Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/3tfLNZGeKAsvufktTOccBYxGNpk.roa
File: 3tfLNZGeKAsvufktTOccBYxGNpk.roa (raw, json)
Hash identifier: 6vKilG0/04TkiYd28B1xNq4VGzXthuoLMGeJh/BlPWY=
Subject key identifier: DE:D7:CB:35:91:9E:28:0B:2F:B9:F9:2D:4C:E7:1C:05:8C:46:36:99
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 0190409EEAD54AB531C4331CC1293FC3B8F8
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/3tfLNZGeKAsvufktTOccBYxGNpk.roa
Signing time: Sat 22 Jun 2024 15:44:34 +0000
ROA not before: Sat 22 Jun 2024 15:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137427
IP address blocks: 2.59.153.0/24 maxlen: 24
2.59.154.0/24 maxlen: 24
45.91.225.0/24 maxlen: 24
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
185.202.101.0/24 maxlen: 24
193.239.151.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 14:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:9e:ea:d5:4a:b5:31:c4:33:1c:c1:29:3f:c3:b8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jun 22 15:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ded7cb35919e280b2fb9f92d4ce71c058c463699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:c3:90:bc:a4:37:73:b1:0c:aa:6a:12:72:
8a:78:91:8c:75:ad:04:a3:0e:b6:40:ed:44:29:77:
2d:72:d3:d4:77:da:87:ab:ac:3f:92:15:e0:b4:7a:
c2:dc:4f:8c:19:f5:5d:38:a8:06:a7:af:5e:73:f7:
63:4a:6c:e4:3b:2f:99:d0:76:d9:95:97:7b:32:04:
e9:ca:2c:0a:80:80:eb:39:f7:3f:25:b8:a4:b8:e5:
4c:4e:aa:49:6c:89:2f:07:3c:3b:7d:b3:2a:5e:7f:
d1:aa:78:d6:57:89:18:00:45:b7:ba:c1:9b:0b:88:
05:d8:40:40:12:07:eb:8e:42:1c:71:2c:ca:b2:a1:
cd:2d:5a:f8:c5:24:40:61:fe:0f:89:c7:c6:54:87:
32:bc:af:17:41:76:db:2b:07:42:3e:29:ad:93:09:
a1:20:52:bd:b4:68:50:54:bd:38:cb:54:cf:65:a8:
d0:f9:21:49:ac:0b:b1:e2:77:60:cd:c5:88:06:a5:
af:84:d7:d3:f2:ec:aa:00:09:4f:b9:89:ec:ee:76:
3a:a7:76:4d:fe:85:13:39:5c:04:3b:ec:7b:d3:33:
09:0b:85:a4:51:db:21:16:19:6c:66:34:9c:09:f1:
ee:d9:32:90:78:7b:d8:6c:77:00:91:e2:cd:05:60:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D7:CB:35:91:9E:28:0B:2F:B9:F9:2D:4C:E7:1C:05:8C:46:36:99
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/3tfLNZGeKAsvufktTOccBYxGNpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.153.0-2.59.154.255
45.91.225.0/24
91.204.224.0/22
185.202.101.0/24
193.239.151.0/24
194.126.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:58:e5:68:d0:bd:7f:96:38:5a:3a:a5:66:f1:07:52:97:5d:
52:84:9b:45:8e:bf:73:47:ff:8a:8a:5f:6e:ee:80:fb:08:4e:
2f:e3:6a:11:dc:2d:a5:d0:d6:b9:fe:3f:fc:ed:bf:bd:34:39:
fa:c6:80:7b:3a:86:35:31:29:03:2e:14:94:ad:11:4b:fe:fd:
f2:e8:20:32:03:72:f7:11:34:ab:2b:e9:25:4b:05:e3:27:66:
e5:fa:39:7b:7e:07:ba:61:c4:d4:5a:cd:01:c9:e2:f7:3f:7c:
2a:5e:e5:6f:54:ae:b3:e1:21:a3:e3:c6:d1:0f:ae:be:fa:e2:
1f:a0:b4:37:d8:47:39:f4:a7:e7:ca:70:70:e6:3b:f7:9c:28:
b4:98:c5:f2:0c:26:48:1e:86:4c:a6:d7:85:b8:bd:58:b7:b5:
12:d4:44:e9:03:33:16:9b:ee:ba:99:5f:7c:d1:9a:43:a4:fb:
18:f2:70:2b:55:55:16:bb:ee:52:e1:64:f4:f9:f4:e5:9b:28:
6a:c9:76:c6:0b:e6:90:49:9e:3f:b7:3d:29:f4:d0:6e:e6:65:
2e:0e:cc:ca:08:88:ea:48:1d:ab:ec:bc:96:51:28:f8:6f:be:
aa:81:65:8d:de:33:6e:44:84:3c:73:ab:76:b8:1a:7f:3a:98:
d8:d4:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:51 2024 by rpki-client on console-ams.rpki-client.org