Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/jA44tu7J50CcgkWbucucAOgN0cA.roa
File: jA44tu7J50CcgkWbucucAOgN0cA.roa (raw, json)
Hash identifier: Esz7nLTSKDfB3vE/M9ACkIeBtjLWS04Y3VXuXH6iMyI=
Subject key identifier: 8C:0E:38:B6:EE:C9:E7:40:9C:82:45:9B:B9:CB:9C:00:E8:0D:D1:C0
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0189AAD2C457B15008573E022560D5DD7FD8
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/jA44tu7J50CcgkWbucucAOgN0cA.roa
Signing time: Mon 31 Jul 2023 07:21:26 +0000
ROA not before: Mon 31 Jul 2023 07:21:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
185.199.212.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
185.250.25.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.225.171.0/24 maxlen: 24
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
79.98.244.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:d2:c4:57:b1:50:08:57:3e:02:25:60:d5:dd:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 31 07:21:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c0e38b6eec9e7409c82459bb9cb9c00e80dd1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:a2:2f:38:08:7a:f9:e1:59:ec:5c:82:82:
1b:1d:27:ce:5e:88:c7:24:ba:34:3b:de:6d:5c:69:
c7:2b:fc:b7:e6:ae:c8:65:00:bf:5a:0a:47:1d:0a:
95:b0:21:fd:17:3c:37:1d:20:23:d3:54:69:fd:c6:
eb:76:da:10:bb:74:a2:84:21:be:9d:a6:ad:3c:99:
b6:36:5b:d3:24:c7:0e:48:7b:a8:d1:dc:e6:e8:bf:
53:b0:e1:48:68:d7:95:ec:02:a9:5a:8b:b5:17:3a:
56:59:99:6e:d2:0d:8c:1f:92:00:35:9a:94:0a:45:
10:f6:8a:5e:f7:a7:80:25:b8:13:c2:af:14:98:8f:
1e:71:bd:de:06:04:7a:2a:b3:52:5f:f2:32:5a:4f:
09:56:7e:da:5f:b4:09:da:3f:50:99:b2:59:8d:16:
69:13:79:e4:3f:4c:86:92:21:22:09:08:1e:29:49:
d6:d4:78:03:d1:52:41:4f:22:82:0b:56:09:c1:1b:
e7:20:b1:cb:84:7f:a9:a1:6e:a3:58:29:b2:93:c3:
18:a2:e8:79:59:79:2b:00:a8:2b:36:ef:3b:72:26:
f0:98:43:ce:66:39:cb:76:d5:34:bc:a3:8e:39:f2:
b6:19:9e:3c:a0:7e:c8:71:9d:0f:07:61:a2:64:e3:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0E:38:B6:EE:C9:E7:40:9C:82:45:9B:B9:CB:9C:00:E8:0D:D1:C0
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/jA44tu7J50CcgkWbucucAOgN0cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.209.0/24
79.98.244.0/23
79.98.247.0/24
176.125.250.0/24
185.199.151.0/24
185.199.212.0/23
185.225.168.0/22
185.250.25.0-185.250.26.255
194.146.92.0/23
Signature Algorithm: sha256WithRSAEncryption
70:1a:5a:2c:7a:47:4c:a1:57:cb:d4:61:06:ec:64:21:93:06:
8e:b8:78:00:66:82:a0:f8:74:96:21:05:44:c0:d3:61:e1:c3:
c4:c2:da:fe:e1:4d:50:00:e2:06:aa:ee:29:55:56:7c:e5:d0:
8b:a7:e1:26:9e:66:18:87:0d:0e:d6:d5:46:48:72:65:2d:7d:
5b:70:84:f8:15:73:e0:6b:0a:45:e2:c4:73:ea:46:c4:40:e2:
0d:e7:46:73:7a:f7:de:52:26:d0:3e:63:92:c9:60:28:63:e7:
ce:3c:2b:a2:05:82:01:b1:fd:ac:9d:3f:e0:c7:bf:0d:0e:55:
ca:a1:62:45:bc:71:c8:ff:26:37:08:65:a1:f9:ca:4b:32:ac:
66:5d:6b:4d:5c:38:7f:84:6d:09:30:50:fb:45:c0:bd:de:07:
6f:d9:8f:4d:50:e7:7e:fb:f5:18:a7:02:16:0a:61:b5:67:1a:
9a:39:99:2b:3b:a8:95:31:2d:39:fc:69:9d:c1:4d:a6:3e:3f:
1e:b6:24:39:34:fc:fe:ae:9b:44:48:53:fc:2b:47:d9:19:1f:
fd:74:a6:c0:2b:d4:c6:7a:42:b1:ac:b1:91:16:0b:d5:b7:54:
2f:7d:d4:2b:d8:5b:fc:f9:87:b3:81:be:5b:2d:62:36:18:0c:
d4:3e:97:1a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYmq0sRXsVAIVz4CJWDV3X/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjMwNzMxMDcyMTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzBlMzhiNmVlYzllNzQwOWM4MjQ1OWJiOWNiOWMwMGU4MGRkMWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooaiLzgIevnhWexcgoIbHSfOXojH
JLo0O95tXGnHK/y35q7IZQC/WgpHHQqVsCH9Fzw3HSAj01Rp/cbrdtoQu3SihCG+
naatPJm2NlvTJMcOSHuo0dzm6L9TsOFIaNeV7AKpWou1FzpWWZlu0g2MH5IANZqU
CkUQ9ope96eAJbgTwq8UmI8ecb3eBgR6KrNSX/IyWk8JVn7aX7QJ2j9QmbJZjRZp
E3nkP0yGkiEiCQgeKUnW1HgD0VJBTyKCC1YJwRvnILHLhH+poW6jWCmyk8MYouh5
WXkrAKgrNu87cibwmEPOZjnLdtU0vKOOOfK2GZ48oH7IcZ0PB2GiZOMgSwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFIwOOLbuyedAnIJFm7nLnADoDdHAMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvakE0NHR1N0o1MENjZ2tXYnVjdWNBT2dOMGNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQALZv8AwQA
LZv/AwQALZ3RAwQBT2L0AwQAT2L3AwQAsH36AwQAuceXAwQBucfUAwQCueGoMAwD
BAC5+hkDBAC5+hoDBAHCklwwDQYJKoZIhvcNAQELBQADggEBAHAaWix6R0yhV8vU
YQbsZCGTBo64eABmgqD4dJYhBUTA02Hhw8TC2v7hTVAA4gaq7ilVVnzl0Iun4Sae
ZhiHDQ7W1UZIcmUtfVtwhPgVc+BrCkXixHPqRsRA4g3nRnN6995SJtA+Y5LJYChj
5848K6IFggGx/aydP+DHvw0OVcqhYkW8ccj/JjcIZaH5yksyrGZda01cOH+EbQkw
UPtFwL3eB2/Zj01Q53779RinAhYKYbVnGpo5mSs7qJUxLTn8aZ3BTaY+Px62JDk0
/P6um0RIU/wrR9kZH/10psAr1MZ6QrGssZEWC9W3VC991CvYW/z5h7OBvlstYjYY
DNQ+lxo=
-----END CERTIFICATE-----
Generated at Tue Aug 1 20:09:37 2023 by rpki-client on console-fra.rpki-client.org