Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/E2Nd8DKV-KN4CQpkk5Eep9varTI.roa
File: E2Nd8DKV-KN4CQpkk5Eep9varTI.roa (raw, json)
Hash identifier: tgjQeZMJilFSbxMCgOOUJiPTqgBM2EwlfCUtvQL2Lp4=
Subject key identifier: 13:63:5D:F0:32:95:F8:A3:78:09:0A:64:93:91:1E:A7:DB:DA:AD:32
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01895565F1B3B4E2E938E25F6BB2FE1E0043
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/E2Nd8DKV-KN4CQpkk5Eep9varTI.roa
Signing time: Fri 14 Jul 2023 17:14:51 +0000
ROA not before: Fri 14 Jul 2023 17:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
45.157.211.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.225.171.0/24 maxlen: 24
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
79.98.244.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jul 2023 12:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:65:f1:b3:b4:e2:e9:38:e2:5f:6b:b2:fe:1e:00:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 14 17:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13635df03295f8a378090a6493911ea7dbdaad32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:a0:c1:d8:03:ed:0c:b9:c2:b1:72:6a:8f:
4c:d7:d9:a5:c7:21:f1:9e:56:de:17:c0:90:ac:53:
f3:86:5b:17:55:2b:38:e4:b1:b6:6f:bc:1a:bb:93:
8a:71:b2:e0:2e:a7:24:4a:da:53:c3:51:d1:d6:93:
06:cd:57:3e:91:a3:51:d3:24:91:43:b5:93:fa:e4:
e1:95:de:0a:1b:81:65:ba:4a:a4:47:2a:58:13:17:
52:59:11:a5:16:77:e9:a8:2f:de:2a:eb:07:fd:d1:
8a:9d:6a:58:eb:35:1e:7b:97:fc:67:99:11:91:47:
22:55:c6:c5:1b:8b:f7:eb:53:b6:24:64:2d:8b:6f:
67:dd:c8:de:f6:e9:71:8b:a1:01:61:15:22:fd:6d:
47:12:ec:85:bf:c6:3e:79:fd:19:b4:60:9a:9b:2a:
c0:25:ce:9d:cd:cd:9a:68:52:c1:91:6f:d2:e4:0c:
08:f0:da:3e:9a:31:7f:9f:67:da:9c:b9:ce:b5:e9:
93:8b:e8:54:d2:31:a1:2b:87:e3:25:da:60:64:b5:
b8:c1:89:c1:35:6a:ac:94:ed:5c:e8:e9:71:03:8b:
ee:44:57:cc:bb:aa:f8:20:74:e8:48:36:d0:f9:ff:
14:7d:85:70:ae:da:77:4f:a7:21:f0:83:6d:4a:d8:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:63:5D:F0:32:95:F8:A3:78:09:0A:64:93:91:1E:A7:DB:DA:AD:32
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/E2Nd8DKV-KN4CQpkk5Eep9varTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.209.0/24
45.157.211.0/24
79.98.244.0/22
185.199.151.0/24
185.225.168.0/22
185.250.26.0/24
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
52:84:bb:65:03:b8:37:f5:7c:4e:37:91:7f:37:4d:a8:cb:d3:
b1:13:60:54:b9:bb:81:27:51:64:63:f8:40:80:f8:c9:ad:4d:
9c:4e:be:e3:c9:8c:e2:38:a7:30:a6:64:2f:3d:48:a1:79:45:
6f:65:cd:fd:f4:66:33:69:d1:49:bb:67:1f:5b:67:08:8c:de:
b4:ff:ea:ad:bc:7c:2a:a0:8c:5f:1e:41:d6:78:c8:80:a0:d8:
ab:9f:08:3b:ce:77:31:cb:7a:d0:24:0d:68:1d:4e:f2:b2:cd:
e2:59:82:70:48:27:fa:5c:40:4d:43:1c:ed:18:67:14:1d:f5:
7c:e3:5f:af:18:d8:f6:16:22:15:7f:4f:2c:d9:de:f7:57:bf:
1f:be:d4:e8:8b:97:89:1c:06:9a:ad:d9:ec:7a:81:77:ed:71:
fb:67:ab:e7:73:88:5c:7c:39:db:28:ac:fc:9c:98:56:51:9a:
fd:d9:bd:fc:32:2d:ca:31:6f:53:9b:1f:a5:5f:a2:af:98:0b:
43:c9:09:df:32:65:a5:35:32:61:26:87:0d:eb:07:d0:19:fc:
39:76:f7:86:05:24:c3:d5:2d:ed:c5:47:ab:fb:9f:d9:d7:5f:
86:34:75:6b:86:86:bd:e5:4f:fd:3e:89:46:48:db:ef:0d:fb:
a3:e1:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org