Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pM-KZj0PU7XX_gd7i_Wj6WFBCeI.roa
File: pM-KZj0PU7XX_gd7i_Wj6WFBCeI.roa (raw, json)
Hash identifier: XEVBFgK6eWMzlSoGojNTE9yPTdL/zESaI46/8VwqGsg=
Subject key identifier: A4:CF:8A:66:3D:0F:53:B5:D7:FE:07:7B:8B:F5:A3:E9:61:41:09:E2
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018EC1A977443FDE5C7E879421D529C8499B
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pM-KZj0PU7XX_gd7i_Wj6WFBCeI.roa
Signing time: Tue 09 Apr 2024 07:01:32 +0000
ROA not before: Tue 09 Apr 2024 07:01:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.65.113.0/24 maxlen: 24
188.209.132.0/22 maxlen: 24
188.209.133.0/24 maxlen: 24
194.15.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 15:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:a9:77:44:3f:de:5c:7e:87:94:21:d5:29:c8:49:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Apr 9 07:01:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4cf8a663d0f53b5d7fe077b8bf5a3e9614109e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3e:4a:d0:0b:7d:fa:92:16:7f:3b:fa:cb:38:
57:68:c9:b1:a3:36:27:1f:df:28:a4:8a:40:9a:01:
b3:23:79:e4:04:c7:bb:1e:45:95:07:28:1a:aa:ec:
1c:d0:31:c7:fc:bd:13:21:1a:fc:89:56:1f:94:78:
6b:be:80:15:2d:fe:ed:35:90:f4:08:37:eb:4b:f9:
cc:68:23:5e:73:3c:cc:f2:4d:65:03:59:92:8c:62:
87:45:03:46:93:96:37:33:ff:d1:6b:8c:e5:02:eb:
04:43:3b:41:32:bc:07:31:7e:74:27:7e:47:2f:fd:
29:37:8f:e1:2f:6e:1b:45:dc:f9:b6:68:61:97:27:
53:ae:36:74:55:9a:74:66:91:49:4d:6d:49:07:a2:
1b:b9:43:5a:43:2c:e9:be:55:98:60:68:02:e0:23:
2e:2b:13:d4:9e:62:f3:05:9e:29:0d:0d:40:66:97:
45:2c:a6:34:b1:08:52:48:4a:51:06:0b:16:dd:96:
1b:0d:b0:b8:6b:50:5b:a9:08:b3:6f:ab:7c:da:c3:
84:5a:37:de:db:50:7b:e9:6c:bc:f4:7e:d7:81:bb:
40:a2:31:a9:f8:c5:2a:ed:1c:e5:d9:ff:27:cd:24:
2c:a8:f9:42:e3:cc:f0:d9:57:08:45:f0:1e:14:47:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CF:8A:66:3D:0F:53:B5:D7:FE:07:7B:8B:F5:A3:E9:61:41:09:E2
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pM-KZj0PU7XX_gd7i_Wj6WFBCeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
188.209.132.0/22
194.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d2:b4:88:55:77:21:b0:ce:55:53:53:b3:6f:31:be:09:b1:
ba:61:c0:06:68:b7:27:dd:dd:a5:1c:b3:43:93:a0:53:1d:37:
1e:a9:dc:b7:c6:f4:e4:63:b2:da:81:7e:f3:59:96:69:69:1a:
55:4d:41:52:a8:86:79:e2:f2:93:e0:3f:02:2e:03:0f:17:70:
8a:be:8b:a7:37:48:07:1d:4f:4a:b7:ae:2a:54:5d:1b:de:c2:
4e:ca:d4:bc:37:6d:76:21:bd:1c:cd:a8:32:4f:26:d7:8a:c2:
c8:0c:c2:cd:95:0b:3c:da:60:88:1c:e1:4a:57:28:da:a3:5e:
57:cb:b0:67:25:90:c2:9d:18:04:78:5c:99:22:b1:94:24:14:
a8:1e:76:6e:19:75:77:61:7d:86:bb:97:f6:05:f8:f2:6a:a7:
6f:ea:9e:a7:e0:dd:40:d9:b1:1c:1c:57:d1:c1:c7:1d:d0:b2:
e4:e7:79:6e:ff:be:3f:b9:bf:f0:2b:1a:54:0c:1d:dc:46:fc:
c6:55:6e:85:a2:39:c4:b6:f0:27:d4:01:1b:a8:53:df:3e:d2:
35:b7:db:43:ca:26:91:04:82:8b:bd:3c:72:41:de:9b:2f:be:
46:cd:66:4c:0a:65:4e:a0:3b:eb:00:27:d2:eb:56:c0:7f:97:
fc:ec:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 19:33:13 2024 by rpki-client on console-fra.rpki-client.org