Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/LXx-3y0zCXx_cdqht64TqPxGt9Q.roa
File: LXx-3y0zCXx_cdqht64TqPxGt9Q.roa (raw, json)
Hash identifier: eJA0RwPqRlETzuCc8XexBsHhjnTcDQjGP/+ACT/R5n8=
Subject key identifier: 2D:7C:7E:DF:2D:33:09:7C:7F:71:DA:A1:B7:AE:13:A8:FC:46:B7:D4
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018847FA48376A5FFBF443ACFC2E5CE0A3AF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/LXx-3y0zCXx_cdqht64TqPxGt9Q.roa
Signing time: Tue 23 May 2023 09:39:24 +0000
ROA not before: Tue 23 May 2023 09:39:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.170.0/24 maxlen: 24
185.225.171.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:fa:48:37:6a:5f:fb:f4:43:ac:fc:2e:5c:e0:a3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 23 09:39:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d7c7edf2d33097c7f71daa1b7ae13a8fc46b7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:1b:9d:d4:7f:f6:6f:2c:01:9a:83:de:e8:
de:34:b9:76:fa:7f:d5:bc:d2:e1:8e:72:22:fc:1b:
b1:f0:04:d4:5c:2e:cf:42:4c:3a:75:52:c1:b7:ba:
7e:78:4c:ba:0e:e1:18:fd:1e:74:05:a5:0c:fe:51:
bb:ba:63:dd:a3:de:f3:8f:80:94:0c:e5:14:e4:ac:
9c:77:5b:18:33:c4:73:ab:7c:d7:4a:cc:d0:24:77:
14:f7:57:6e:5f:79:85:09:2f:24:2d:a5:b5:bc:79:
1e:3e:c8:fb:3d:7a:a7:42:8d:44:5a:83:9e:e7:53:
01:a4:a3:e8:d3:fd:88:a3:d3:9c:37:c4:e3:3d:62:
4c:9c:10:8f:41:27:8a:c1:4f:20:7f:5c:93:60:db:
ea:0a:e4:c5:75:22:4a:45:11:d5:a3:84:1a:e2:2e:
5e:d7:c1:8c:07:2a:e6:70:2d:f9:4f:3d:e2:fb:a4:
3f:15:c2:08:ae:a6:0d:e8:94:68:4d:d6:c7:74:08:
b0:e6:a7:b9:f4:f4:84:da:c3:8e:12:49:08:45:e3:
0c:97:a0:af:07:55:6d:ff:91:b1:7c:47:af:fc:77:
d2:8c:93:29:93:79:7b:8b:57:96:e2:dd:06:a4:3d:
d8:a7:8b:97:9f:d3:28:47:eb:1e:94:04:30:74:c8:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7C:7E:DF:2D:33:09:7C:7F:71:DA:A1:B7:AE:13:A8:FC:46:B7:D4
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/LXx-3y0zCXx_cdqht64TqPxGt9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
79.98.246.0/24
185.199.148.0/23
185.225.170.0/23
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:36:61:4f:cf:da:3b:91:2e:66:86:91:fd:f7:d1:0e:6c:81:
37:aa:e4:1f:bd:f2:0d:1d:a1:16:e5:b9:f8:6e:91:2f:bc:f9:
ad:ee:50:69:5f:35:10:81:f3:d7:69:04:b4:3d:63:1e:09:27:
76:62:0d:00:be:1d:8e:6f:0a:04:0e:c0:04:7a:f3:68:3e:f6:
95:2c:16:9c:fe:fe:8d:47:97:32:57:64:ba:84:e2:22:49:2e:
a9:af:45:ce:65:e2:2b:c3:22:56:39:69:8e:4f:c8:3f:66:ad:
03:31:cc:12:c2:fa:d8:11:21:aa:63:64:e0:d1:c9:de:ef:3f:
05:b8:d0:ca:34:3b:38:1f:d4:1d:f1:b0:31:11:65:72:34:9a:
33:56:9d:f4:bf:43:05:3b:22:b9:af:f9:b2:fd:97:f0:a3:88:
26:4d:ce:be:1f:25:25:3e:ed:e5:2a:c9:e3:a4:bb:fe:aa:52:
08:14:bd:6c:1a:f8:f2:bb:7a:1d:76:dc:21:69:a6:31:87:d2:
cc:87:13:db:a2:65:04:b6:08:02:98:10:38:5f:e5:a5:da:e0:
dd:c0:55:3b:76:4d:4a:7a:92:85:06:54:11:8d:94:b4:f9:56:
f3:58:64:fa:c1:cd:ef:47:d3:ef:00:bd:f9:da:6a:fe:7e:0e:
f0:31:25:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:26 2023 by rpki-client on console-fra.rpki-client.org