Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fAViZYRw6RZHUdMvsjkAaS0Ei5c.roa
File: fAViZYRw6RZHUdMvsjkAaS0Ei5c.roa (raw, json)
Hash identifier: xX4iX2M10rsi/AlOVkGT24Xsg+iPhqONbOtPkRTRJBQ=
Subject key identifier: 7C:05:62:65:84:70:E9:16:47:51:D3:2F:B2:39:00:69:2D:04:8B:97
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019256B4E6825A94D54FA80B55759BCBDF70
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fAViZYRw6RZHUdMvsjkAaS0Ei5c.roa
Signing time: Fri 04 Oct 2024 08:45:48 +0000
ROA not before: Fri 04 Oct 2024 08:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 45.155.254.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
185.250.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 12:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:b4:e6:82:5a:94:d5:4f:a8:0b:55:75:9b:cb:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 4 08:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c0562658470e9164751d32fb23900692d048b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:43:9d:91:29:00:b8:1d:05:13:f6:c3:66:
26:2c:b6:c9:98:7b:c5:41:38:9f:3f:95:30:c3:c9:
fc:0e:8d:73:96:37:a0:1c:11:2a:32:b5:f3:5a:fe:
d1:0e:1d:af:a6:ee:37:db:f1:de:bb:07:b5:16:15:
96:03:88:5f:52:13:39:dd:22:71:a2:ba:77:88:5b:
98:b8:47:16:e8:f0:66:ab:ac:25:9f:62:a5:01:30:
6f:78:e5:96:5c:c2:d3:83:a3:6c:4e:72:9b:ff:7c:
6b:b3:14:cc:cb:bc:8b:33:20:f4:c3:27:b5:b6:bc:
5f:31:8d:1a:3d:a0:c1:ff:05:04:49:92:e3:3e:38:
75:c0:55:b8:70:52:dd:c8:26:4c:d1:5b:87:32:45:
0e:84:8a:46:2a:a9:62:b5:b2:85:3c:84:3e:4e:c2:
ea:13:54:d3:f1:1f:4a:f5:9d:9a:ed:78:55:12:4b:
29:52:9c:b7:09:af:0d:cc:07:89:4b:34:91:cc:16:
9a:e9:3b:fb:9f:f2:bc:3c:3e:00:cf:63:5a:90:e3:
1f:38:9f:fa:40:cf:98:38:7b:8e:60:f4:3e:22:a0:
dc:30:5d:69:49:9b:be:6d:6e:a6:8e:38:26:9b:db:
a8:b1:13:3d:ed:22:92:4c:b8:3f:35:90:4f:c8:76:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:05:62:65:84:70:E9:16:47:51:D3:2F:B2:39:00:69:2D:04:8B:97
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fAViZYRw6RZHUdMvsjkAaS0Ei5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
185.226.181.0/24
185.250.26.0/23
Signature Algorithm: sha256WithRSAEncryption
81:e2:d8:b8:24:21:b2:35:44:88:ec:6e:a0:e7:c9:11:e0:34:
95:f6:2f:96:13:c5:10:ef:28:92:4e:20:e5:1c:9d:fc:91:ab:
a5:f9:07:09:05:e0:d9:51:81:3b:e3:6f:b7:aa:3d:7f:5f:7d:
19:48:90:c2:89:8d:d6:fd:b5:bc:84:cd:06:0d:26:16:d2:f3:
17:29:0e:6f:53:af:33:27:4d:ed:b9:02:88:cf:e5:dd:ea:b6:
d0:af:59:2f:8f:fb:63:fa:4f:49:f4:40:11:f0:18:28:a9:76:
4d:5f:e9:79:e5:d7:45:ef:4e:87:68:27:3e:8f:60:25:f7:ca:
b3:f0:ea:a9:4c:a2:4e:4a:a6:f4:76:ec:43:d2:54:f8:a8:30:
e5:42:f1:0b:c1:cd:43:12:50:da:e3:90:4f:8c:2e:15:0b:4e:
01:6b:4b:2d:af:9e:82:01:0f:d2:4b:1b:44:22:d0:3a:72:ce:
06:04:0e:00:87:68:a8:53:5c:ec:b1:2f:b4:ef:a5:2e:2a:fe:
f9:0c:20:ab:06:e1:a8:ca:3d:82:58:82:e6:50:10:af:ad:6d:
d7:9c:ef:14:6f:5f:8e:da:b4:e4:72:53:3b:f5:c0:80:2a:1f:
6a:e5:50:41:0e:5c:53:f0:61:81:47:79:21:52:da:0c:3b:0a:
62:84:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 15:01:10 2024 by rpki-client on console-ams.rpki-client.org