Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZyUwqg3xCK9Y7UFsRjXestHDFu8.roa
File: ZyUwqg3xCK9Y7UFsRjXestHDFu8.roa (raw, json)
Hash identifier: eKyJrpCP+0l1TxJnf8B1FKZnPM0djRwZsjFIxB7ZD3w=
Subject key identifier: 67:25:30:AA:0D:F1:08:AF:58:ED:41:6C:46:35:DE:B2:D1:C3:16:EF
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018C62D2B91FD8E1A62DF05DB9D256A7B678
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZyUwqg3xCK9Y7UFsRjXestHDFu8.roa
Signing time: Wed 13 Dec 2023 10:57:06 +0000
ROA not before: Wed 13 Dec 2023 10:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
185.199.212.0/23 maxlen: 24
45.157.211.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
185.226.182.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
79.98.246.0/23 maxlen: 24
79.98.247.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 11:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:d2:b9:1f:d8:e1:a6:2d:f0:5d:b9:d2:56:a7:b6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Dec 13 10:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=672530aa0df108af58ed416c4635deb2d1c316ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:26:3d:7d:fc:d4:02:88:8c:57:c7:64:2d:d3:
fa:cc:ee:11:81:b8:4e:87:61:65:58:1f:e9:87:e1:
69:57:8a:0a:ee:2b:42:d8:5f:32:02:fa:ff:57:bf:
e8:67:96:fa:ac:d1:06:b5:9d:6c:1f:05:ca:bd:08:
b9:ab:8e:38:6a:32:a2:8c:1a:a0:b6:fb:5a:b8:5e:
32:a7:1f:db:0f:a7:fd:a0:11:d0:fd:f3:64:fe:b0:
73:81:3c:74:b9:7b:17:98:7f:42:7c:b8:6a:c0:16:
d4:ef:ec:46:f3:fd:6b:42:0b:0e:66:12:2f:b1:ba:
3e:f5:78:99:e4:a6:3a:d3:e5:66:af:9e:bd:22:ea:
75:49:08:da:10:0a:ac:6f:02:b0:78:fe:92:43:d1:
42:9d:9a:fd:d9:a4:28:d8:18:ed:4a:64:e3:7e:35:
3c:db:e7:8c:7d:6e:22:17:b5:b4:6c:04:0c:38:b4:
46:23:da:f2:d1:e8:f9:31:07:5f:76:d2:7b:76:b1:
8d:d1:37:be:bc:f9:89:dc:ef:33:54:fb:9c:40:d8:
77:c9:e9:b2:35:53:ce:ad:42:3f:9a:53:96:3d:df:
60:9f:88:4f:8f:56:87:7d:d3:a1:0b:3d:39:09:e8:
44:0b:e7:6d:99:72:a1:d2:aa:3e:c5:73:7e:f5:e0:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:25:30:AA:0D:F1:08:AF:58:ED:41:6C:46:35:DE:B2:D1:C3:16:EF
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZyUwqg3xCK9Y7UFsRjXestHDFu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.211.0/24
79.98.246.0/23
176.125.251.0/24
185.199.148.0/23
185.199.151.0/24
185.199.212.0/23
185.226.182.0/24
185.250.26.0/24
194.146.92.0/23
Signature Algorithm: sha256WithRSAEncryption
44:a7:94:df:2f:80:bc:bb:1c:d7:3f:05:06:28:f0:4b:c6:fe:
9d:2f:73:4e:04:e5:bb:ea:a8:04:d7:92:f6:86:96:95:3b:c8:
5c:4c:21:06:d2:cc:48:8c:b0:7a:53:3d:99:26:7e:43:2b:fc:
9e:07:3c:b8:31:89:c0:80:89:d2:a4:64:09:11:1e:d7:92:01:
f8:63:e1:16:44:59:09:40:a5:50:1e:a6:0b:a1:1e:f0:51:eb:
43:b7:0a:99:49:94:c2:13:76:df:1e:fa:d7:9d:f1:21:84:99:
89:d1:ea:2e:bd:72:d2:3f:a9:2f:0c:62:2e:0f:c4:55:e1:53:
c0:00:de:d0:14:5e:7a:b9:a0:df:f3:60:73:60:db:d1:85:20:
c3:bc:64:4b:4e:16:15:33:d3:78:62:0d:7f:e0:45:68:a0:b4:
30:3c:65:f5:56:95:38:c4:ef:4b:32:90:1b:84:7c:be:db:5e:
29:b0:f0:c2:3b:57:dd:9a:11:6b:fe:c7:0a:d5:65:a8:f6:9e:
11:19:84:33:c5:c6:bc:30:8d:14:f2:7d:9e:49:07:d5:5e:ec:
d0:85:f5:2c:0a:31:8a:78:ac:58:3f:9a:54:29:b9:ba:7b:39:
cd:4f:c0:46:e8:5c:1f:16:8e:4b:54:5e:02:81:18:4a:ed:0b:
0d:25:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org