Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/iSg7pkdoHqcNG_1uEfWi8XrDFug.roa
File: iSg7pkdoHqcNG_1uEfWi8XrDFug.roa (raw, json)
Hash identifier: wirdVGswFz3JwLbkY4C+odyb/7sJutBh5aUcSZyriIQ=
Subject key identifier: 89:28:3B:A6:47:68:1E:A7:0D:1B:FD:6E:11:F5:A2:F1:7A:C3:16:E8
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01938DE22D0741930F75E93DA7ADC2588EC4
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/iSg7pkdoHqcNG_1uEfWi8XrDFug.roa
Signing time: Tue 03 Dec 2024 18:57:10 +0000
ROA not before: Tue 03 Dec 2024 18:57:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 45.155.254.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:e2:2d:07:41:93:0f:75:e9:3d:a7:ad:c2:58:8e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Dec 3 18:57:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89283ba647681ea70d1bfd6e11f5a2f17ac316e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:7f:01:42:bf:5c:55:ac:ff:d3:f3:07:cd:
b0:d7:2c:6f:30:55:23:a4:9f:20:9c:08:bc:e7:9e:
6a:f5:87:97:f0:69:89:24:eb:f5:9b:15:4b:16:dc:
74:a7:68:17:21:72:10:37:f1:26:fb:5b:c6:38:03:
6a:10:de:b4:2e:8f:b6:ae:0a:e7:01:84:fb:85:4b:
5e:bb:b8:5a:5a:2e:d5:2d:88:38:e5:f1:d9:c8:30:
ba:66:c2:cb:0c:72:d2:07:97:8b:58:44:85:8f:66:
87:fe:e1:1f:d1:a2:a6:1b:8a:62:00:03:da:ab:8b:
c8:92:c9:31:85:e9:d9:46:30:59:b4:4f:ee:d8:3f:
e3:d0:22:21:32:5c:ea:54:d8:27:25:3b:df:09:3e:
47:83:f3:24:ba:75:8c:6b:ca:45:43:e6:10:6e:37:
0d:cd:cf:f2:8d:81:e6:d1:8f:b6:bf:c4:19:82:16:
18:55:5e:c4:ed:77:83:af:83:d3:1f:d8:a7:f5:2c:
36:ce:5d:f4:15:23:4f:00:f2:c5:90:70:22:8e:62:
fb:3b:aa:26:00:d9:46:43:de:e3:b4:8f:b2:e3:3f:
13:b5:b8:04:49:46:4a:89:33:74:06:bb:1f:f4:d9:
33:f8:61:cf:d2:b7:f1:96:34:b2:e5:c8:62:a0:87:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:28:3B:A6:47:68:1E:A7:0D:1B:FD:6E:11:F5:A2:F1:7A:C3:16:E8
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/iSg7pkdoHqcNG_1uEfWi8XrDFug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
185.226.181.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
20:63:a2:ec:c6:bf:c5:66:54:0b:db:02:d2:33:92:19:34:c6:
f2:13:5b:80:54:f6:5c:45:22:96:33:f9:97:fc:4d:27:5f:13:
c1:60:5b:ec:d5:a2:3c:97:30:be:b9:b0:e4:30:81:d1:08:ba:
6e:e5:38:a3:bc:80:91:db:94:80:56:d7:55:9e:92:14:9b:7b:
df:9b:e2:65:3a:fb:8d:be:eb:0a:52:27:23:90:2b:43:c9:42:
4d:c3:2e:b2:30:f3:b9:42:60:cb:74:2a:15:1b:bd:29:ca:06:
3a:72:b7:86:61:55:cb:00:b7:6f:47:b2:bc:a7:8f:15:89:f0:
b9:90:d8:5a:a2:55:e6:74:ba:a8:65:6b:46:a3:df:2f:cc:ce:
2f:47:65:d8:f6:f9:a9:2d:fa:31:5d:60:49:06:5e:3e:ae:15:
3c:e7:c8:90:b9:52:24:83:78:ec:a3:95:4e:c9:12:47:9a:8e:
0a:f6:3e:de:50:8d:81:d1:d8:39:b4:83:f9:7b:e9:a9:20:39:
8d:dd:24:8a:0e:05:a1:51:d8:1e:ae:c8:a2:59:a6:79:54:36:
e7:fa:cd:bf:3c:6c:77:e9:f1:b5:b2:b6:01:53:0f:64:d6:a7:
a9:0c:b5:61:18:7c:11:97:df:53:f8:32:e8:2e:ee:56:83:28:
ec:e4:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:34:55 2025 by rpki-client