Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Eo_Qi-LGufDAMOADg_3ayj1_nhI.roa
File: Eo_Qi-LGufDAMOADg_3ayj1_nhI.roa (raw, json)
Hash identifier: iXLStQwn1m+wUxIHO4qIzdVcekvrekpimc8arO8uSEU=
Subject key identifier: 12:8F:D0:8B:E2:C6:B9:F0:C0:30:E0:03:83:FD:DA:CA:3D:7F:9E:12
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0190E959F36DF1EC3788D3C469BA875D0EB8
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Eo_Qi-LGufDAMOADg_3ayj1_nhI.roa
Signing time: Thu 25 Jul 2024 10:05:04 +0000
ROA not before: Thu 25 Jul 2024 10:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.157.208.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 12:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:59:f3:6d:f1:ec:37:88:d3:c4:69:ba:87:5d:0e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 25 10:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=128fd08be2c6b9f0c030e00383fddaca3d7f9e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:e8:f4:45:14:55:c5:7c:ab:e5:89:c6:29:
fb:43:67:46:11:68:33:95:c9:52:9b:92:50:4e:4c:
eb:97:4b:fd:b5:d7:5f:a5:a4:ea:88:0b:b2:1b:df:
75:1c:d2:97:19:88:c4:6f:74:b6:f6:0b:81:38:2e:
3a:79:77:a4:1d:af:bd:c5:dd:7f:58:8e:6b:2e:f9:
57:c5:0e:b2:82:9f:cb:e9:14:39:e3:a7:46:a6:41:
a7:bc:8e:34:24:b1:f1:f8:32:cd:08:9e:d3:76:d7:
8e:34:e8:df:57:df:60:7c:c7:28:54:e3:d3:eb:af:
95:45:ea:13:d9:74:b7:36:56:f3:36:15:08:e9:04:
21:ae:6b:ba:8b:a3:03:3e:42:7c:40:0c:34:37:26:
cd:60:35:7f:7b:e4:f9:33:bf:76:67:39:dd:8a:d4:
df:25:49:b4:f5:50:65:9a:2c:79:57:64:3c:25:e8:
45:69:b5:54:04:72:b2:8f:e8:36:c3:9f:b0:93:cb:
5f:5c:e9:de:7b:f7:06:e8:b6:b2:2f:ce:aa:de:72:
5c:f1:e3:d8:df:36:0f:34:67:6d:66:24:c6:b3:e0:
b8:75:fa:16:4f:dd:01:b8:88:75:db:0a:9b:67:4c:
58:46:ff:93:cf:54:b8:ea:6a:78:aa:ac:69:f4:04:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8F:D0:8B:E2:C6:B9:F0:C0:30:E0:03:83:FD:DA:CA:3D:7F:9E:12
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Eo_Qi-LGufDAMOADg_3ayj1_nhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.208.0/24
185.199.213.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e5:9b:4f:a2:34:54:b4:36:99:0c:21:97:1f:41:2c:6c:4a:
8e:fa:85:db:40:b2:07:b6:5c:2a:17:7b:08:c1:ce:46:c5:4b:
75:56:4f:79:32:c0:29:42:75:4b:4f:99:ca:e6:4d:8d:dd:42:
b6:59:34:7a:44:e4:76:0e:bb:4b:1f:f2:44:e3:f1:c6:fb:5b:
87:e8:39:db:92:cd:15:75:8a:bc:ac:55:56:51:cf:d9:4c:6a:
fe:38:59:3d:52:04:2a:bc:ca:8c:0c:fd:4c:0e:16:23:70:58:
81:a4:89:a5:eb:7f:cf:66:af:7c:26:70:34:f0:f4:b9:48:60:
97:5b:f3:54:7b:89:9e:60:aa:a5:6f:80:fb:c1:23:96:e2:4a:
5d:3b:c5:c9:bb:5d:5e:4e:6f:73:d0:1d:58:4e:f1:a4:81:96:
52:28:40:c7:f5:a2:ce:92:88:35:b8:b4:14:dc:f9:dd:5d:b9:
92:de:47:3b:ff:cc:41:d4:9a:a9:84:2a:8a:f0:ab:f5:d8:f5:
15:61:c2:81:fe:7a:ca:24:e1:bf:76:26:8e:6a:f9:cf:8b:85:
d6:19:58:fd:79:f7:16:70:d5:a8:a2:50:7a:21:6d:7d:3f:20:
95:c1:38:46:fc:04:bb:20:4e:0f:77:6f:82:92:d5:e0:69:65:
1c:d8:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 16:40:23 2024 by rpki-client on console-ams.rpki-client.org