Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/sxVe8Dh_bOdhGnW6OlGquQaYpPc.roa
File: sxVe8Dh_bOdhGnW6OlGquQaYpPc.roa (raw, json)
Hash identifier: 4wK4Jgi9LXW/Bppm/1BvvWC5IkVE7xOxSwNZKX5biBw=
Subject key identifier: B3:15:5E:F0:38:7F:6C:E7:61:1A:75:BA:3A:51:AA:B9:06:98:A4:F7
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018E3E11E98C5FDA149C64FE56A8D56EB20D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/sxVe8Dh_bOdhGnW6OlGquQaYpPc.roa
Signing time: Thu 14 Mar 2024 17:45:45 +0000
ROA not before: Thu 14 Mar 2024 17:45:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.252.0/24 maxlen: 24
45.155.255.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
185.226.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3e:11:e9:8c:5f:da:14:9c:64:fe:56:a8:d5:6e:b2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 14 17:45:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3155ef0387f6ce7611a75ba3a51aab90698a4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:cd:87:e6:23:74:00:75:5d:90:2a:ff:94:
cb:f4:ec:04:f3:f4:52:16:36:3d:1e:4d:8c:d3:d1:
9f:8b:ee:d6:d1:02:b2:5e:03:31:b6:33:05:bb:25:
28:64:74:63:d7:73:a3:ea:41:2d:9e:7b:ad:27:91:
b4:56:18:fd:71:35:39:14:b1:a2:42:cb:78:a5:3e:
fd:f7:46:4e:f4:b8:8a:b8:18:eb:57:e9:a2:73:ec:
c2:08:53:06:6b:a4:e4:6c:81:40:e4:dc:db:68:34:
ca:af:ed:a0:06:31:cc:42:ac:d4:7b:61:ab:5d:0e:
54:fc:74:ca:5e:ee:d0:04:a8:b5:f1:c2:a1:57:ae:
33:2f:4e:76:0e:dc:09:af:d9:a2:9d:b5:7d:28:c2:
7f:a4:37:7d:56:79:90:25:50:eb:82:44:26:79:20:
98:69:e3:53:e5:cd:7f:43:c9:4b:09:98:21:3c:9c:
ca:bb:48:29:2c:17:0a:09:ac:f1:ee:98:98:bb:91:
c4:e3:9f:26:03:a8:10:ae:36:09:49:66:cc:4c:81:
5d:fa:c2:80:8b:f2:02:33:fe:c5:c1:ec:51:a0:35:
1f:65:0b:54:c6:20:b9:81:bf:79:82:0c:a5:81:f0:
9f:86:b7:8e:72:60:5e:d7:f0:29:8a:c2:30:ca:89:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:15:5E:F0:38:7F:6C:E7:61:1A:75:BA:3A:51:AA:B9:06:98:A4:F7
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/sxVe8Dh_bOdhGnW6OlGquQaYpPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
79.98.246.0/24
176.125.251.0/24
185.199.151.0/24
185.199.213.0/24
185.226.181.0-185.226.182.255
Signature Algorithm: sha256WithRSAEncryption
65:19:53:e9:76:33:94:f2:a9:80:09:13:03:c8:74:05:10:73:
71:a0:d7:e4:86:7a:a4:88:b1:3f:e1:ba:74:91:8c:8d:5a:ee:
67:e2:38:1d:1e:15:5d:5d:dd:1d:e7:af:4a:c9:95:ad:af:9f:
6d:57:49:cc:08:49:c7:c9:c6:7f:29:ff:51:75:36:c9:54:0f:
21:3a:26:33:69:36:9d:12:f2:27:16:44:b6:2e:16:ed:7c:f0:
4a:96:51:e3:4c:df:de:cb:0a:0f:17:65:c6:f9:bb:21:a3:a3:
b8:25:2b:a3:db:66:2f:ff:17:e3:26:e7:c2:c5:c1:7a:2f:21:
a2:cb:8d:01:42:73:f3:3e:89:78:d3:5a:28:43:4a:1e:07:99:
a9:24:c7:72:3e:4c:cb:34:07:6c:32:b0:de:3e:7a:1f:9b:9a:
31:72:70:33:87:66:16:e4:61:f3:e2:cb:34:b1:b9:e8:c0:8c:
b0:56:bb:d8:7b:3f:f2:40:46:74:15:82:f6:20:25:25:92:33:
d9:51:f5:dc:d3:b9:a8:b9:3c:49:e7:48:17:59:df:c2:02:8f:
ba:a5:0f:c2:8c:c0:02:55:b3:59:8f:a0:44:96:48:45:74:08:
42:ca:0b:a3:52:45:8c:2d:66:00:21:9e:0c:1a:f6:8e:ae:e6:
35:d5:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org