Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KOiWS0LDYQMFXusGr4EWOvFLk4Y.roa
File: KOiWS0LDYQMFXusGr4EWOvFLk4Y.roa (raw, json)
Hash identifier: trfzC/IAOibsmvLPB2dEZu6oGKci41Mfd+o7BRtxv0Y=
Subject key identifier: 28:E8:96:4B:42:C3:61:03:05:5E:EB:06:AF:81:16:3A:F1:4B:93:86
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018B6045E7D2B8802EE1FC18C78BC942A74D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KOiWS0LDYQMFXusGr4EWOvFLk4Y.roa
Signing time: Tue 24 Oct 2023 06:01:15 +0000
ROA not before: Tue 24 Oct 2023 06:01:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
185.199.212.0/23 maxlen: 24
45.157.211.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
185.250.25.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
185.225.170.0/23 maxlen: 24
185.225.171.0/24 maxlen: 24
185.225.168.0/23 maxlen: 24
185.225.169.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
79.98.246.0/23 maxlen: 24
185.221.24.0/23 maxlen: 24
185.221.25.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:45:e7:d2:b8:80:2e:e1:fc:18:c7:8b:c9:42:a7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 24 06:01:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28e8964b42c36103055eeb06af81163af14b9386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8b:16:54:26:ef:c3:c0:77:5f:20:dc:95:09:
8a:4d:86:17:71:61:02:b0:03:c5:9f:f2:6e:41:f2:
aa:db:3e:fe:7a:cd:6a:f0:70:50:5b:b3:b1:02:6c:
db:11:2c:13:84:4b:df:75:70:82:49:f2:90:89:30:
ba:9f:be:c2:0d:87:71:30:4b:0f:19:ef:37:45:ac:
18:e2:50:6e:cf:17:43:48:03:47:c5:61:28:ea:72:
ee:f7:7d:97:09:23:a7:f9:ce:32:a6:10:ab:82:eb:
83:eb:38:6a:73:7e:6f:b9:a9:0b:ed:75:f1:be:4e:
f9:8a:bc:97:5e:72:0e:20:f4:18:64:0e:26:e8:c6:
1e:43:95:64:33:99:89:97:99:da:fc:20:5a:05:53:
9d:90:34:55:5b:ad:be:ba:92:eb:c3:74:53:2e:01:
ad:c6:00:42:8b:88:fc:e7:e6:52:4f:b2:5b:7a:ef:
e4:4b:eb:e7:4a:68:f8:1d:30:28:d2:62:73:2e:d0:
ab:e4:64:bb:cc:2a:1b:25:d5:81:a6:75:09:e4:ab:
73:ff:38:c3:2d:1f:be:13:b1:c3:51:2e:80:5c:e2:
ec:00:07:d6:32:00:06:71:0b:08:8d:94:21:82:fe:
3a:ee:3a:4a:60:13:3e:6b:49:85:59:86:37:80:ca:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E8:96:4B:42:C3:61:03:05:5E:EB:06:AF:81:16:3A:F1:4B:93:86
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KOiWS0LDYQMFXusGr4EWOvFLk4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.209.0/24
45.157.211.0/24
79.98.245.0-79.98.247.255
176.125.250.0/23
185.199.151.0/24
185.199.212.0/23
185.221.24.0/23
185.225.168.0/22
185.226.181.0/24
185.250.25.0-185.250.26.255
194.146.92.0/23
Signature Algorithm: sha256WithRSAEncryption
78:7c:48:f6:9b:44:f6:06:9f:bc:21:b5:d6:46:f9:7e:45:78:
ac:26:c0:7c:ba:5b:b5:43:ed:36:4d:3b:ac:a2:70:ce:e6:34:
a5:45:a5:73:22:01:83:a2:09:e2:38:f8:73:85:48:d0:44:b4:
b9:f9:0b:e7:50:f7:dc:f1:31:aa:94:52:44:26:6d:19:4f:0e:
e4:03:6b:a2:65:62:79:b6:12:c9:64:6f:69:47:f3:0d:bc:46:
ec:b0:3a:5d:3b:24:30:e5:a6:7b:af:e7:d5:63:71:42:51:11:
36:d8:e7:9f:a3:4e:f4:d8:ac:91:e6:21:1b:f5:b4:62:3b:6e:
ec:3d:1f:2b:5b:c4:af:af:7c:51:a6:c3:97:94:d2:4e:44:72:
93:df:3c:a2:55:7a:d0:ee:e5:8b:93:f6:90:3d:34:5f:88:49:
02:12:95:db:80:5d:3a:79:fe:2a:e6:48:74:16:f3:af:3d:77:
5c:72:07:8b:c4:34:af:85:2f:cf:3b:6c:a0:dd:12:a6:c6:31:
02:21:39:09:05:95:ce:21:83:35:22:75:28:66:61:db:30:c3:
c8:77:d5:b0:d0:9c:c5:ad:ed:6c:27:16:b6:5e:b4:c7:c7:ba:
a4:11:d9:51:87:42:df:1f:bc:3d:f2:00:12:9a:96:9d:ab:13:
1c:81:3d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 19:53:33 2023 by rpki-client on console-ams.rpki-client.org