Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qH5fxXhyBYEI77__gFDlPHbTGt8.roa
File: qH5fxXhyBYEI77__gFDlPHbTGt8.roa (raw, json)
Hash identifier: xOWyW4xhG69MXKqm6ypEJSQPvPF8y2mGbpz7IdXdTtA=
Subject key identifier: A8:7E:5F:C5:78:72:05:81:08:EF:BF:FF:80:50:E5:3C:76:D3:1A:DF
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018D68BCEA108911B73D55ABF875F6DA05BB
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qH5fxXhyBYEI77__gFDlPHbTGt8.roa
Signing time: Fri 02 Feb 2024 07:33:47 +0000
ROA not before: Fri 02 Feb 2024 07:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
45.157.211.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 21:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:bc:ea:10:89:11:b7:3d:55:ab:f8:75:f6:da:05:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Feb 2 07:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a87e5fc57872058108efbfff8050e53c76d31adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d2:b3:08:6f:50:42:07:03:56:d5:01:a4:a8:
19:04:66:3d:96:c3:5b:3e:96:1d:9a:1f:45:5f:4b:
70:31:69:41:b5:72:94:fb:80:d4:31:a5:92:c2:78:
a0:7f:65:0d:e9:37:c1:c1:f6:0d:18:b0:ee:f2:8e:
05:ad:a8:15:38:cf:56:63:f3:6e:10:22:d4:b3:ec:
3d:97:60:43:51:a0:a9:8e:80:65:e0:9f:19:eb:7b:
cb:73:39:7d:67:81:d1:e1:a9:84:9e:c7:0c:d5:31:
e9:f5:85:2c:3a:ca:67:f8:bc:fe:b7:ec:1b:72:49:
54:4a:83:15:af:1c:63:49:46:2d:79:15:3d:de:11:
20:60:89:e2:21:71:1e:c1:9c:5d:a9:06:c8:03:b9:
dd:ca:f7:4b:3d:17:d3:17:3d:78:e0:5a:5e:b2:43:
85:1f:8e:f5:d3:2c:b6:ee:21:50:00:f5:ee:a1:97:
b1:0a:e0:58:4d:52:42:a0:04:46:e2:58:63:94:ee:
ae:d8:0b:f6:27:af:02:78:cf:c3:cc:22:65:98:e1:
37:56:46:91:b2:e5:a1:22:f3:1e:2e:32:94:e7:ba:
36:ca:4f:75:1d:47:9f:20:c6:c4:06:6b:64:6f:5d:
4f:56:90:01:43:6e:3d:27:c7:3f:b2:58:9c:a8:f3:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7E:5F:C5:78:72:05:81:08:EF:BF:FF:80:50:E5:3C:76:D3:1A:DF
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qH5fxXhyBYEI77__gFDlPHbTGt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.255.0/24
45.157.209.0/24
45.157.211.0/24
79.98.247.0/24
185.199.151.0/24
185.199.213.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:26:27:10:a6:f7:40:32:da:3e:14:77:54:96:40:24:f4:72:
19:ab:ba:30:a7:39:d9:8b:ea:3a:77:5a:de:d7:84:e5:e0:8f:
d1:3c:e8:05:ce:e8:8a:0b:a4:ce:93:6b:a6:4d:17:d8:b2:29:
c0:46:e4:96:c3:69:8c:b9:39:2f:af:60:84:5b:35:52:55:32:
ed:8e:42:ae:03:d1:ab:b6:60:2a:04:ba:8f:f3:77:39:48:a8:
36:33:ff:62:92:b2:b6:e4:85:ed:d7:c9:2b:be:d3:e7:03:4e:
34:7d:00:7a:1b:84:82:7a:82:fb:13:a8:ac:d5:bd:67:2d:9d:
2f:a9:6d:a3:a2:b7:b7:7d:1f:55:d5:d9:ec:35:c8:cd:ba:74:
04:51:13:e6:2c:9e:14:bf:d9:1e:65:b3:e9:35:87:03:d7:6e:
77:db:22:41:b8:da:ca:ee:bc:a9:f4:ea:32:eb:32:2c:4b:65:
9b:9c:49:09:84:f5:76:8b:82:75:41:28:cc:5a:d0:cb:f7:39:
ca:44:d5:ac:cc:ec:de:8f:48:34:23:43:3b:94:4a:f5:8a:26:
7c:6f:d0:ff:cb:b2:49:cc:45:12:01:8c:5d:d0:d0:bf:67:b0:
79:95:90:f8:99:21:57:56:e0:af:23:5b:16:53:41:d4:ee:7d:
e5:f5:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org