Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ET34HbZSRUosT3YDJFY-aAyveuo.roa
File: ET34HbZSRUosT3YDJFY-aAyveuo.roa (raw, json)
Hash identifier: vNxFpNQsCWMcNmrqthLMWe+Vhp7Rg92laID13MG8ZzU=
Subject key identifier: 11:3D:F8:1D:B6:52:45:4A:2C:4F:76:03:24:56:3E:68:0C:AF:7A:EA
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018C96B7D49F48CBA07A439051AF9ED2B9E8
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ET34HbZSRUosT3YDJFY-aAyveuo.roa
Signing time: Sat 23 Dec 2023 12:47:59 +0000
ROA not before: Sat 23 Dec 2023 12:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 328867
IP address blocks: 85.92.112.0/24 maxlen: 24
45.158.254.0/24 maxlen: 24
185.245.0.0/24 maxlen: 24
185.243.7.0/24 maxlen: 24
194.62.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:b7:d4:9f:48:cb:a0:7a:43:90:51:af:9e:d2:b9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Dec 23 12:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=113df81db652454a2c4f760324563e680caf7aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:9d:34:a3:04:55:a9:0f:6c:36:cc:b9:d2:
30:7d:37:8f:bc:25:eb:90:68:b3:15:94:c9:51:10:
c2:da:0a:29:d7:b0:f1:9f:71:8a:47:8f:8a:87:c2:
ca:b3:bd:54:47:71:7a:e5:9b:43:98:a9:1c:62:83:
09:30:62:c6:fb:cb:38:e2:69:63:b9:cc:d3:1d:50:
2e:40:a0:d2:2d:b5:5e:0d:32:67:e3:b7:ff:f1:5d:
a7:a7:d9:93:58:83:db:35:08:88:93:51:be:8c:66:
76:0d:ea:29:0a:70:10:63:73:38:ce:c5:07:89:07:
6e:80:4e:26:06:9e:1c:5c:42:85:7b:f0:c5:7c:09:
55:75:86:da:61:34:d6:97:2e:70:1b:17:f6:41:c6:
d4:ec:a9:03:c2:51:16:dc:c9:1c:db:a2:80:0d:48:
16:d1:09:91:18:19:e6:26:2e:84:d3:a2:9c:51:92:
dc:ed:3d:7e:4b:da:d3:72:0b:4e:3e:4e:16:df:fa:
c0:f5:d6:c1:a5:41:4c:cd:ce:a8:5a:c7:47:5b:e3:
9d:77:27:e2:60:e1:a6:31:56:5b:ce:8d:d4:59:2b:
e7:44:34:3e:f7:d8:2d:6d:13:ad:63:95:b2:1e:d3:
43:35:ba:62:e8:48:75:69:c8:62:41:6a:ef:8f:6c:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3D:F8:1D:B6:52:45:4A:2C:4F:76:03:24:56:3E:68:0C:AF:7A:EA
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ET34HbZSRUosT3YDJFY-aAyveuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.254.0/24
85.92.112.0/24
185.243.7.0/24
185.245.0.0/24
194.62.214.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6e:2c:f0:b4:4a:d1:85:16:5a:b1:13:e2:ea:73:b6:c5:b6:
86:f1:b3:56:92:83:65:a8:f0:0f:ef:81:3a:fe:ad:70:f5:1d:
fc:ae:11:60:a1:7d:80:ed:99:e5:8f:47:a3:9a:cb:83:94:cb:
e4:b6:f0:50:ba:2a:46:86:f5:c7:f1:44:bb:26:f5:8e:6e:cf:
18:d0:1a:25:4d:f4:f8:d8:1d:4a:71:61:cb:0c:6b:f0:f3:62:
fe:e7:b1:dd:6e:bd:43:d1:d9:2a:aa:77:11:6a:d4:9a:75:27:
80:71:72:fb:57:a6:fe:2b:a7:12:7b:a5:1f:92:92:57:b8:0c:
a1:5d:55:2c:70:e8:d0:66:89:59:3c:29:ad:79:a8:cb:4c:55:
d6:8c:6e:8e:d4:e7:94:34:13:fc:1a:15:1b:89:8d:82:f0:50:
48:48:1f:f3:c6:1d:73:bf:4e:4c:b1:44:f5:32:09:9a:cb:b0:
77:e4:cd:c6:57:75:cf:ce:5c:9a:d7:87:81:8a:7c:32:d4:33:
e9:f2:4d:95:85:4f:f8:6c:bc:14:0a:99:f5:1a:ce:d1:f0:92:
38:f2:3f:16:47:93:46:8f:ee:2f:ff:20:3a:a6:86:6f:23:f1:
30:7b:b7:a2:8a:c6:04:69:0f:31:d2:74:59:9e:16:2d:9b:b2:
16:01:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org