:df:91:49:21:43:0d:4f:73:e6:71:
78:0b:81:98:8b:8d:26:79:0f:19:46:81:65:a1:b8:a4:57:90:
69:da:e4:d1:e1:f7:0a:d9:0e:27:3e:fa:a0:69:a2:d8:0a:da:
60:ca:04:d8:82:2d:8f:5e:c1:39:53:89:a8:db:ac:a9:1f:af:
0d:ac:64:8a:6c:fc:26:84:3c:c7:32:68:c3:5c:c6:4a:62:06:
c6:24:cd:77:2f:9d:32:59:cc:cd:b3:6c:ef:d3:95:95:b9:9e:
ff:c4:be:1e:65:0c:58:d3:82:bc:ec:48:1d:81:e7:b9:f6:7a:
f7:e1:08:dc:77:8a:9e:b1:40:07:db:ac:3b:56:6f:a8:4a:6d:
e8:a0:d4:48:d3:0d:f8:44:16:ad:2b:d4:4b:aa:52:28:ee:28:
39:be:09:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:11 2024 by rpki-client on console-fra.rpki-client.org