Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7HUHVsC4SYjtNA39pj9-ifv9lfI.roa
File: 7HUHVsC4SYjtNA39pj9-ifv9lfI.roa (raw, json)
Hash identifier: PYPSV4bss99X2vue4lHwXpfx0HiiIyvvucqBRdZuPus=
Subject key identifier: EC:75:07:56:C0:B8:49:88:ED:34:0D:FD:A6:3F:7E:89:FB:FD:95:F2
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01876E25C70AC5003BC5223E5E1C69A200E1
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7HUHVsC4SYjtNA39pj9-ifv9lfI.roa
Signing time: Tue 11 Apr 2023 02:29:42 +0000
ROA not before: Tue 11 Apr 2023 02:29:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31733
IP address blocks: 85.92.115.0/24 maxlen: 24
45.158.252.0/24 maxlen: 24
45.135.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 06 May 2023 06:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:25:c7:0a:c5:00:3b:c5:22:3e:5e:1c:69:a2:00:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 11 02:29:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec750756c0b84988ed340dfda63f7e89fbfd95f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:cf:7f:ee:c1:19:7b:47:3e:78:6e:f9:74:
2b:db:58:36:5b:4a:da:20:e7:a6:d6:c7:4a:3d:b4:
fb:98:47:7a:b8:0f:4a:74:67:d6:af:ea:47:19:b7:
a3:23:9e:4a:91:75:40:f6:e3:3f:eb:c0:67:7b:65:
57:d4:32:de:db:f1:1f:99:41:72:38:a2:ea:2a:08:
1b:66:d1:15:47:16:07:6d:e9:3f:a2:de:6a:53:26:
a3:22:0b:80:e7:20:38:97:61:48:99:50:8c:60:19:
6e:6b:82:fc:17:c0:aa:1a:8b:5e:1e:ef:75:2d:2e:
57:25:b6:a6:4f:f6:3e:8a:bb:6b:0e:a5:bd:f8:53:
d9:bf:49:ed:73:0c:55:f0:3d:53:7c:40:e4:b2:cb:
0f:9d:72:9e:e9:a7:f7:10:1f:f4:f6:17:f4:9d:f3:
83:4c:5c:e9:7e:31:bd:dc:5d:3f:df:d6:8a:54:63:
c3:d4:5a:5f:13:53:d7:2b:b2:75:d5:d4:32:f0:67:
73:bb:22:89:03:dc:f6:31:4e:1c:35:63:41:02:51:
0d:a8:24:74:c0:f4:d5:a0:82:86:81:e7:8e:36:6e:
d0:dc:46:95:b9:4c:fb:7c:5b:15:1f:cb:57:ac:bd:
df:1c:ea:e3:31:5d:56:55:3c:e8:f0:21:3f:3e:4c:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:75:07:56:C0:B8:49:88:ED:34:0D:FD:A6:3F:7E:89:FB:FD:95:F2
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7HUHVsC4SYjtNA39pj9-ifv9lfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.236.0/23
45.158.252.0/24
85.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e7:da:0c:67:fc:74:35:d3:86:a2:db:c9:e9:7f:f8:11:c9:
9a:28:a4:39:e8:6c:10:dd:ee:66:51:09:6c:b1:29:4a:a2:4b:
33:f3:15:6e:8e:b8:c8:39:63:24:77:ad:72:40:28:bc:d0:3d:
d7:54:6c:f9:59:bf:fd:d6:9a:d6:e0:94:0b:21:b8:3f:de:26:
6d:31:8b:58:ab:d8:6c:26:d6:53:28:0a:dc:dc:9e:14:7d:6e:
cd:dc:14:9e:88:ab:9e:e1:de:7f:e6:2a:ad:5c:c0:8a:22:93:
bb:b0:d1:7a:62:63:09:1f:36:a5:27:a5:fe:d1:c3:d3:62:3e:
ce:1a:cd:ab:be:e6:e1:0c:25:78:c1:6b:96:6b:9b:cb:32:16:
62:45:98:29:e3:0f:d5:f1:fb:78:34:00:83:f2:8d:5a:3d:fb:
f9:14:52:7b:20:4e:80:6d:dd:94:46:93:cf:39:e9:17:5d:4f:
ef:86:30:1f:d4:68:e5:5c:ef:3c:e0:b6:49:95:8e:5e:fc:be:
50:ec:11:59:29:d4:7b:62:11:c4:9a:74:79:ce:fe:c5:83:ac:
94:2b:21:44:2e:c5:fd:e0:56:9b:f3:fd:a1:69:af:30:9b:d4:
e8:88:36:e6:2e:94:d3:2e:51:91:5c:e2:04:25:99:ff:99:16:
0a:8d:73:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org