Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YcJY6vKZzAeae2c6SesMEBY6ccY.roa
File: YcJY6vKZzAeae2c6SesMEBY6ccY.roa (raw, json)
Hash identifier: VgHutXRKVmzERLhec81XSAh6joh/KL8TqSy3pz6oXsw=
Subject key identifier: 61:C2:58:EA:F2:99:CC:07:9A:7B:67:3A:49:EB:0C:10:16:3A:71:C6
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018E3E0F2AC628551416C9B130FE64E3EDEF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YcJY6vKZzAeae2c6SesMEBY6ccY.roa
Signing time: Thu 14 Mar 2024 17:42:45 +0000
ROA not before: Thu 14 Mar 2024 17:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.155.255.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 10:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3e:0f:2a:c6:28:55:14:16:c9:b1:30:fe:64:e3:ed:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 14 17:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61c258eaf299cc079a7b673a49eb0c10163a71c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:ba:d3:65:4d:bc:6d:12:64:01:92:d1:45:
1b:24:24:4f:07:af:16:5d:45:c1:f1:25:22:7b:bd:
1a:8d:c2:96:2e:87:5f:31:97:25:cf:11:12:1a:72:
40:f8:2d:8d:51:c3:95:6a:5a:f4:23:8c:dd:2d:23:
4b:ed:e4:da:50:a0:73:7b:78:a3:9a:6f:52:9f:37:
c1:db:4b:d6:c2:c4:52:a8:dd:f5:b1:40:c8:4a:e7:
ce:42:f5:29:de:55:12:22:47:fb:6a:dd:67:64:ed:
59:85:e8:d0:1e:46:70:21:be:38:33:02:5b:db:bb:
bf:de:6b:d5:e5:11:00:0f:9e:35:28:1f:9f:c5:a0:
50:e3:56:49:e4:16:b5:f0:15:cd:a5:24:a4:9a:68:
25:1d:e5:fe:11:64:60:39:d9:01:b2:82:93:b3:01:
72:43:db:5e:3e:fd:3d:36:f7:88:e2:d7:87:f7:72:
15:1f:04:2a:55:81:29:41:59:51:cd:f5:9c:a7:04:
e1:94:62:4b:d4:10:1d:23:99:40:77:c7:ab:0d:a8:
ae:5b:e0:98:a7:0b:d2:79:72:a3:20:03:32:b6:8b:
fe:f7:3f:e1:ca:66:f1:79:22:77:e4:eb:ec:2f:53:
e7:d5:5a:82:d5:24:90:54:af:96:88:6d:8f:50:58:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C2:58:EA:F2:99:CC:07:9A:7B:67:3A:49:EB:0C:10:16:3A:71:C6
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YcJY6vKZzAeae2c6SesMEBY6ccY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.255.0/24
176.125.251.0/24
185.199.151.0/24
185.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:a5:4a:ec:59:53:8b:d6:ff:86:8c:25:2e:37:bf:f8:ba:3f:
24:56:65:53:37:f6:25:72:17:3c:7c:d9:8d:67:0e:37:ad:8e:
33:7d:cb:6c:e9:ba:fe:6c:db:9a:1a:87:89:6e:be:b2:54:a5:
5f:c3:8b:15:38:49:20:a7:bc:8e:1f:ea:bd:8b:42:95:eb:19:
f4:74:c4:e7:43:11:93:ee:0e:7c:88:fb:c5:99:13:d3:27:0a:
36:63:d8:cd:47:08:ea:2e:c7:b1:d6:d4:f2:4c:d0:cd:c7:00:
84:2b:6b:50:03:3f:66:0f:27:3e:2c:0b:a6:a7:af:34:78:24:
79:47:ae:0a:2c:ce:fd:6f:39:81:1b:a2:e1:40:2f:dc:8f:37:
02:51:ee:be:7e:6a:12:c4:5a:a5:00:3b:17:7c:d6:89:3b:52:
7f:c0:32:f6:39:ef:fa:33:7a:c9:95:5f:32:c9:a5:6c:75:e1:
fb:ea:97:b9:9e:3d:6b:a7:8f:a5:8a:b9:00:e6:5a:da:89:0a:
87:e4:74:30:78:96:4b:1c:a2:db:50:17:4c:da:c9:6e:34:1d:
b2:f6:a1:3f:9e:46:d2:c0:5f:81:3c:05:a5:36:42:d7:53:09:
09:47:57:ee:40:cb:63:b5:2f:10:b1:f5:70:01:11:c6:0e:9f:
5c:30:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org