Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/E1fngazjwEULGkKe4upsV0tCVro.roa
File: E1fngazjwEULGkKe4upsV0tCVro.roa (raw, json)
Hash identifier: 6zw7Ce3MM/eYqd7wl8bHj2dJcFLxzwPjtOGZW18q47I=
Subject key identifier: 13:57:E7:81:AC:E3:C0:45:0B:1A:42:9E:E2:EA:6C:57:4B:42:56:BA
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019164CB7AF839FC79F298EF401D827D86F3
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/E1fngazjwEULGkKe4upsV0tCVro.roa
Signing time: Sun 18 Aug 2024 09:22:22 +0000
ROA not before: Sun 18 Aug 2024 09:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 15:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:64:cb:7a:f8:39:fc:79:f2:98:ef:40:1d:82:7d:86:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 18 09:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1357e781ace3c0450b1a429ee2ea6c574b4256ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:21:24:0e:7d:f3:78:a0:0b:4d:fe:28:45:ca:
7d:81:b5:31:3f:e9:6e:41:88:01:e6:93:89:57:c2:
43:0c:4e:98:f8:94:42:e2:0e:be:e1:9f:27:e8:17:
0f:f2:b8:ff:00:74:c3:10:09:ad:be:a5:71:db:b2:
24:28:27:24:4f:91:7b:02:df:cf:67:27:a0:1d:52:
95:a9:b9:07:37:33:08:52:85:20:2c:79:f1:75:4e:
b2:50:f8:6b:ff:33:47:c2:83:02:7f:47:67:d2:35:
05:b7:86:0e:45:17:01:4f:4c:52:9d:e6:fe:90:c9:
72:1c:29:48:93:b2:90:2f:1c:79:87:4c:87:b2:ef:
de:68:df:3b:63:bb:da:4d:08:d4:33:dd:a8:e3:d6:
c0:d8:83:10:ec:f3:9c:9d:07:3b:b1:aa:78:73:38:
91:1f:25:93:ca:46:ba:5b:14:2a:4f:28:ce:96:f9:
a4:1b:e5:0d:be:bc:1a:b4:6e:b0:a4:5d:ee:3f:fd:
3e:af:c8:f1:50:a7:a8:84:af:fb:b1:89:5d:7b:38:
24:d9:c4:3e:e2:85:38:83:b7:4a:83:ab:24:dc:76:
72:91:9f:f3:64:53:11:52:00:9d:56:a2:b9:db:71:
cb:b5:86:1b:b7:d3:05:01:95:14:9c:91:f7:6c:ce:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:57:E7:81:AC:E3:C0:45:0B:1A:42:9E:E2:EA:6C:57:4B:42:56:BA
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/E1fngazjwEULGkKe4upsV0tCVro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
79.98.246.0/24
185.199.213.0/24
185.221.26.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
28:26:22:1d:86:c2:5b:74:33:29:ae:9f:ca:61:32:1d:93:fe:
f2:b8:38:74:6a:70:29:4e:be:6e:b4:51:b1:ed:5f:18:f8:b2:
26:8e:07:0b:4a:a1:14:d9:02:8d:31:cd:ba:f8:9d:dc:04:23:
d8:58:e8:8f:95:a9:50:2e:61:dc:71:5c:ad:4d:b6:c1:49:42:
12:33:8a:90:13:5a:26:86:d2:55:1e:5a:30:e3:86:de:71:ae:
bb:23:2c:d3:08:77:db:fc:81:e4:5d:9e:6f:68:ef:43:90:83:
9d:5a:23:6c:d1:30:cc:f3:1c:f8:3c:56:4f:ef:d9:d7:f3:da:
e2:b3:0d:6d:04:b5:82:aa:fc:81:ed:92:a6:e6:bd:90:52:dc:
4a:d8:8b:a0:c2:79:47:65:51:c6:5a:6a:b5:ce:0c:4f:b4:c2:
ea:6b:71:bf:de:5d:12:c4:3a:4f:8f:56:76:97:c6:2a:0f:17:
f1:35:71:ce:a0:de:c9:08:ef:02:8b:75:1e:f0:77:0b:b5:2b:
68:a9:69:c1:50:5c:b6:57:f4:f1:35:a5:d2:a9:2f:44:2b:88:
35:9f:81:ec:72:1c:2b:97:db:98:ee:df:fd:51:ca:66:1d:cf:
01:21:29:25:96:72:0c:4d:91:85:de:d2:3f:b6:93:48:10:3d:
b6:b8:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 19:13:12 2024 by rpki-client on console-fra.rpki-client.org