Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/zmoD0z7E8RMlHPwEdbOgEwUUCcc.roa
File: zmoD0z7E8RMlHPwEdbOgEwUUCcc.roa (raw, json)
Hash identifier: Rqvr/MNFMTkkA0DiJKqC2CiynjDVKZ4SXukMPbTRntE=
Subject key identifier: CE:6A:03:D3:3E:C4:F1:13:25:1C:FC:04:75:B3:A0:13:05:14:09:C7
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018CF3665B6C759E11E060DE43E7317A2F7C
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/zmoD0z7E8RMlHPwEdbOgEwUUCcc.roa
Signing time: Wed 10 Jan 2024 12:43:40 +0000
ROA not before: Wed 10 Jan 2024 12:43:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 12:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:66:5b:6c:75:9e:11:e0:60:de:43:e7:31:7a:2f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 10 12:43:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce6a03d33ec4f113251cfc0475b3a013051409c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:30:1b:72:e0:d7:6c:aa:82:7a:6c:88:1b:
7e:4f:ed:fe:c5:4e:1b:0c:87:70:b0:93:08:8e:c5:
8c:c0:1b:3e:26:dd:bc:f2:36:a7:3e:b9:7d:4f:ad:
ba:d9:07:10:60:14:a8:0c:3c:b7:51:e2:52:bd:e9:
5b:d1:69:45:0d:48:29:10:76:1c:79:a2:47:e9:54:
c4:3a:40:74:8c:66:42:38:85:3d:1d:74:c0:22:3b:
cf:a9:ac:3d:e3:ba:42:44:7c:77:69:09:b4:e1:9c:
69:da:20:84:70:b9:04:b6:f4:da:95:43:db:9f:50:
47:63:08:4a:5a:6c:0c:12:70:c1:56:b6:2d:5a:44:
44:87:f5:00:32:20:ea:97:e8:71:7c:e7:61:17:fb:
89:1a:da:b3:74:b1:ba:40:de:0b:b9:13:22:7c:5e:
fb:06:a1:a4:a3:76:12:ee:cd:0a:b0:12:6b:6c:85:
ca:cb:fd:bc:f9:1a:11:d1:5c:74:ff:fa:ca:ab:10:
cf:c2:2c:73:e9:6d:e9:0a:de:f1:2f:44:64:12:e7:
b8:a6:13:eb:49:8c:fc:84:f2:1f:6c:44:21:df:13:
0a:fd:54:f9:78:69:fd:de:31:a6:4a:98:c7:22:df:
88:37:f4:0a:55:2a:57:06:25:83:3d:61:20:24:d1:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6A:03:D3:3E:C4:F1:13:25:1C:FC:04:75:B3:A0:13:05:14:09:C7
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/zmoD0z7E8RMlHPwEdbOgEwUUCcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.155.255.0/24
45.157.209.0/24
185.199.151.0/24
185.199.213.0/24
185.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9c:84:42:cc:ca:7f:f2:be:bf:75:a7:eb:0e:5a:c0:26:a6:
17:ad:4f:b5:f7:9f:1e:29:db:5c:bd:d0:f5:05:c8:4d:e5:e3:
7a:54:ce:4a:17:9a:03:de:04:2f:23:87:4a:48:6f:47:cf:b8:
f3:dc:71:95:c6:18:9e:09:ed:e6:54:e1:af:b5:44:88:0f:88:
79:fa:56:f7:d9:f2:65:f8:46:a9:da:fa:dd:0a:df:ba:59:74:
ef:71:67:99:ac:9e:0e:1d:31:43:16:c5:07:32:2f:a2:22:16:
37:b7:53:a5:5a:75:e3:04:63:00:2d:38:25:42:bb:15:31:a4:
06:61:c2:93:64:cf:09:37:21:43:65:57:38:1b:be:57:da:28:
a2:51:a1:ad:0c:0c:77:6e:cf:5d:5d:2b:05:e0:6b:41:20:58:
1c:4a:3e:9d:ca:81:88:a9:36:f1:97:d6:cb:2f:fa:73:b8:1d:
8e:33:eb:47:1e:8d:e8:22:d3:ba:15:7e:66:c0:aa:9d:d9:3d:
df:39:80:d3:bb:4e:29:0b:04:1a:52:3d:5b:e7:6c:72:39:fb:
ff:5d:32:41:3b:9a:e4:1f:ee:8c:17:38:52:7e:e8:21:88:23:
ed:27:9c:dc:39:91:97:79:13:7b:63:14:87:43:16:68:99:a8:
b4:ee:f1:90
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzzZltsdZ4R4GDeQ+cxei98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjQwMTEwMTI0MzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTZhMDNkMzNlYzRmMTEzMjUxY2ZjMDQ3NWIzYTAxMzA1MTQwOWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyewwG3Lg12yqgnpsiBt+T+3+xU4b
DIdwsJMIjsWMwBs+Jt288janPrl9T6262QcQYBSoDDy3UeJSvelb0WlFDUgpEHYc
eaJH6VTEOkB0jGZCOIU9HXTAIjvPqaw947pCRHx3aQm04Zxp2iCEcLkEtvTalUPb
n1BHYwhKWmwMEnDBVrYtWkREh/UAMiDql+hxfOdhF/uJGtqzdLG6QN4LuRMifF77
BqGko3YS7s0KsBJrbIXKy/28+RoR0Vx0//rKqxDPwixz6W3pCt7xL0RkEue4phPr
SYz8hPIfbEQh3xMK/VT5eGn93jGmSpjHIt+IN/QKVSpXBiWDPWEgJNFRlQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFM5qA9M+xPETJRz8BHWzoBMFFAnHMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvem1vRDB6N0U4Uk1sSFB3RWRiT2dFd1VVQ2NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALZv8AwQA
LZv/AwQALZ3RAwQAuceXAwQAucfVAwQAueK1MA0GCSqGSIb3DQEBCwUAA4IBAQBc
nIRCzMp/8r6/dafrDlrAJqYXrU+1958eKdtcvdD1BchN5eN6VM5KF5oD3gQvI4dK
SG9Hz7jz3HGVxhieCe3mVOGvtUSID4h5+lb32fJl+Eap2vrdCt+6WXTvcWeZrJ4O
HTFDFsUHMi+iIhY3t1OlWnXjBGMALTglQrsVMaQGYcKTZM8JNyFDZVc4G75X2iii
UaGtDAx3bs9dXSsF4GtBIFgcSj6dyoGIqTbxl9bLL/pzuB2OM+tHHo3oItO6FX5m
wKqd2T3fOYDTu04pCwQaUj1b52xyOfv/XTJBO5rkH+6MFzhSfughiCPtJ5zcOZGX
eRN7YxSHQxZomai07vGQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org