Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Ec2yXILKqDCkt5mkYebyQfdsSKg.roa
File: Ec2yXILKqDCkt5mkYebyQfdsSKg.roa (raw, json)
Hash identifier: +ySiLz937E1ASSWgFTMAnXTILuF2ZGVi32GrMtg7QcI=
Subject key identifier: 11:CD:B2:5C:82:CA:A8:30:A4:B7:99:A4:61:E6:F2:41:F7:6C:48:A8
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01929868195F60F57ED03A8638310350347B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Ec2yXILKqDCkt5mkYebyQfdsSKg.roa
Signing time: Thu 17 Oct 2024 02:56:51 +0000
ROA not before: Thu 17 Oct 2024 02:56:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214785
IP address blocks: 45.134.144.0/24 maxlen: 24
45.155.224.0/24 maxlen: 24
103.211.100.0/24 maxlen: 24
103.211.102.0/24 maxlen: 24
185.245.1.0/24 maxlen: 24
185.245.2.0/24 maxlen: 24
194.145.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 00:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:98:68:19:5f:60:f5:7e:d0:3a:86:38:31:03:50:34:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 17 02:56:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11cdb25c82caa830a4b799a461e6f241f76c48a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:47:f9:ed:c4:04:9e:28:af:bb:22:38:1b:
57:cf:41:9a:86:11:d5:2e:30:32:ed:e4:a6:a8:e7:
10:4b:93:1c:ca:5d:85:19:7a:ee:71:39:73:89:07:
96:58:36:2d:79:16:32:a6:85:2d:47:44:ec:f8:95:
1b:b0:b5:fd:df:51:8a:de:e5:f0:77:6c:9a:de:8e:
64:bf:b7:df:bc:75:ea:1e:03:6e:51:b0:bf:55:69:
1f:6d:f4:fc:ae:48:9d:01:37:56:8e:cc:6e:8f:5d:
7a:56:2b:e5:1b:0f:6c:5d:92:24:c8:b8:87:25:a5:
7e:9a:cb:2e:ca:88:68:82:65:23:96:80:72:64:98:
9f:d2:55:b8:df:64:80:0a:1f:9f:f1:e1:d0:f7:be:
7e:a2:3a:74:2f:78:f8:9b:28:c8:71:c6:90:5d:61:
55:10:43:46:ee:e5:e5:b3:68:50:bb:56:d4:51:ad:
54:a2:bd:6e:cc:ea:5e:7e:c0:89:d3:4c:d0:65:c3:
f3:61:6d:7f:1d:4c:ff:a3:f3:d0:32:d8:71:25:77:
16:a5:70:45:f8:a5:86:e4:b3:1f:e1:d5:90:18:fb:
31:7d:24:4c:ca:45:2b:78:21:cd:bb:e0:28:d2:27:
6f:62:9f:d5:3e:ff:de:d6:9f:9f:ff:cd:b2:a3:28:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:B2:5C:82:CA:A8:30:A4:B7:99:A4:61:E6:F2:41:F7:6C:48:A8
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Ec2yXILKqDCkt5mkYebyQfdsSKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.144.0/24
45.155.224.0/24
103.211.100.0/24
103.211.102.0/24
185.245.1.0-185.245.2.255
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
08:cb:1e:eb:52:78:e0:48:bf:08:1a:f0:cf:4c:cf:d9:62:9b:
76:72:a3:fc:6c:17:ba:c3:0f:aa:f4:db:a9:83:fd:ac:41:a4:
28:d5:3e:2d:5f:52:e5:24:bd:c3:f3:1c:97:1f:24:4a:c0:90:
0b:0c:b5:05:27:ab:86:4e:a0:e0:e9:2e:32:b0:69:75:1b:1c:
44:d1:d6:12:a0:ad:e1:e8:b0:20:1f:54:cf:be:8f:47:42:3c:
0f:f5:5e:30:1b:6e:00:af:55:0d:3b:d0:67:fe:ee:33:82:81:
6c:66:77:d3:e0:d2:fe:58:9b:d2:f2:9b:65:ee:95:78:19:42:
9d:fa:09:9f:2a:15:2f:d2:9a:56:ed:a9:7c:fd:6c:8a:93:86:
3c:3a:30:89:d1:03:b8:f4:d3:6d:c3:2e:de:23:5b:60:e8:c7:
29:11:75:d2:58:04:8e:81:58:77:7f:10:70:25:1b:23:1e:3e:
99:b9:16:76:73:e7:04:3b:ce:c4:e6:4d:4e:69:00:f5:99:19:
5d:af:10:02:d5:ff:c6:86:98:09:a5:4c:13:33:47:4d:86:54:
b6:18:0a:79:3c:fb:48:17:29:2a:37:78:73:83:9d:93:4e:b3:
9b:80:1a:01:f3:a5:9c:26:f0:84:2d:ee:c1:47:d2:90:14:80:
a0:2c:4c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 05:03:24 2024 by rpki-client on console-fra.rpki-client.org