Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4fN7hg7nBToPVrdHGrx2CSVmNEw.roa
File: 4fN7hg7nBToPVrdHGrx2CSVmNEw.roa (raw, json)
Hash identifier: AMprOQqc0tSK47xjCiF8GqO6yEGUkyFFrOyeFuU038Y=
Subject key identifier: E1:F3:7B:86:0E:E7:05:3A:0F:56:B7:47:1A:BC:76:09:25:66:34:4C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F0B75EC4F647EC07A6606DF7D20552310
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4fN7hg7nBToPVrdHGrx2CSVmNEw.roa
Signing time: Tue 23 Apr 2024 14:57:08 +0000
ROA not before: Tue 23 Apr 2024 14:57:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Apr 2024 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:75:ec:4f:64:7e:c0:7a:66:06:df:7d:20:55:23:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 23 14:57:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1f37b860ee7053a0f56b7471abc76092566344c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:8c:2a:c4:bb:b9:21:7b:4d:24:6f:f1:cc:
54:82:45:20:a1:18:40:5e:4c:f1:95:7a:7c:3f:5f:
57:f8:fb:5e:ab:c7:bd:37:60:f7:04:37:b5:11:92:
b5:b4:24:7d:b3:60:c2:7e:87:d3:8b:b0:dd:03:13:
d3:35:f3:08:1f:a7:c6:5c:e9:46:a3:0b:60:25:03:
8e:dd:b3:13:4d:f9:bb:1f:f4:a6:75:7f:06:07:d6:
61:ef:12:04:61:fc:f2:d2:d9:37:5e:f1:b8:82:51:
92:e7:4e:7b:f2:26:8d:dc:dc:d0:76:a0:f6:f5:1a:
c4:8a:35:9e:ba:cb:b4:64:07:3f:be:96:13:53:e1:
8a:dd:91:18:36:ca:da:61:75:13:20:97:5a:36:f3:
da:4b:c1:55:1a:6c:d4:d4:6d:4c:67:bf:6f:4c:31:
b3:51:40:f6:50:02:30:7a:e3:d1:1c:99:47:c6:6a:
4a:22:66:f0:06:39:c5:ee:53:fb:a4:ab:aa:a5:bd:
1b:16:41:e5:76:54:8c:d7:f3:86:1e:68:44:c1:be:
ae:82:a1:1c:91:5d:f2:6c:ca:7b:dd:6d:5f:b0:97:
61:23:ac:b1:b2:7c:3c:b5:ce:73:6f:79:15:54:c3:
83:be:5d:07:41:3b:b6:17:37:d8:fa:d1:8d:e9:82:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F3:7B:86:0E:E7:05:3A:0F:56:B7:47:1A:BC:76:09:25:66:34:4C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4fN7hg7nBToPVrdHGrx2CSVmNEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.198.234.0/24
188.208.103.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
26:38:b5:4f:ec:99:b6:ee:f6:4b:df:f9:03:60:ee:cb:f4:45:
75:67:87:ec:b0:e9:d3:bf:d6:27:ba:3e:75:b3:1e:ad:7b:2a:
55:e8:0d:22:f4:33:7e:dc:81:d2:27:b3:d4:3c:d9:b7:c6:79:
89:af:00:4e:30:ea:c2:56:3e:af:37:c8:c7:bc:9d:e2:a3:45:
17:96:b5:75:a2:b4:ae:a3:63:4b:e1:6b:90:bb:4b:43:21:fe:
2f:e9:48:b1:e1:ea:97:1b:74:58:8e:cd:77:0b:16:70:a6:b5:
c2:01:9c:29:20:84:ca:4c:26:60:2c:a2:d2:37:71:1b:52:0a:
26:c7:30:a0:f0:cc:28:9a:fb:d1:dc:b1:a6:cf:fd:fe:7d:a2:
b7:eb:82:07:1c:54:de:27:a1:fd:48:0c:a7:6a:58:e3:80:84:
b2:25:53:0e:c6:cb:2e:4f:79:8d:be:a1:04:94:3e:aa:dd:27:
51:ef:e2:8f:aa:7d:31:5e:ed:a0:f4:ca:ab:49:ea:d5:05:40:
ca:0d:64:fe:19:2e:58:29:34:fd:89:f9:05:5e:d2:f1:a1:8c:
d9:34:21:8d:d7:51:ef:9b:38:f9:f0:2f:e4:00:25:dc:64:5f:
80:31:3a:f8:47:a8:61:20:a1:56:be:ed:48:65:f1:76:2e:bb:
07:21:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 19:18:35 2024 by rpki-client on console-ams.rpki-client.org