Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ePeB4l2oJc-hpYZ9Px8FbpnChJ4.roa
File: ePeB4l2oJc-hpYZ9Px8FbpnChJ4.roa (raw, json)
Hash identifier: GgfVY8kxDd3cKPwEfxGZPR4QvAMemvKvPdkPW9Jby78=
Subject key identifier: 78:F7:81:E2:5D:A8:25:CF:A1:A5:86:7D:3F:1F:05:6E:99:C2:84:9E
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018851BAEC37EF221502BFE55AFB017C355C
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ePeB4l2oJc-hpYZ9Px8FbpnChJ4.roa
Signing time: Thu 25 May 2023 07:06:24 +0000
ROA not before: Thu 25 May 2023 07:06:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.171.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 May 2023 09:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:ba:ec:37:ef:22:15:02:bf:e5:5a:fb:01:7c:35:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 25 07:06:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78f781e25da825cfa1a5867d3f1f056e99c2849e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2d:2a:07:84:b9:3e:04:5c:0d:a6:8e:a1:13:
62:ac:36:be:e9:92:de:95:33:98:7c:5b:00:42:8b:
85:0b:75:72:c1:30:6d:07:11:4b:83:42:5a:d4:07:
12:7c:d0:72:d4:d9:9a:f9:5b:52:42:3c:d7:c8:e0:
60:5d:60:52:2a:68:32:32:3c:52:e8:fc:a9:d3:c9:
e7:3e:9c:2f:bd:40:86:9a:6e:34:02:f2:b0:3f:f7:
89:b7:05:94:12:3c:d0:ba:ab:4a:e3:0d:76:93:3b:
f6:cd:42:77:cc:11:ff:f3:77:ea:43:d2:73:e6:80:
b9:49:d0:c0:82:45:25:3b:4a:99:3b:a8:0e:8a:08:
dd:d7:f1:06:2e:2d:b2:b8:66:9d:e3:51:ba:c6:cb:
36:cb:49:f3:65:b7:22:66:97:b4:bd:88:46:e0:3f:
4a:a7:0e:ef:1e:1d:61:68:5f:4b:67:c0:72:03:51:
5e:a4:f9:52:db:d2:56:3e:9c:00:7b:55:98:c7:b1:
1e:3c:a3:c5:f3:bd:f5:ba:e1:4b:b7:eb:b9:d9:90:
14:51:00:e8:cb:7a:d0:96:50:46:9c:75:71:0e:a4:
0a:5e:63:db:8c:40:23:a7:48:93:44:e8:0b:b7:55:
a5:eb:cd:7e:4f:f7:43:7e:33:d1:dc:9c:c9:46:b8:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F7:81:E2:5D:A8:25:CF:A1:A5:86:7D:3F:1F:05:6E:99:C2:84:9E
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ePeB4l2oJc-hpYZ9Px8FbpnChJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
185.199.148.0/23
185.225.171.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:df:18:ba:bf:28:d8:7f:73:2c:8e:3f:92:f7:53:76:21:f1:
2e:b7:4f:dc:71:5b:c8:27:9a:5c:bf:43:d6:3a:d6:f5:6e:e1:
31:ee:64:24:7d:48:a3:c1:d9:60:05:11:9d:ae:1c:88:03:ad:
f6:2c:73:e9:0c:2c:42:2c:98:d5:cd:1b:1f:84:49:f2:20:3a:
16:47:94:01:d3:23:bf:9f:c3:27:e3:fe:aa:9a:2b:15:03:e6:
48:e7:e5:be:31:1a:d3:f9:3c:42:33:0c:e3:59:d9:64:d4:ae:
13:74:59:84:f6:39:f4:74:ea:9b:d4:5b:a3:9e:d0:df:ae:1c:
ec:bc:10:8d:1d:16:eb:dd:ac:17:a9:fa:cb:3a:dc:7f:44:2b:
1e:68:e2:1b:bd:8d:fc:3e:2f:7f:d1:90:fe:08:9f:81:8f:1c:
61:eb:1e:a6:0d:1a:29:12:27:21:c2:f4:2b:a8:a7:04:6f:ee:
f8:a9:6e:18:2e:10:e1:86:4f:3e:5c:95:01:9f:b8:b9:4d:c9:
eb:a3:a1:18:ef:2a:e2:f2:46:e8:9a:94:30:6f:41:26:64:d6:
aa:40:f1:89:01:31:5f:8c:f7:90:0b:fc:25:ac:28:c2:92:84:
40:f0:79:12:e2:41:1b:a8:33:8c:45:b6:c2:b9:82:50:b7:1d:
e1:eb:83:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org