Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/qv6DlabN72hQ_-HVO-kB8x7kPcI.roa
File: qv6DlabN72hQ_-HVO-kB8x7kPcI.roa (raw, json)
Hash identifier: kmewUdqbuEN8Wusf913RKSPnJ2twEZ7PY/RcaG3VMM8=
Subject key identifier: AA:FE:83:95:A6:CD:EF:68:50:FF:E1:D5:3B:E9:01:F3:1E:E4:3D:C2
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0191E520AA96E825E1FEF4F14F468E91C753
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/qv6DlabN72hQ_-HVO-kB8x7kPcI.roa
Signing time: Thu 12 Sep 2024 07:26:48 +0000
ROA not before: Thu 12 Sep 2024 07:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 45.133.38.0/24 maxlen: 24
45.143.96.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.169.181.0/24 maxlen: 24
185.169.183.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 11:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:20:aa:96:e8:25:e1:fe:f4:f1:4f:46:8e:91:c7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Sep 12 07:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aafe8395a6cdef6850ffe1d53be901f31ee43dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:7f:cf:26:34:f8:74:0f:88:f7:09:e7:fb:
bd:a7:8d:12:c8:a0:9c:29:f9:1b:5a:7b:44:47:e8:
79:b9:46:9c:04:86:cc:54:14:9b:77:90:37:80:c6:
74:f3:2d:6a:99:50:15:bd:79:93:b7:18:f1:cb:bb:
a8:da:82:04:9c:31:a8:c3:31:c4:fb:3f:44:28:ac:
5d:4d:4a:7d:7c:94:b0:ba:7d:a0:a4:bc:9a:c7:cc:
7c:0c:56:f4:74:59:26:5a:5b:d3:46:7b:bc:87:9b:
a2:64:83:d4:4b:88:4a:8c:46:a6:30:f9:bf:34:19:
a0:fc:5d:68:42:21:a1:1e:ce:ff:7d:b9:9d:45:fd:
0a:ac:f0:ea:f7:f3:d1:ef:f6:23:50:56:b4:fb:6b:
bb:31:65:eb:0d:24:c6:c1:d4:18:c2:2b:c4:d8:91:
70:df:5a:6a:6d:56:4e:77:c7:b1:3d:39:e1:62:cf:
48:7d:d9:ba:02:32:58:a6:c6:8b:a5:53:ca:f4:49:
e9:30:5c:3b:24:ec:76:ee:38:7b:89:33:a8:e5:d0:
4c:d1:7d:cb:53:1d:29:18:6b:e6:1b:41:b2:0e:ff:
df:c6:c9:0f:c6:6c:5e:23:59:57:95:b6:68:da:26:
a5:e4:b8:fa:16:e8:e1:b0:5f:e0:c8:5a:15:b8:19:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FE:83:95:A6:CD:EF:68:50:FF:E1:D5:3B:E9:01:F3:1E:E4:3D:C2
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/qv6DlabN72hQ_-HVO-kB8x7kPcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.38.0/24
45.143.96.0/24
185.148.243.0/24
185.169.181.0/24
185.169.183.0/24
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b8:a1:44:d8:b2:70:50:b2:1d:b3:df:d5:c1:1a:98:8d:56:
79:36:35:b8:37:31:39:62:c0:20:96:16:a7:6a:67:70:56:40:
37:4b:c2:07:95:0d:8f:12:fb:bf:b5:94:b3:c6:36:b4:13:6d:
16:75:0e:db:ae:23:f4:ea:a1:d7:7d:55:55:5a:a8:cc:81:b5:
d9:1f:7e:6e:d9:9c:3f:ad:43:c3:8e:62:f8:66:0d:13:9a:10:
c3:cd:6b:fa:8f:b0:e6:ac:1a:20:e3:e9:f1:43:4b:51:b3:d7:
e2:8d:26:0e:36:af:51:e8:bc:7b:b9:ed:e9:06:05:45:cf:67:
6d:d2:b5:3b:29:b4:4b:49:ee:fe:47:e9:c5:79:5f:b3:35:f4:
be:2e:2a:f2:d4:10:5c:9f:01:1f:13:af:52:e8:27:6d:2e:a1:
18:a7:5a:fe:a6:d2:f5:99:78:84:cb:74:2b:89:15:78:ac:11:
9a:6b:63:cf:48:d3:dc:73:25:2c:e2:7b:3e:f8:89:3b:70:bb:
19:6a:6c:b5:99:7c:df:9d:f6:4d:1e:38:e1:f8:7c:07:f2:89:
f7:0d:51:8c:6f:ac:4a:e9:7a:c8:10:16:af:d2:ea:46:ad:d4:
a3:3a:04:04:0e:fa:e4:8e:43:6f:75:b6:8f:c3:d8:be:ba:9d:
ee:1a:b1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 12:52:46 2024 by rpki-client on console-fra.rpki-client.org