Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NFoamXl93E-yQhgTzfRVkHB6dMY.roa
File: NFoamXl93E-yQhgTzfRVkHB6dMY.roa (raw, json)
Hash identifier: B8Wyop5kqBrhqh2SLZxYAqPhT1Ok8pLyWzo2TZT9MCc=
Subject key identifier: 34:5A:1A:99:79:7D:DC:4F:B2:42:18:13:CD:F4:55:90:70:7A:74:C6
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01898E06F422FA8D7481F7E5988C75BD0A87
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NFoamXl93E-yQhgTzfRVkHB6dMY.roa
Signing time: Tue 25 Jul 2023 17:09:27 +0000
ROA not before: Tue 25 Jul 2023 17:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43641
IP address blocks: 45.157.211.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 06:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:06:f4:22:fa:8d:74:81:f7:e5:98:8c:75:bd:0a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 25 17:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=345a1a99797ddc4fb2421813cdf45590707a74c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:91:a2:0d:25:88:f8:6b:fa:e4:ad:17:03:
46:fe:c6:45:31:1e:1a:50:53:80:e4:6e:23:58:fe:
cc:a7:b8:60:7c:c0:75:3d:0b:29:f5:c5:9f:be:d5:
6a:67:62:14:17:5b:75:45:35:5a:3b:cc:18:e1:a7:
00:a0:88:42:1d:67:bf:82:7c:b2:8f:04:1d:3f:5d:
eb:73:30:e1:9d:34:88:90:2c:bd:fa:da:38:cc:75:
4a:6d:ee:70:bb:a7:ec:9f:24:f1:99:8f:1f:d4:fe:
e1:b6:49:84:9b:b3:9c:41:00:a4:b2:04:ff:7d:fb:
5e:70:41:1c:7b:c4:5a:d6:2c:d0:47:78:81:ce:7a:
c3:4a:ec:a7:bb:fd:3b:aa:16:c6:9e:95:11:aa:74:
6e:ae:c1:75:de:7e:f8:04:6a:77:42:38:31:5d:95:
3f:04:6f:3c:97:81:52:d2:05:ae:e2:b0:3c:19:66:
d9:27:39:df:ed:85:ba:8f:bc:d1:e8:cc:86:30:ba:
8b:85:47:91:e7:2c:b0:c0:97:0d:81:bb:11:76:36:
f2:4c:70:03:bf:99:62:e7:50:53:30:8d:56:b9:16:
10:c5:54:c6:fb:3f:82:e8:48:50:02:e5:bf:59:53:
df:12:e6:eb:60:aa:b3:00:a0:e6:ae:26:6c:06:90:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5A:1A:99:79:7D:DC:4F:B2:42:18:13:CD:F4:55:90:70:7A:74:C6
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NFoamXl93E-yQhgTzfRVkHB6dMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.211.0/24
185.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8c:03:8b:4c:36:f6:53:77:65:08:37:f8:ea:e3:1d:40:c1:
d4:69:0f:5e:37:e0:d6:a9:b7:71:b0:30:e7:37:10:d2:aa:e7:
63:1b:df:99:f7:9b:8f:fd:c2:b5:64:e8:75:b8:a3:b4:2d:f4:
2f:f5:ca:42:01:fa:24:01:87:ce:fc:ed:03:18:35:33:2e:25:
ec:b9:c1:67:5f:d5:b9:0f:a9:3a:37:ff:41:b5:52:37:73:9f:
62:c5:c1:4c:33:11:d9:aa:18:6c:de:c4:ba:55:07:5c:d4:1f:
d7:84:81:4e:d7:60:d1:5a:3d:ce:7e:b2:53:77:c8:af:65:a6:
70:78:85:2e:7a:f9:20:87:46:69:3d:3a:d6:c3:90:46:f2:b1:
d1:41:a1:ad:45:a2:00:d5:32:de:95:e8:f0:5a:47:51:f1:bb:
aa:61:01:d9:11:e8:00:7c:ba:49:03:4c:20:d3:bd:53:bb:55:
e5:2a:b9:c3:51:2a:27:7d:31:fa:58:7c:5c:c4:84:39:50:52:
7b:d5:b2:f4:44:3b:1b:63:59:61:95:f9:d4:af:22:9d:f0:53:
a8:f3:f5:9d:e9:c7:39:d6:84:d1:f5:77:22:4c:b4:6d:2a:e6:
d0:1a:b9:e9:aa:e9:2b:a0:f6:90:33:89:09:be:a1:5d:e2:d8:
2f:a1:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org