Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/nWi-rHLTRe8ppeuXvZiNUFb3J6E.roa
File: nWi-rHLTRe8ppeuXvZiNUFb3J6E.roa (raw, json)
Hash identifier: j8ts+7JE7RKmRaQuHEWzfDao/BoeEup5miyOznEQHcg=
Subject key identifier: 9D:68:BE:AC:72:D3:45:EF:29:A5:EB:97:BD:98:8D:50:56:F7:27:A1
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0190E9E432B5F77E1FED186DB34F6DE132DD
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/nWi-rHLTRe8ppeuXvZiNUFb3J6E.roa
Signing time: Thu 25 Jul 2024 12:36:04 +0000
ROA not before: Thu 25 Jul 2024 12:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.157.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 15:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:e4:32:b5:f7:7e:1f:ed:18:6d:b3:4f:6d:e1:32:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 25 12:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d68beac72d345ef29a5eb97bd988d5056f727a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:3a:ae:3c:fe:74:15:a1:47:c7:ce:85:1f:
e6:82:48:8c:4d:42:d7:c3:f3:e6:34:36:d5:c2:ac:
68:f4:9c:6d:33:09:51:55:29:c4:a5:c6:d6:9e:7f:
f8:46:8f:14:c4:ba:25:83:f0:46:e7:b3:5f:5a:dd:
f4:5a:f1:d1:92:19:08:25:6e:c2:14:7e:fb:a4:5a:
36:50:97:c6:05:86:1e:46:52:ae:a6:b6:44:58:01:
3c:58:be:73:ea:46:67:e9:6b:90:37:51:33:67:7c:
5b:b1:d6:30:88:f7:69:97:99:17:d2:5c:78:ce:62:
80:71:7f:b0:07:ab:b2:0c:69:d3:19:73:30:8f:df:
2a:b7:df:16:24:da:64:24:31:ca:79:a9:64:52:ed:
06:88:d8:14:bb:54:e5:25:6e:1a:ec:93:c5:a6:a1:
1d:bd:e3:31:80:88:12:b4:a2:26:39:00:b0:99:18:
98:7f:cb:9e:d3:2b:5b:f3:43:5b:ec:78:a2:7e:d1:
16:48:7f:42:27:fa:42:ee:8f:d1:24:06:9b:9c:39:
dd:54:c9:8c:e1:3b:8d:2d:7a:36:ee:af:92:3f:fd:
61:23:b3:b4:98:79:9a:f8:0d:a4:81:76:4a:65:31:
a6:92:9a:67:6f:67:3c:46:be:42:f0:40:af:b1:17:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:BE:AC:72:D3:45:EF:29:A5:EB:97:BD:98:8D:50:56:F7:27:A1
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/nWi-rHLTRe8ppeuXvZiNUFb3J6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.208.0/24
Signature Algorithm: sha256WithRSAEncryption
90:4b:53:df:ce:d2:82:d5:a3:02:52:49:80:d1:d0:ed:e0:a9:
e4:78:86:57:a2:27:53:76:a5:93:06:0c:33:85:e1:05:6d:d3:
33:6f:39:af:0b:ce:7f:55:ee:6f:1d:c7:0a:59:fa:c7:80:60:
57:b0:6f:b4:df:c5:f4:7f:7f:ff:86:4c:fb:f5:e9:68:65:cf:
61:be:4d:67:5c:e7:21:a4:39:59:99:7e:65:7f:58:8b:85:f9:
c5:42:36:86:dc:38:2f:78:e9:fb:22:06:7b:24:c9:d4:e4:87:
94:99:7d:08:45:73:3b:90:1e:12:9a:0a:8e:46:36:24:97:d8:
33:99:ff:96:bb:94:93:9d:1f:ad:c7:10:4a:ca:81:7d:92:a7:
ab:40:0c:2f:a9:16:53:64:4f:98:3d:de:f2:77:5b:9e:ba:d8:
df:b7:66:41:ac:c2:3c:f4:36:5d:ab:a6:fd:32:76:a7:b0:1e:
4a:2c:16:5c:f6:61:be:e9:24:48:3d:1b:5e:3c:54:23:0c:97:
26:a8:64:9f:40:0b:0f:6f:7c:9f:5f:c4:0b:31:60:eb:cd:d7:
72:19:ab:e4:15:55:db:8d:aa:3d:9d:16:9e:3e:78:2e:13:6d:
33:8e:e0:4b:ae:8e:a6:c8:d4:d0:67:63:1f:0a:7c:f3:4f:2d:
e2:a4:21:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 19:09:14 2024 by rpki-client on console-ams.rpki-client.org