Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/swGVmmvT-nPG6ltZhwTT8QI8w-4.roa
File: swGVmmvT-nPG6ltZhwTT8QI8w-4.roa (raw, json)
Hash identifier: +AJzaCZxS+RjRUmEweABnThRTQMTkvTMVWDdrk7ukMI=
Subject key identifier: B3:01:95:9A:6B:D3:FA:73:C6:EA:5B:59:87:04:D3:F1:02:3C:C3:EE
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018E61F540F8627ABC5CB21F9C86CCF7FAB8
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/swGVmmvT-nPG6ltZhwTT8QI8w-4.roa
Signing time: Thu 21 Mar 2024 17:00:46 +0000
ROA not before: Thu 21 Mar 2024 17:00:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.252.0/24 maxlen: 24
45.155.255.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 23:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:f5:40:f8:62:7a:bc:5c:b2:1f:9c:86:cc:f7:fa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 21 17:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b301959a6bd3fa73c6ea5b598704d3f1023cc3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:87:6a:f6:ce:8b:6b:49:01:3d:d2:49:ae:
1d:5d:32:95:12:e8:a7:94:c5:ff:4c:c2:e9:2f:51:
5e:17:f2:51:ce:f7:cb:01:57:28:96:07:78:40:49:
4b:58:cf:9d:d7:6b:d7:a0:2a:22:11:df:ec:e1:9a:
72:cf:96:26:7a:dc:88:2d:6a:ee:3a:18:44:49:a5:
99:c0:9f:22:4e:0b:76:fd:e9:4b:0e:da:b9:02:3f:
64:15:f1:ff:98:3d:2e:d3:36:6f:4d:6b:f7:6c:a5:
e9:56:9a:cb:c7:28:c9:43:9d:a5:3e:61:61:65:f1:
39:04:df:70:fc:24:50:5b:47:e9:ef:b1:da:8f:fe:
06:dd:09:10:55:18:36:a5:e3:48:a6:32:c5:73:5a:
5c:0c:6f:b4:70:a2:ec:5c:4e:7e:55:00:a9:cb:4a:
4b:d1:5b:54:00:44:5e:ee:c8:e9:51:40:02:8d:34:
fa:29:ca:c8:bc:29:64:4d:6c:fd:61:8d:2d:7f:b0:
43:d7:36:97:c8:30:08:8f:35:04:1a:0d:31:89:14:
33:ca:7b:c7:fb:88:2a:6d:1d:3b:35:d1:f9:d4:09:
97:0e:3c:12:0f:8d:89:3c:f7:1a:dd:8a:96:ff:14:
7b:01:96:f4:49:d0:5a:b1:25:7b:5b:1c:c9:8b:c9:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:95:9A:6B:D3:FA:73:C6:EA:5B:59:87:04:D3:F1:02:3C:C3:EE
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/swGVmmvT-nPG6ltZhwTT8QI8w-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
79.98.246.0/24
176.125.251.0/24
185.199.151.0/24
185.199.213.0/24
185.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
63:86:2d:e6:3c:ec:62:69:cf:91:f2:27:b3:00:9b:85:c4:2b:
24:cc:7f:08:96:09:a8:53:81:b9:54:87:ec:16:7f:ca:96:a4:
a8:64:1b:9c:3b:71:5e:ec:25:08:83:dc:c6:a6:de:65:66:b0:
87:45:b9:aa:f0:93:00:ca:6e:18:e3:3d:07:67:6b:2b:7e:87:
d3:a7:d2:d7:3e:cf:bd:3f:e3:92:84:a4:ea:3c:90:08:38:db:
5f:9d:5b:62:53:fd:3d:cb:89:75:d2:e3:1c:c3:f7:4d:1f:a6:
37:35:18:f9:50:7e:0d:2d:44:c0:8f:e1:96:72:c2:e1:ad:e7:
b3:9b:c4:f4:a0:44:35:78:63:93:c3:17:ab:1a:bb:f0:1f:01:
8d:84:1b:64:12:e0:2f:3c:35:2a:55:bd:5b:6d:93:65:46:80:
0f:c5:92:8b:23:43:18:68:99:8e:51:18:39:e4:ae:ad:f0:9c:
cd:73:bd:3a:db:76:7a:c1:eb:79:03:37:f0:b1:dc:f6:45:c3:
dd:6d:8a:64:fe:a6:fb:57:af:7e:80:c3:0c:b7:d1:af:34:e8:
10:14:8d:69:8b:b5:83:da:bd:9b:a1:e1:d3:81:3c:6b:d2:11:
d6:5c:b1:38:1f:fc:d4:d7:7a:f2:62:02:4c:dd:ee:a8:c0:90:
78:a0:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:36 2024 by rpki-client on console-ams.rpki-client.org