Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TaWPvHwJJ9xkW924KzC4RBhg__A.roa
File: TaWPvHwJJ9xkW924KzC4RBhg__A.roa (raw, json)
Hash identifier: X2vHny8yAae5ZeAkJGR0JmBhGM1zxJ/j2Y3m2OgA8ac=
Subject key identifier: 4D:A5:8F:BC:7C:09:27:DC:64:5B:DD:B8:2B:30:B8:44:18:60:FF:F0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0187BD5A243DCD80E9282101FE91C58FE21E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TaWPvHwJJ9xkW924KzC4RBhg__A.roa
Signing time: Wed 26 Apr 2023 11:36:53 +0000
ROA not before: Wed 26 Apr 2023 11:36:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35346
IP address blocks: 194.114.144.0/24 maxlen: 25
194.114.144.128/27 maxlen: 27
45.67.116.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
91.242.108.0/22 maxlen: 22
91.242.112.0/20 maxlen: 24
178.175.176.0/22 maxlen: 24
91.242.70.0/23 maxlen: 24
91.242.64.0/18 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/24 maxlen: 24
91.242.75.0/24 maxlen: 24
2a07:5540::/29 maxlen: 29
2a09:4440::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 10 Jun 2023 18:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:5a:24:3d:cd:80:e9:28:21:01:fe:91:c5:8f:e2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 26 11:36:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4da58fbc7c0927dc645bddb82b30b8441860fff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:28:fc:83:1c:6b:d0:1b:93:63:15:34:3e:
8e:4f:55:ef:d1:70:5b:25:38:b3:58:5c:24:b7:6e:
05:5f:ff:34:61:ec:f5:ef:bc:d3:f5:df:47:bb:02:
e5:7e:e1:b2:04:90:b8:df:a7:8d:b5:3a:d1:48:2d:
69:45:93:e3:d7:fc:06:f8:15:c8:b7:9e:48:8b:51:
e8:8d:88:0d:4f:3e:68:f3:d1:15:24:41:27:51:57:
d1:12:c8:c7:68:6c:e7:06:63:8a:21:a4:1b:57:76:
8c:8d:22:3d:09:42:bc:87:7e:f1:03:1d:2f:00:b6:
7e:b8:dd:43:ae:53:69:f3:62:5c:ef:05:65:bf:4b:
5e:a2:d3:93:31:e1:41:7a:a3:e3:66:08:1e:5e:dd:
37:8f:60:57:fa:36:e9:55:a4:c7:69:40:81:4e:cc:
e3:4b:a9:d2:db:35:15:70:87:74:5d:27:5f:62:53:
35:be:e0:d6:3d:34:1a:c2:2c:df:4f:59:fc:0a:f6:
00:03:26:00:01:df:4c:61:25:5d:10:63:17:5f:6a:
e9:02:ff:32:28:96:93:6e:73:9c:48:81:ac:b8:98:
dc:f6:d5:7d:c4:6d:24:08:27:c3:97:ec:cc:7c:a0:
2b:08:75:54:43:26:0b:85:d6:c8:64:b5:bc:f7:74:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:8F:BC:7C:09:27:DC:64:5B:DD:B8:2B:30:B8:44:18:60:FF:F0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TaWPvHwJJ9xkW924KzC4RBhg__A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.116.0/24
91.242.64.0/18
178.175.176.0/22
194.114.144.0/24
IPv6:
2a07:5540::/29
2a09:4440::/29
Signature Algorithm: sha256WithRSAEncryption
02:03:19:e0:9d:c2:87:33:a9:1b:a2:0b:ce:c7:a3:5a:cb:f9:
e5:fe:6c:94:cb:a4:f0:3a:3e:3d:7b:32:d2:60:28:19:fc:0d:
ae:7c:56:51:4f:1e:12:1c:93:7f:cf:3f:46:1b:f9:a8:42:a1:
a2:d8:3c:61:fc:62:0f:61:02:a6:aa:f4:96:aa:2a:e1:cd:91:
b6:bb:d2:e2:84:df:05:51:d0:09:95:f6:e5:8e:9f:c1:42:cb:
95:f8:1f:ca:87:3a:0c:11:fd:9a:f5:c1:88:b6:58:42:6c:fb:
41:aa:4e:25:92:7f:b1:12:a4:71:36:6d:94:a6:23:3e:c3:a4:
f9:1d:39:2e:03:01:14:72:ce:c2:be:2e:9e:57:dd:5d:ec:ef:
4f:30:6c:6b:12:7e:e7:60:c6:07:6e:3c:97:73:18:ed:04:65:
b3:8b:07:d7:00:46:26:4b:03:5c:19:78:45:c8:cc:da:c0:4f:
68:8e:fc:4a:f7:06:2c:82:03:43:5f:e4:67:39:66:5f:41:94:
2d:70:c5:69:cc:62:2c:d1:75:4b:a5:d3:17:25:a0:ae:e1:9a:
b0:1b:10:5a:39:39:8d:73:cc:9f:f3:51:94:ee:df:03:9a:ff:
d7:4b:bb:fe:b5:97:4c:b6:ac:6a:67:53:d4:ca:58:9b:d8:80:
57:33:1c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org