Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CG7OEniwrFlRJ3ZCGQs49Jl_stI.roa
File: CG7OEniwrFlRJ3ZCGQs49Jl_stI.roa (raw, json)
Hash identifier: 9h80DzXGvEkmq49LVzR1Omw4lPZwVTjFrBFLwrE3Fck=
Subject key identifier: 08:6E:CE:12:78:B0:AC:59:51:27:76:42:19:0B:38:F4:99:7F:B2:D2
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018DC08F211E2DE8EB98B5F337834421A924
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CG7OEniwrFlRJ3ZCGQs49Jl_stI.roa
Signing time: Mon 19 Feb 2024 08:50:21 +0000
ROA not before: Mon 19 Feb 2024 08:50:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 00:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:8f:21:1e:2d:e8:eb:98:b5:f3:37:83:44:21:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Feb 19 08:50:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=086ece1278b0ac5951277642190b38f4997fb2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:05:d0:64:18:46:51:72:70:e9:20:39:ec:
da:a2:47:36:01:23:81:00:44:d9:8e:92:48:8f:df:
c9:21:a1:89:8a:c5:67:98:9e:83:6a:7c:0b:86:d5:
89:e0:e6:17:20:a0:d2:02:26:70:d0:9a:d1:63:73:
75:01:d5:3d:14:a4:b7:64:da:10:21:f7:9b:70:e7:
86:8b:52:02:ae:0a:b3:a9:bf:2f:19:fd:a4:21:af:
b4:04:a7:e6:6b:a8:2a:17:5b:00:54:77:80:6f:1c:
c8:34:e7:18:ef:80:0a:75:78:6e:d8:0c:ea:2d:5e:
b4:87:83:ce:82:9d:78:2a:1f:72:80:68:c8:a1:c3:
e6:dd:48:8d:ce:09:bc:33:a9:91:24:f9:e5:ca:fc:
16:2e:06:cc:20:27:9f:50:54:dc:6f:41:f9:3d:5d:
27:07:7b:28:8f:f6:8c:03:61:f8:87:f0:c9:8a:ce:
fe:dc:9b:28:fb:ae:42:6d:65:20:12:09:69:e2:12:
55:72:e8:77:4d:f9:25:25:85:ab:4a:7e:be:fc:3e:
11:aa:0b:aa:5c:db:c1:6e:c3:74:71:b3:b2:b3:89:
78:7c:5a:4e:5c:5c:cd:91:16:93:1b:08:fc:4c:55:
f3:4c:59:4d:96:ae:b6:e1:f6:61:ec:b3:f6:36:1e:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6E:CE:12:78:B0:AC:59:51:27:76:42:19:0B:38:F4:99:7F:B2:D2
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CG7OEniwrFlRJ3ZCGQs49Jl_stI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.255.0/24
45.157.209.0/24
79.98.246.0/24
185.199.151.0/24
185.199.213.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ba:05:05:56:f8:e4:2d:af:aa:03:3f:07:d5:22:f4:5e:87:
ac:63:e2:62:22:d3:49:c9:74:50:6c:8c:31:5b:50:0e:0d:45:
99:83:89:c3:f0:4a:3b:e1:a1:cd:bd:f0:d3:90:a5:00:80:41:
35:8d:d9:bb:47:c2:b2:d2:c7:fa:18:9f:4e:a2:91:bc:05:5a:
59:db:6e:15:49:68:64:e3:4d:85:7b:af:6d:ed:3b:e8:52:84:
ba:d9:14:b5:ad:4a:0e:66:ab:ff:03:c7:00:63:44:5a:cb:37:
a9:42:eb:95:0b:32:0e:e6:e8:d2:a9:19:e8:14:ff:83:26:c6:
ae:12:c0:58:54:da:fa:13:ed:c6:72:cc:1d:2b:c0:85:85:c3:
e6:a0:ed:8f:1c:44:72:a4:3e:22:78:ad:b3:66:8b:2f:ba:d6:
2b:a8:be:c0:95:ce:7a:d8:8c:96:98:4f:dd:73:a1:25:77:38:
ab:75:75:60:48:55:86:81:79:a9:78:c0:1c:2d:cb:b6:0e:6b:
f0:b8:6b:80:f0:d2:d7:64:2d:7f:e8:c1:ff:c9:01:cc:b8:48:
97:a1:5b:12:8f:86:2b:46:ab:32:bf:c8:2d:a4:bc:b6:f8:e7:
6e:20:a8:20:0e:b1:af:f8:26:4d:a6:71:20:c5:2d:a0:42:0c:
49:49:93:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 04:43:48 2024 by rpki-client on console-fra.rpki-client.org