Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YMndncN9jcSEkkZqdR8eUvNjGK4.roa
File: YMndncN9jcSEkkZqdR8eUvNjGK4.roa (raw, json)
Hash identifier: Q06AEL+BAvOT34olxuwAszUcXtSjT80Lnfs4A3aDLfY=
Subject key identifier: 60:C9:DD:9D:C3:7D:8D:C4:84:92:46:6A:75:1F:1E:52:F3:63:18:AE
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188DE5375E6D8EF868B559BBD2D8B7BB4A6
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YMndncN9jcSEkkZqdR8eUvNjGK4.roa
Signing time: Wed 21 Jun 2023 14:19:51 +0000
ROA not before: Wed 21 Jun 2023 14:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 16:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:53:75:e6:d8:ef:86:8b:55:9b:bd:2d:8b:7b:b4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 21 14:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60c9dd9dc37d8dc48492466a751f1e52f36318ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:d8:cf:27:f4:c8:ad:d1:7f:3b:f5:8d:4b:
77:8b:f4:28:0c:a4:9a:ab:6a:c5:53:40:76:7e:8a:
13:a5:e3:95:bb:c1:da:e0:18:e4:f2:0f:10:28:62:
1e:44:0d:04:f8:17:c3:65:85:1e:76:57:d5:f7:01:
08:96:01:0b:be:1f:7e:23:10:7f:40:77:e6:f4:5b:
d8:25:64:f1:8c:69:08:6d:a7:2a:cb:f9:e6:c5:c5:
79:4b:3f:a3:eb:9a:b9:23:d9:e7:c2:b1:c5:24:c3:
db:19:1f:e9:f1:06:0d:6d:2d:9d:d2:c3:35:b6:9b:
51:29:4b:0b:27:6d:4e:bd:15:a1:fd:62:79:2b:0c:
6c:d0:6e:85:e6:8d:fc:df:92:d5:a7:8f:a7:45:02:
bd:55:2f:d3:a2:61:07:0f:ad:d1:c4:53:8f:6e:12:
92:08:d9:25:f2:03:2e:31:b4:c7:53:c3:3a:fa:6b:
57:42:9a:8d:6f:4b:f8:30:ea:e1:14:ca:1a:8f:88:
1c:46:95:49:4b:89:53:e8:85:95:a2:12:28:04:7f:
df:44:fc:f8:69:a4:50:a5:0e:2c:a1:3c:5f:27:c5:
ca:88:58:e0:83:ce:ba:76:13:58:8f:07:80:72:46:
90:f9:69:b1:c1:db:51:ab:9f:18:ba:4e:7a:28:1e:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C9:DD:9D:C3:7D:8D:C4:84:92:46:6A:75:1F:1E:52:F3:63:18:AE
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YMndncN9jcSEkkZqdR8eUvNjGK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.209.0/24
79.98.247.0/24
176.125.250.0/23
185.226.181.0/24
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
03:17:2a:60:07:5f:1d:64:5a:88:bd:9c:f9:0d:e8:ab:3e:74:
08:ea:22:a0:cb:ca:71:2d:f4:3a:be:5f:7f:bd:1c:8d:8b:d0:
80:ae:eb:74:e1:c4:f4:e8:20:46:b1:59:55:d7:30:88:0f:a3:
3f:af:80:50:08:c6:68:5a:94:c3:a1:00:f2:3a:7b:04:8b:71:
97:e0:64:15:68:93:7e:ae:11:1f:1c:a8:5b:6c:07:fb:4a:54:
4f:3d:7f:a5:94:2d:07:3a:23:7e:49:df:97:8f:92:d5:a6:9d:
19:f0:d6:72:bf:3a:73:58:c9:65:5f:1d:9d:c0:ef:b0:df:c9:
29:fa:e4:49:a9:73:7c:c8:61:8e:66:cb:27:ba:0c:f6:2f:eb:
8f:e7:2b:62:c1:c2:55:0c:92:bf:22:42:be:64:f2:78:4c:e3:
78:76:1d:6f:7c:e5:d3:fd:6f:8b:89:15:3b:b1:ff:7a:25:19:
ca:27:7d:00:8f:35:83:8e:3d:0f:37:5d:ab:65:e7:9b:b6:1f:
f5:30:11:bd:9a:45:66:74:29:1e:ec:c5:48:20:c8:db:7b:34:
a8:f5:27:fd:14:bb:1e:86:4d:f9:79:f7:7a:b7:b9:9d:b1:3a:
9c:4c:41:d2:be:e7:45:8b:50:31:f4:6e:1c:fc:4c:5b:2c:52:
8f:15:54:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org