Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/DyXiUjcVJuF20V_XBvKWOT6sP7A.roa
File: DyXiUjcVJuF20V_XBvKWOT6sP7A.roa (raw, json)
Hash identifier: cBSKzkoude9wgzmallEwmenICg5m41d2V8gwpXoShBI=
Subject key identifier: 0F:25:E2:52:37:15:26:E1:76:D1:5F:D7:06:F2:96:39:3E:AC:3F:B0
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0186D020C4D61131E8BB90D674B9B9DE9C51
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/DyXiUjcVJuF20V_XBvKWOT6sP7A.roa
Signing time: Sat 11 Mar 2023 10:04:13 +0000
ROA not before: Sat 11 Mar 2023 10:04:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.146.93.0/24 maxlen: 24
45.157.210.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Apr 2023 14:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d0:20:c4:d6:11:31:e8:bb:90:d6:74:b9:b9:de:9c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 11 10:04:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f25e252371526e176d15fd706f296393eac3fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:e2:a9:2e:4c:2e:7e:14:60:af:c2:21:ee:
a4:c6:dc:80:a9:dc:9a:dd:c9:b1:e6:21:27:64:1d:
97:82:ea:58:25:18:7a:20:6e:00:46:31:c8:b7:04:
a5:f8:4c:82:8f:91:0e:3a:92:2c:b3:b6:e8:f4:70:
56:2e:60:3a:1d:02:4b:dc:3d:7a:de:fa:e4:fd:6f:
b4:4f:aa:c4:57:84:1b:25:04:a1:cb:ce:90:66:2d:
0a:8b:36:87:0e:8f:cf:63:15:e2:0c:f5:97:8e:7f:
49:3e:6b:e0:96:c6:ea:94:d2:3c:15:35:2a:f4:48:
cb:da:9a:bb:94:6b:8c:0a:a7:a8:3f:f2:59:31:72:
46:72:13:cc:47:75:bd:a9:c5:9a:b9:fd:02:cf:81:
61:fe:bc:30:38:08:f9:f0:2f:92:39:a7:50:dd:77:
16:3f:c2:d2:33:1f:ac:61:3b:54:af:3a:98:89:ae:
7a:0c:a5:08:53:26:04:ab:1d:74:d6:fe:03:17:6d:
97:52:73:d4:18:7b:92:40:92:23:3c:05:ab:43:6a:
e4:50:c8:04:89:2a:ee:24:06:3d:3a:4c:b0:58:d4:
d5:67:bc:07:d9:9a:e3:71:46:f0:0f:fb:d9:96:b0:
f9:46:26:f6:74:14:fa:0c:d8:c3:84:97:db:57:51:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:25:E2:52:37:15:26:E1:76:D1:5F:D7:06:F2:96:39:3E:AC:3F:B0
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/DyXiUjcVJuF20V_XBvKWOT6sP7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.210.0/24
176.125.250.0/24
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:92:af:a1:8d:d2:11:d6:9f:fe:19:34:23:58:a8:fa:ef:42:
1f:b5:fe:93:1c:77:75:25:9b:b3:44:60:ed:24:76:3a:de:29:
33:53:f7:22:3c:83:70:a8:ad:db:21:d9:70:76:ec:6e:dd:b9:
f2:2e:22:2e:1a:32:d3:7d:af:77:7e:46:b9:dc:77:de:51:6e:
11:48:77:83:2b:2d:e6:e4:48:1d:08:18:c5:7e:f8:16:c4:ea:
e9:19:01:1b:ee:b0:e5:b4:b8:c4:f7:ba:9c:72:f4:09:ed:e3:
f8:d1:0c:6f:d9:d8:6e:06:56:49:bf:75:50:51:76:4b:3d:c4:
43:eb:f5:37:e0:c3:cf:7f:cd:85:8c:e8:55:1c:85:f4:90:fb:
c9:a3:30:51:76:35:05:8c:a1:f1:24:a2:25:ac:ac:9f:48:10:
ce:75:d5:25:4a:23:3f:a0:35:af:3f:cb:c0:bb:5f:a2:78:25:
4a:24:bf:5b:70:fd:c0:de:4b:84:f8:b3:3b:0e:e8:7b:14:da:
25:e9:11:0c:bb:d1:fc:3b:4c:79:f3:43:68:e1:6f:e0:1b:69:
cd:c8:e5:da:43:cb:b3:d8:41:53:c9:95:1e:7a:b9:99:43:63:
4c:f8:b4:46:ba:de:81:1d:33:3f:d5:c9:1e:7f:62:5c:64:c6:
5f:97:be:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org