Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Pnqtw4JK1jJFBhFCfCLHtHLQ8IM.roa
File: Pnqtw4JK1jJFBhFCfCLHtHLQ8IM.roa (raw, json)
Hash identifier: YSS6RNvxnbiknuYROx9QHZbzDYgsnHjHAcXFE+tI3xw=
Subject key identifier: 3E:7A:AD:C3:82:4A:D6:32:45:06:11:42:7C:22:C7:B4:72:D0:F0:83
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D65BF0FAC829A25A3EC32E38FC97A3A20
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Pnqtw4JK1jJFBhFCfCLHtHLQ8IM.roa
Signing time: Thu 01 Feb 2024 17:37:16 +0000
ROA not before: Thu 01 Feb 2024 17:37:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35751
IP address blocks: 45.11.124.0/22 maxlen: 22
45.81.76.0/22 maxlen: 22
45.132.20.0/22 maxlen: 22
45.133.224.0/22 maxlen: 22
45.135.28.0/22 maxlen: 22
192.109.91.0/24 maxlen: 24
192.109.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 18:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:bf:0f:ac:82:9a:25:a3:ec:32:e3:8f:c9:7a:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 1 17:37:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e7aadc3824ad632450611427c22c7b472d0f083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:56:76:32:0e:41:f2:57:0c:82:06:78:cd:
e3:88:39:e1:01:f4:c6:92:92:5c:f7:ab:a5:ec:04:
99:c5:5a:21:29:db:7f:8c:1e:70:3b:b4:9d:50:ee:
53:c4:30:43:56:0a:ef:ed:59:3b:c7:69:e0:52:ea:
99:c9:f5:e2:c7:73:c3:66:1f:df:21:e5:2d:c7:30:
d5:97:1e:8b:92:c5:67:40:aa:d2:b7:e0:fb:4b:eb:
e2:c4:46:9a:db:44:1d:e4:62:05:d7:05:cc:50:c2:
e8:b7:da:86:3a:c9:c1:52:b6:d4:81:37:89:3d:a3:
3f:c4:a9:a5:b7:a2:cb:3d:42:55:ff:98:ed:ea:d4:
49:66:74:af:bc:c0:89:eb:8e:a9:f6:52:12:f3:f6:
80:fb:66:a1:85:26:c4:0e:99:ec:63:85:bc:87:08:
4a:44:fe:68:2d:4e:51:0a:ea:88:fe:ba:fc:18:db:
72:b4:d0:98:e2:bb:89:76:96:6b:f1:04:67:05:5d:
fc:b4:0e:45:d9:62:f3:a8:47:86:f1:51:7d:6a:bd:
ba:c8:eb:2b:7e:2a:16:f9:fe:2e:41:b1:4c:51:5c:
b8:7d:14:ab:87:14:34:8a:cd:bb:92:4f:c7:0d:18:
dd:11:3e:17:44:03:b6:1d:c8:01:56:cb:c9:d9:12:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7A:AD:C3:82:4A:D6:32:45:06:11:42:7C:22:C7:B4:72:D0:F0:83
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Pnqtw4JK1jJFBhFCfCLHtHLQ8IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.124.0/22
45.81.76.0/22
45.132.20.0/22
45.133.224.0/22
45.135.28.0/22
192.109.91.0/24
192.109.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:42:ad:78:72:8a:df:08:20:ab:37:95:07:26:6c:a2:c2:81:
67:fd:fd:23:84:b3:88:40:e4:19:25:81:85:5e:a3:6f:71:f3:
5c:ef:59:1b:e6:e4:ec:dd:35:e5:8b:48:c8:26:31:a7:d1:88:
1d:22:51:4d:94:31:bd:f4:64:dc:45:ab:81:4a:d3:05:f4:76:
08:86:9a:5d:f7:6f:3c:85:2a:03:90:2a:07:c9:8c:e4:00:b5:
0e:95:a2:9e:cc:b0:98:ed:0e:2d:82:ad:8e:7a:c6:79:02:0b:
c1:37:7d:b4:aa:74:99:32:73:88:c4:11:20:65:55:5a:44:87:
76:19:bc:4d:8c:5d:c1:dc:a4:b1:55:93:49:f7:79:f9:66:1c:
3d:8d:a2:ae:ae:5b:17:75:4f:10:cf:4c:c3:20:14:64:48:85:
ac:19:c9:b0:74:a5:ee:7e:9e:02:f8:a4:9e:08:e8:c3:20:40:
e9:61:e7:f4:bb:07:c8:42:13:a9:47:f5:b6:76:36:67:76:36:
c2:4f:7d:eb:17:b0:ea:6a:a1:e5:81:bb:c8:07:3a:01:2f:5f:
95:76:0a:e6:30:7d:9d:49:71:5d:20:f5:19:06:b5:37:15:3c:
cb:9c:17:dd:39:26:c5:18:14:56:25:8b:fe:a0:48:7d:f7:13:
5f:7c:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 23:05:27 2024 by rpki-client on console-fra.rpki-client.org