Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/L26yqqN2DEpxuX0KvkjINVrKWxU.roa
File: L26yqqN2DEpxuX0KvkjINVrKWxU.roa (raw, json)
Hash identifier: +/+gNkkMoWEf/z8RCOGQWtQBJ8gtPcyAFkjSOVlUzCU=
Subject key identifier: 2F:6E:B2:AA:A3:76:0C:4A:71:B9:7D:0A:BE:48:C8:35:5A:CA:5B:15
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188008A63D273A6E752EE7084B0D36631B1
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/L26yqqN2DEpxuX0KvkjINVrKWxU.roa
Signing time: Tue 09 May 2023 12:44:09 +0000
ROA not before: Tue 09 May 2023 12:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 45.155.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 10:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:8a:63:d2:73:a6:e7:52:ee:70:84:b0:d3:66:31:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 9 12:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f6eb2aaa3760c4a71b97d0abe48c8355aca5b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:bb:ee:71:b7:d8:13:19:fa:8a:17:50:57:
11:ae:c0:5c:d2:e2:9b:87:5e:34:a6:3f:b9:12:f8:
0b:10:a1:90:60:81:d3:5d:35:a4:1d:9e:5a:d1:00:
8e:af:df:9b:55:e5:63:49:03:99:c5:d5:91:11:f3:
51:11:58:22:2b:24:0c:aa:f0:a7:87:de:4b:8b:0b:
d8:39:75:9f:ce:b5:44:5f:2c:32:b1:89:c7:66:87:
1b:93:c4:43:a1:6a:29:99:91:81:4b:98:95:ca:1f:
0a:7b:30:6c:9d:1f:c9:f4:d3:33:ec:1e:3c:66:8e:
d6:8c:59:87:1b:28:d0:d4:d4:70:0f:8c:ae:c3:c0:
bf:28:a3:4b:e7:f2:ad:dc:ca:30:c3:e0:e3:bd:e6:
62:f8:12:18:d1:d9:d2:94:0e:e0:d0:0b:9a:40:2a:
b3:31:1e:18:71:84:67:ef:02:83:87:a3:b9:85:c8:
cc:c8:4d:79:e6:59:9d:ad:9b:54:c6:93:b9:bb:4d:
06:3e:99:68:70:cc:5a:86:dc:89:71:04:3c:97:cc:
01:32:65:48:b9:8a:01:67:6a:be:cb:09:3b:cb:db:
de:f8:ca:67:01:6f:a8:d1:6a:6a:35:9d:55:14:44:
cd:bb:1f:05:50:84:f3:a5:74:06:c3:0d:e5:1f:40:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:B2:AA:A3:76:0C:4A:71:B9:7D:0A:BE:48:C8:35:5A:CA:5B:15
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/L26yqqN2DEpxuX0KvkjINVrKWxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:81:73:98:0a:69:a3:43:b5:61:b2:6b:8c:be:bf:26:30:5d:
18:12:d4:df:93:42:eb:65:07:f1:3d:84:4c:1a:2c:77:36:01:
1e:72:e3:59:19:67:f2:e6:4e:b0:2c:60:45:ed:de:7c:af:e9:
b6:fe:03:8b:2a:23:a2:4b:39:da:27:2c:cb:a2:02:b1:d1:82:
94:56:08:39:72:fa:21:4b:53:19:14:d1:6c:c2:88:92:ad:aa:
c2:71:84:57:29:e3:54:d7:76:ba:e1:2e:a5:3e:77:e2:bb:51:
50:19:c6:76:87:cf:89:49:f9:59:d3:4c:a6:c5:f7:35:bd:a6:
1e:ae:4f:ee:20:5e:93:34:5e:df:53:43:ab:e5:8d:2e:b3:5f:
21:f3:89:c6:7e:bb:05:ac:4b:01:55:2f:87:0e:d3:ae:df:e9:
a0:d0:0a:f1:a7:26:cc:30:0c:4b:69:0e:dd:94:da:ee:1c:b3:
f0:f3:fc:ae:fd:6e:2a:fc:d5:c1:6c:d7:f2:8a:f4:54:92:db:
4c:ed:95:02:95:c2:6a:e7:e1:83:75:6e:16:f9:cf:49:1d:9f:
3d:f8:4d:97:c5:71:89:4f:4f:f1:b4:35:8c:cb:1a:50:f6:3d:
95:c7:c7:20:bc:56:63:15:2d:b5:87:52:04:6a:ad:5a:c0:7a:
37:52:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org