Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/uhndqL_9LslMK8w_36kji3KwPL8.roa
File: uhndqL_9LslMK8w_36kji3KwPL8.roa (raw, json)
Hash identifier: 9F+YW64/Y6o+h3JUND6uG0h4S4MdI6QmNMcCoXQhWnA=
Subject key identifier: BA:19:DD:A8:BF:FD:2E:C9:4C:2B:CC:3F:DF:A9:23:8B:72:B0:3C:BF
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188BE9102E275D1D0CA7325621FE09250F0
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/uhndqL_9LslMK8w_36kji3KwPL8.roa
Signing time: Thu 15 Jun 2023 10:19:14 +0000
ROA not before: Thu 15 Jun 2023 10:19:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
185.199.212.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
45.157.208.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:91:02:e2:75:d1:d0:ca:73:25:62:1f:e0:92:50:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 15 10:19:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba19dda8bffd2ec94c2bcc3fdfa9238b72b03cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:e8:d2:ff:85:b4:3a:08:36:4b:d4:53:7d:
2d:47:01:a0:01:e8:9f:a6:04:16:55:37:a9:da:fa:
9f:4c:79:c5:35:fd:89:64:ce:da:e9:ae:3f:8e:e0:
a1:cd:ae:e1:19:ff:f3:be:4f:4f:5f:60:8a:e4:43:
9a:09:32:60:98:10:02:f2:17:2c:24:ed:1a:4c:0b:
a3:72:ab:44:bb:43:ae:7a:7e:a6:46:4b:20:b9:3e:
05:d7:d0:37:0c:b1:85:c9:a7:13:0f:28:8b:6f:19:
03:65:b5:13:65:ea:10:a9:09:ac:40:19:b8:21:b0:
9a:f1:4b:55:44:b1:6d:c0:06:f8:bc:61:31:37:ad:
c0:ad:79:94:35:98:0a:5d:14:7b:22:bc:94:bd:01:
d1:cf:c5:f0:0e:11:05:24:4a:9f:c1:58:35:92:ba:
0b:b5:a2:d1:fb:39:b3:e1:76:3f:86:74:58:10:5b:
78:2b:2b:0a:dc:20:ee:35:90:62:1b:74:1f:e8:d1:
aa:82:ff:7e:31:db:de:ee:6c:6c:be:4d:e6:7e:6e:
c8:b7:97:de:3f:bc:ef:d7:23:70:f4:e1:82:7f:c5:
a9:98:44:54:7b:a2:28:73:a9:6b:30:a0:f2:00:96:
0a:92:1d:16:29:53:02:31:7f:60:0d:d3:e1:7a:83:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:DD:A8:BF:FD:2E:C9:4C:2B:CC:3F:DF:A9:23:8B:72:B0:3C:BF
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/uhndqL_9LslMK8w_36kji3KwPL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.255.0/24
45.157.208.0/24
79.98.247.0/24
185.199.212.0/24
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:87:73:ac:cb:90:98:38:71:08:74:99:a8:a4:c9:bd:a6:d4:
78:ba:bd:f9:9f:46:cd:1f:a9:53:ba:c2:48:de:a2:50:e5:ec:
dd:93:3a:72:8a:53:cd:88:5a:5b:7b:76:3d:55:f0:3e:09:7f:
a0:0d:4b:63:ed:7b:75:8c:b5:1f:06:41:41:be:96:64:56:e7:
8f:86:ba:c5:66:6d:c6:8e:73:d9:d5:ff:96:83:09:b5:1d:a2:
6c:24:3f:35:15:3f:c7:6f:7f:18:5e:55:e1:14:3c:c0:71:1e:
25:e8:55:9b:47:dd:02:76:57:af:b8:33:23:a9:04:8f:81:ef:
2c:32:d8:33:50:86:2b:41:25:bc:77:7a:d4:9e:44:06:7c:b4:
78:1f:b5:f1:85:2d:99:cf:b2:aa:82:a0:6d:7f:1b:f2:2c:62:
35:74:f2:43:59:b1:e5:c9:b3:5d:25:bf:d7:60:5f:f1:29:c6:
bd:62:65:4b:6c:12:36:04:16:4f:54:fb:35:bc:ca:01:3a:33:
ef:bd:fb:8b:cb:15:a7:b4:45:8d:80:01:46:c3:a5:6d:d9:2c:
81:26:6e:8c:fa:b4:b8:44:ac:3f:ab:d5:e1:45:3e:13:b4:1b:
da:9f:aa:77:c1:ee:a6:22:60:a9:de:44:b2:37:4c:f3:45:7d:
bb:99:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:12 2023 by rpki-client on console-ams.rpki-client.org