Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/TAFCGecJ0eQ8hhDQG9je93cOm6s.roa
File: TAFCGecJ0eQ8hhDQG9je93cOm6s.roa (raw, json)
Hash identifier: Uonbi8DzvMuP/cZbKo/n3qzsjfnGVgE2wNb9LHmbF9U=
Subject key identifier: 4C:01:42:19:E7:09:D1:E4:3C:86:10:D0:1B:D8:DE:F7:77:0E:9B:AB
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 018D02B9665128392AF27337AD43D8AE0B7A
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/TAFCGecJ0eQ8hhDQG9je93cOm6s.roa
Signing time: Sat 13 Jan 2024 12:08:41 +0000
ROA not before: Sat 13 Jan 2024 12:08:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60631
IP address blocks: 185.105.239.0/24 maxlen: 24
185.231.115.0/24 maxlen: 24
45.139.11.0/24 maxlen: 24
45.139.10.0/24 maxlen: 24
194.147.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 13:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:b9:66:51:28:39:2a:f2:73:37:ad:43:d8:ae:0b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 13 12:08:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c014219e709d1e43c8610d01bd8def7770e9bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:ca:09:3e:dc:10:5b:5c:e1:66:1d:40:f9:
7b:37:f0:3e:6e:11:c7:86:b1:ef:a5:6d:79:3e:c2:
43:39:37:e5:b6:f7:91:b9:59:c1:6a:67:99:e9:b6:
20:81:f1:c3:83:d9:ec:b9:2e:76:50:41:de:95:5c:
99:f1:07:b1:b5:81:59:d5:8e:cc:8c:fd:15:c3:ea:
8d:8e:8f:fa:2c:25:b7:e9:9e:77:3f:03:31:c6:08:
51:57:ee:f2:64:04:d2:97:22:b6:50:65:57:1b:9e:
70:46:9f:cb:1f:8b:22:a9:b2:e7:ba:8d:cf:8d:82:
c4:9f:10:88:0c:19:26:80:ed:30:1c:35:57:0a:f1:
66:6e:15:9e:5d:66:52:5a:98:91:b2:e5:45:0c:84:
99:7c:97:f1:18:e9:97:0f:36:56:05:a2:92:38:1e:
d8:d3:df:88:08:28:b7:37:27:a9:d9:30:12:6b:0b:
0c:e5:c2:57:3b:8b:0a:57:f5:aa:47:ed:77:6d:ea:
c3:29:db:28:45:f1:37:2e:a0:f0:f5:84:ab:d0:d2:
22:eb:48:67:c0:c0:b6:a5:a6:29:72:27:37:c9:3f:
aa:57:07:d7:07:58:cc:f5:c5:61:24:fe:51:36:f2:
57:fd:5d:bf:04:29:9c:73:13:37:fc:59:3f:97:93:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:01:42:19:E7:09:D1:E4:3C:86:10:D0:1B:D8:DE:F7:77:0E:9B:AB
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/TAFCGecJ0eQ8hhDQG9je93cOm6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.10.0/23
185.105.239.0/24
185.231.115.0/24
194.147.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:00:06:ea:91:82:e6:06:b8:ac:8c:32:e5:54:5d:4f:7c:74:
13:36:ed:3e:5e:8a:39:09:21:8f:a4:31:af:bc:6a:85:73:cf:
f7:5a:6d:c6:6f:87:42:9c:d5:8c:de:26:ea:c2:c8:ec:97:7e:
71:71:88:46:07:ec:fc:4a:04:6f:ab:72:64:18:d9:97:6d:b3:
de:6b:4f:b7:3e:59:59:59:66:95:39:d2:c1:ed:52:3b:97:62:
0d:c6:9b:b6:d8:d3:f8:14:3e:e9:6f:bb:ff:ce:5c:3c:55:2f:
87:a7:58:e5:92:59:65:f1:7c:ce:52:f5:2b:f4:95:1f:ee:7c:
b5:1a:74:36:4d:fa:a3:33:9e:d9:0c:5e:c7:a5:6b:3d:9d:e4:
59:78:eb:48:d9:77:55:9b:d0:9b:83:d2:53:7a:c0:86:58:75:
00:34:eb:fd:16:fb:76:47:2f:17:1f:93:50:9a:cc:f7:68:52:
ce:1e:e6:a1:69:4b:25:6c:a1:10:f4:37:f6:b3:d8:a9:14:38:
d1:dd:68:ab:eb:88:1c:b6:00:2e:8c:6d:bc:ad:c4:df:a0:d8:
6b:68:33:eb:95:2e:11:cb:c7:39:73:f2:e5:1d:b9:69:bb:ee:
33:79:50:ed:7f:81:43:7e:d2:86:6a:bd:5f:5f:86:3e:14:ca:
07:53:51:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 15:07:25 2024 by rpki-client on console-fra.rpki-client.org