Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Oi3U5jy8wSgjZTojhnyfkyJsq3s.roa
File: Oi3U5jy8wSgjZTojhnyfkyJsq3s.roa (raw, json)
Hash identifier: 57lSsFW84JfdkqN9KTI+tCXimazANO0AHeDDKTaIu4A=
Subject key identifier: 3A:2D:D4:E6:3C:BC:C1:28:23:65:3A:23:86:7C:9F:93:22:6C:AB:7B
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0189BB0A40367626B74AF0345A9BE6A72C99
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Oi3U5jy8wSgjZTojhnyfkyJsq3s.roa
Signing time: Thu 03 Aug 2023 10:55:58 +0000
ROA not before: Thu 03 Aug 2023 10:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
185.199.212.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 09:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:0a:40:36:76:26:b7:4a:f0:34:5a:9b:e6:a7:2c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 3 10:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a2dd4e63cbcc12823653a23867c9f93226cab7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f3:2f:51:bb:56:86:4f:4e:1a:8b:eb:ce:fe:
2e:7a:29:28:6e:3d:2c:bf:50:4c:7c:6d:66:a5:60:
3e:1d:20:94:da:68:58:6a:8e:d8:80:b6:87:cf:57:
d0:86:08:54:c1:79:13:dc:3e:68:ce:d7:af:3a:f8:
ee:88:2d:0c:48:b2:4d:74:64:63:22:06:dc:01:32:
6c:b1:53:1e:5b:41:74:19:99:c1:a8:6b:6a:e1:88:
95:b7:57:97:91:1b:20:3c:52:a3:d6:a2:2d:47:d3:
96:d0:37:ae:3a:6c:14:cc:ec:97:17:e9:d1:13:64:
95:fc:fb:40:ae:16:cd:56:01:d3:c0:b9:1b:ec:92:
c1:d5:e0:46:33:89:fb:e1:79:ef:98:98:a0:d7:3a:
04:25:fe:78:48:cb:c2:69:0f:36:96:5a:a7:98:e0:
8f:8a:19:23:8d:77:53:13:09:aa:02:6b:f8:32:1e:
23:fa:4e:a2:68:24:76:e3:54:f5:ad:f4:ec:c7:b6:
40:7f:d9:8d:b7:c8:75:38:62:17:de:c1:43:ba:a3:
3c:76:aa:b9:84:bd:fe:ca:51:79:17:71:c5:25:b2:
a5:a0:75:74:99:b8:40:02:94:09:e2:f2:04:63:ad:
e1:c2:fe:dc:86:dd:9b:72:4c:98:3f:26:1e:3a:70:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2D:D4:E6:3C:BC:C1:28:23:65:3A:23:86:7C:9F:93:22:6C:AB:7B
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Oi3U5jy8wSgjZTojhnyfkyJsq3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.209.0/24
79.98.247.0/24
176.125.250.0/24
185.199.151.0/24
185.199.212.0/23
185.225.168.0-185.225.170.255
185.250.26.0/24
194.146.92.0/23
Signature Algorithm: sha256WithRSAEncryption
98:2e:77:4f:de:d0:1f:55:14:ef:29:c6:93:88:fc:79:97:a9:
6a:be:62:c1:df:be:17:e8:49:81:d5:79:ac:0f:a5:91:c8:cb:
e4:c2:1f:94:4a:d0:52:22:d6:3c:ba:d7:8d:1d:48:7e:ba:08:
32:a8:4a:e5:ab:f5:b6:23:fd:01:72:03:8b:85:8f:77:1e:6f:
e9:5c:19:fa:7e:bd:2e:15:7c:fd:a9:7c:25:26:8a:00:65:b2:
7e:41:0e:70:14:4b:54:8b:f8:4a:1a:f4:59:96:16:3c:74:d3:
10:8d:85:d4:8e:ca:3f:f9:8e:48:83:60:5f:f5:47:33:10:ef:
bc:51:83:a8:32:f8:57:d4:4a:dd:8e:58:86:64:a5:49:c0:4c:
90:c2:1b:ec:41:35:33:6a:b6:ee:61:49:d1:41:44:db:eb:05:
b0:6c:a2:a4:d6:61:2d:50:ce:02:1a:de:02:f4:5c:12:4d:12:
4d:bf:d1:2e:e0:c9:27:8a:50:57:bd:fa:f1:61:62:4e:cf:bc:
04:31:d1:d2:df:f1:23:ec:44:f9:33:1b:34:64:58:54:01:3f:
c2:e0:e7:94:9b:6a:17:f1:65:81:b1:c3:18:fe:5e:40:51:e3:
2b:58:a6:3d:36:4e:84:41:1a:63:cd:da:51:51:23:08:cb:e7:
6c:3e:6b:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org