Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_ATU2WYX5fg05cJXvny6rqEZoGM.roa
File: _ATU2WYX5fg05cJXvny6rqEZoGM.roa (raw, json)
Hash identifier: O/rUgZWtuWcAOID6qh50ED8y/Eu5cUpPrjwo3H1C+xw=
Subject key identifier: FC:04:D4:D9:66:17:E5:F8:34:E5:C2:57:BE:7C:BA:AE:A1:19:A0:63
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018857776F126F8EE4453BD345EBD6CD66AA
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_ATU2WYX5fg05cJXvny6rqEZoGM.roa
Signing time: Fri 26 May 2023 09:50:24 +0000
ROA not before: Fri 26 May 2023 09:50:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 45.155.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 08:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:77:6f:12:6f:8e:e4:45:3b:d3:45:eb:d6:cd:66:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 26 09:50:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc04d4d96617e5f834e5c257be7cbaaea119a063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:b6:34:10:a2:17:e0:9d:a8:3e:21:fa:65:
4c:be:3e:33:dc:38:77:32:b7:5c:1d:98:a7:2d:23:
f2:57:8e:9d:45:40:0a:d0:f4:96:6e:8d:2f:3f:9c:
01:30:a4:d1:37:58:b6:dc:25:ef:6e:b1:de:bb:50:
1d:f1:c5:ae:17:c1:b4:4d:b8:56:e1:96:da:80:ee:
bb:2b:98:c9:9e:a8:b2:cc:2c:0d:2c:a7:c1:88:51:
eb:61:96:9e:df:a1:6e:3a:a4:91:ae:80:6e:48:ed:
07:f4:18:7f:42:ec:58:55:36:d3:c6:77:2c:49:bd:
d7:79:a8:ec:12:da:95:92:74:74:6d:bb:7d:62:9f:
b4:7a:54:e2:8c:84:43:db:9e:22:52:7c:75:7d:39:
29:ad:b3:67:a4:3d:c9:4c:83:ac:b4:01:98:73:02:
31:2e:cc:93:9e:c0:21:a6:02:3d:6a:f7:03:5a:3d:
bb:40:11:a4:87:c4:71:27:fb:07:46:1a:70:cf:a3:
36:6a:95:7d:6e:f8:35:ad:f4:3f:62:2f:9f:43:db:
ca:3a:2e:58:da:14:9f:9b:0c:fa:42:39:bd:28:70:
f7:87:c2:b2:ab:4d:e8:24:64:32:27:ae:a5:69:23:
f8:6c:e2:24:ae:eb:df:4a:a0:5c:bf:59:95:89:de:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:D4:D9:66:17:E5:F8:34:E5:C2:57:BE:7C:BA:AE:A1:19:A0:63
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_ATU2WYX5fg05cJXvny6rqEZoGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
Signature Algorithm: sha256WithRSAEncryption
95:bb:ba:f1:34:48:70:a8:dc:23:aa:c8:65:0e:7f:58:2c:c6:
0e:99:78:9f:d5:13:3b:90:00:f9:0a:88:7a:7f:98:31:47:bd:
2d:6d:a3:75:7e:51:96:15:48:1d:39:d9:52:a8:d5:40:70:39:
6f:b2:72:06:d7:b7:7f:24:87:35:79:a9:b7:16:17:ea:9a:8d:
37:c9:2d:f0:93:b7:28:29:4f:11:d7:91:10:96:9e:47:38:6c:
86:85:ca:81:52:4a:0c:0b:5a:24:de:3c:a4:b0:55:a3:7a:75:
57:07:d7:cb:53:db:2a:09:15:47:af:6b:00:fa:18:2d:e4:40:
13:c3:3d:83:4f:b8:42:c5:0f:6b:9b:e0:68:f3:6c:df:b9:02:
90:12:7b:3f:cc:00:76:5a:f7:5c:29:0a:85:86:fc:55:e6:00:
ca:13:57:c3:50:1f:f4:fd:20:b7:62:cf:32:20:f1:86:8e:ad:
10:db:c6:9c:8f:c3:76:16:1d:e3:29:8d:e0:3f:07:19:52:44:
4d:9b:2d:c2:2e:ac:0a:b4:24:4a:39:9c:e7:98:ba:af:ac:29:
a0:6e:a5:f6:75:0e:b1:11:5f:d2:2d:c3:02:ad:54:52:8d:98:
5b:07:c1:92:8b:25:30:80:e4:f2:db:c4:f3:ad:66:5d:fe:3c:
c0:df:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org