Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/N7pq1kWONPnhOqWgyUnjuV7Qd8o.roa
File: N7pq1kWONPnhOqWgyUnjuV7Qd8o.roa (raw, json)
Hash identifier: bU8GyqYyTFFcK1gLcO7PhYdKQ93dNKq7rd1PRQk4g20=
Subject key identifier: 37:BA:6A:D6:45:8E:34:F9:E1:3A:A5:A0:C9:49:E3:B9:5E:D0:77:CA
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01916B59A5CC37E741B64E181593687E0063
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/N7pq1kWONPnhOqWgyUnjuV7Qd8o.roa
Signing time: Mon 19 Aug 2024 15:55:22 +0000
ROA not before: Mon 19 Aug 2024 15:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.155.254.0/24 maxlen: 24
45.157.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 06:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:59:a5:cc:37:e7:41:b6:4e:18:15:93:68:7e:00:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 19 15:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37ba6ad6458e34f9e13aa5a0c949e3b95ed077ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:a6:b2:a8:d2:0d:f7:45:5d:c7:75:1a:1e:
36:aa:19:88:1d:df:de:bb:d3:9b:11:5c:ab:84:27:
69:e9:4f:8f:ee:32:07:73:87:3c:f8:01:dd:9b:a5:
02:e6:8d:63:c7:cd:e8:07:69:ad:b4:06:8e:38:62:
42:88:03:4c:b0:90:90:ee:76:d1:ce:16:23:5a:bd:
c1:70:70:a2:9f:20:9b:a5:b6:c7:f1:9f:ab:c9:bf:
1e:2c:71:9a:fd:64:3d:9e:dd:d6:54:99:eb:eb:15:
b6:0e:27:8f:61:00:2c:7c:a2:b6:6a:eb:1c:2c:21:
62:f3:d6:78:41:1a:ff:8d:24:4b:ed:eb:99:5a:6f:
69:f0:52:91:fe:a4:a3:85:66:7e:7c:c2:dd:15:77:
eb:dc:0b:d6:f1:66:84:bb:f9:22:12:47:63:6b:10:
49:51:e1:47:34:7c:28:53:5e:05:dc:43:fe:3d:a6:
13:b9:8e:c3:95:3f:7f:42:eb:74:9b:57:ee:6c:81:
82:35:fb:ab:eb:c2:76:af:55:df:c7:15:dd:1c:e1:
a2:b3:8c:6c:33:70:3a:2f:8b:b9:fb:2b:23:75:ff:
6e:3d:ea:21:95:35:e2:48:ac:ef:eb:bb:3b:9c:8f:
6b:8d:4e:2f:96:c6:a4:b5:e6:8f:ca:cc:10:05:7c:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BA:6A:D6:45:8E:34:F9:E1:3A:A5:A0:C9:49:E3:B9:5E:D0:77:CA
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/N7pq1kWONPnhOqWgyUnjuV7Qd8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
45.157.208.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0f:7e:ba:2f:8f:5e:bb:c1:31:44:ed:e2:80:bf:23:14:69:
be:e7:49:18:06:ae:ee:f7:f8:f8:b8:a9:62:0d:be:ce:e0:ea:
43:88:2c:34:8a:33:ee:9c:70:24:be:da:aa:9c:87:8d:90:7e:
17:4a:42:a9:36:f1:37:f7:1e:05:1c:42:0a:e0:2f:30:06:36:
b4:6b:6f:f5:11:d1:e1:fd:ad:82:2c:b3:75:02:93:00:d3:54:
01:ab:ed:64:a0:92:64:4e:d3:c3:41:bd:25:54:24:17:4c:6d:
24:51:5c:52:b0:d8:12:52:13:7a:bd:db:4b:79:04:8d:41:44:
51:1a:f7:f0:cf:80:3b:f6:28:5b:6a:2a:9d:f6:36:3a:ea:3e:
d6:f8:a6:cc:81:fa:28:46:61:f5:ae:d1:ae:81:02:d7:f3:bf:
44:91:41:0a:f4:f0:04:7f:42:b9:52:fc:ae:a2:7d:46:d3:64:
17:57:4a:76:0f:63:c8:a1:8e:1a:58:4e:f4:26:1d:c7:bb:37:
e9:c0:f1:81:43:73:3e:64:2a:b9:26:9c:c8:26:0c:98:1d:91:
ea:dc:37:ee:25:e2:6f:77:5d:dc:60:bf:d6:2b:70:76:8b:55:
c9:bd:fb:d1:05:3a:24:41:51:16:08:73:fd:53:68:ba:65:bd:
cc:8a:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:07:16 2024 by rpki-client on console-ams.rpki-client.org