Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ojfANfHX_og5npG95-JvXUyDkxg.roa
File: ojfANfHX_og5npG95-JvXUyDkxg.roa (raw, json)
Hash identifier: HVrR7M5YtenKnWw8uBGR6SK8gdK3TLSC07aidgzicto=
Subject key identifier: A2:37:C0:35:F1:D7:FE:88:39:9E:91:BD:E7:E2:6F:5D:4C:83:93:18
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018B28A1D26FA646E445189308571DD0A277
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ojfANfHX_og5npG95-JvXUyDkxg.roa
Signing time: Fri 13 Oct 2023 10:42:55 +0000
ROA not before: Fri 13 Oct 2023 10:42:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
185.199.212.0/23 maxlen: 24
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
45.157.211.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
185.250.25.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
185.225.170.0/23 maxlen: 24
185.225.171.0/24 maxlen: 24
185.225.168.0/23 maxlen: 24
185.225.169.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
79.98.246.0/23 maxlen: 24
185.221.24.0/23 maxlen: 24
185.221.25.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:a1:d2:6f:a6:46:e4:45:18:93:08:57:1d:d0:a2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 13 10:42:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a237c035f1d7fe88399e91bde7e26f5d4c839318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:38:c0:94:ac:e0:ff:4d:37:d6:12:9c:af:c5:
95:df:d7:21:af:35:c2:9e:ec:f8:f5:35:6a:14:eb:
28:86:71:53:e5:8b:39:68:a2:a8:4a:18:5d:b5:1d:
8d:80:03:7a:cb:b7:aa:c0:f9:88:74:23:17:92:a3:
b3:23:45:82:0f:f9:cf:cc:b4:22:99:4f:77:92:d6:
98:e3:5d:4b:56:57:20:12:03:15:58:e0:d3:87:e4:
4d:fa:5f:6b:b7:92:b0:6f:14:f0:a7:cb:ef:ae:70:
34:a2:79:44:cf:37:0c:5a:78:a4:81:11:2a:74:29:
ac:04:6a:46:e3:cb:0b:2e:95:08:00:83:da:b4:81:
53:d6:e8:40:50:d7:06:bb:d5:bb:7c:84:dc:35:0e:
45:53:48:f7:21:b2:ed:26:88:31:6c:cb:25:e1:87:
e4:1e:27:df:03:08:f2:b1:35:7d:d0:f7:69:24:4e:
2c:65:f2:21:5e:70:58:55:5b:21:68:34:ce:93:4b:
05:26:a3:00:b6:87:31:08:86:0f:37:4c:b6:47:0b:
15:52:5a:e9:b1:70:65:15:cd:5d:84:21:ca:7c:14:
93:be:58:84:cf:9f:48:f5:55:5e:a8:04:46:49:07:
d2:ae:d2:dd:fb:bc:d0:70:3e:ba:2f:b8:b2:9b:d9:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:37:C0:35:F1:D7:FE:88:39:9E:91:BD:E7:E2:6F:5D:4C:83:93:18
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ojfANfHX_og5npG95-JvXUyDkxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.209.0/24
45.157.211.0/24
79.98.245.0-79.98.247.255
176.125.250.0/23
185.199.151.0/24
185.199.212.0/22
185.221.24.0/23
185.225.168.0/22
185.226.181.0/24
185.250.25.0-185.250.26.255
194.146.92.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:6d:b0:ed:2b:1a:3b:6f:e9:19:59:4b:f1:5f:f3:bf:de:f3:
a9:c2:23:ea:f4:f5:08:61:bd:54:a7:e7:f8:4c:82:7e:b0:e4:
41:b6:82:3e:48:cb:77:1d:f6:6b:2d:ef:a8:11:bf:73:d2:4b:
0a:bc:4c:b9:58:1f:a3:54:78:72:96:da:8c:c8:2e:b9:7f:73:
51:03:c9:55:8d:af:c5:e4:36:dd:33:e8:47:50:c2:cf:f9:0f:
65:b6:94:2f:bd:23:5e:1b:f7:f8:2c:0b:4e:68:17:88:ef:90:
c2:5b:ac:48:fa:5b:6e:d5:54:8d:e8:b5:ca:6b:13:62:83:16:
e6:a2:e3:1c:fb:9c:60:04:22:44:41:92:2c:c0:82:fc:6d:22:
63:a7:73:25:63:4f:ea:f0:a3:56:64:35:48:9d:9e:b2:9a:29:
e3:73:24:cc:35:22:a5:e2:b6:ba:72:2b:89:63:25:62:57:23:
05:19:d0:d4:fe:a9:e0:b9:a7:15:3a:2a:f5:7d:1e:9d:9d:02:
d7:4a:43:c6:63:56:69:28:aa:d9:88:75:f7:b7:cc:b1:a8:7e:
54:12:a8:e7:1b:51:da:e0:62:2f:16:ca:a6:81:cc:38:b6:fa:
97:29:95:b0:c2:58:8e:df:fd:dd:a5:69:f5:27:3e:c0:e9:41:
14:a0:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 09:56:54 2023 by rpki-client on console-fra.rpki-client.org