Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Fy5MATny26ux2ugBEr-mPBAT3qY.roa
File: Fy5MATny26ux2ugBEr-mPBAT3qY.roa (raw, json)
Hash identifier: QYPeaHfIFCWADlazlLMcQeCDJX2zCGrgxiNUWDxj4OU=
Subject key identifier: 17:2E:4C:01:39:F2:DB:AB:B1:DA:E8:01:12:BF:A6:3C:10:13:DE:A6
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0190C365E9D0084AB47122DFAC8FE2161C57
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Fy5MATny26ux2ugBEr-mPBAT3qY.roa
Signing time: Thu 18 Jul 2024 01:12:34 +0000
ROA not before: Thu 18 Jul 2024 01:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149457
IP address blocks: 45.134.145.0/24 maxlen: 24
85.92.114.0/24 maxlen: 24
103.100.168.0/24 maxlen: 24
185.233.17.0/24 maxlen: 24
185.233.18.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 12:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c3:65:e9:d0:08:4a:b4:71:22:df:ac:8f:e2:16:1c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 18 01:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=172e4c0139f2dbabb1dae80112bfa63c1013dea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:a1:a8:de:95:bf:8d:0a:70:b6:91:cd:b1:
a4:f2:5a:6b:62:47:2d:6f:ee:0e:31:c4:70:f8:b3:
4f:16:f0:6b:73:52:d8:7b:28:94:75:36:35:28:7b:
85:54:79:1a:1c:12:cf:0c:da:a1:6b:80:41:ee:a9:
ff:3d:70:57:8c:1c:57:0f:55:07:d3:a0:0a:bf:89:
eb:0d:0e:03:be:60:93:61:57:6f:4c:b2:52:0f:81:
2b:ae:a3:39:85:a3:cd:e4:8b:d4:39:14:7b:2f:7f:
a9:67:e9:33:29:c7:21:bd:cb:df:71:fd:af:ad:45:
39:82:ae:cf:36:37:ef:3d:7a:ec:68:39:c8:df:0a:
ca:9b:49:89:f3:1c:23:21:c0:27:d7:e2:1d:0d:c3:
04:fa:8d:32:23:be:8d:34:30:68:c2:11:87:08:c0:
ad:c7:a6:46:89:e2:f2:57:2b:cc:23:9c:83:9f:76:
6a:d1:7c:e3:e6:6c:e8:8f:68:2a:69:48:12:ad:aa:
ed:a4:38:5b:a1:8b:c6:5d:cc:0b:a1:d4:03:f0:32:
5e:14:5e:14:23:bf:7a:9f:e5:60:3c:4d:4e:ce:be:
ab:e3:35:6b:f2:08:09:60:17:e0:ec:96:c3:e2:fc:
fd:7b:29:43:61:34:4f:28:dd:5e:18:57:4c:05:a9:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2E:4C:01:39:F2:DB:AB:B1:DA:E8:01:12:BF:A6:3C:10:13:DE:A6
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Fy5MATny26ux2ugBEr-mPBAT3qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.145.0/24
85.92.114.0/24
103.100.168.0/24
185.233.17.0-185.233.18.255
193.107.218.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:93:8a:74:66:ff:77:01:1d:20:05:39:f0:03:f8:68:3f:db:
9d:66:04:84:a0:8d:d7:7f:3a:5a:c1:a2:fb:99:7b:7a:d0:88:
87:70:59:5b:61:40:87:91:83:03:85:37:11:29:70:fc:d1:09:
b9:80:c5:a5:22:bb:2f:94:da:3d:8f:8f:7a:7a:dc:8d:b0:7c:
63:a0:39:27:8c:67:0b:32:23:df:ea:fb:ca:5b:91:5a:6b:fb:
b8:f8:b0:8c:3c:c1:e4:82:30:0c:fa:56:1d:7c:6c:df:d5:3b:
6e:9c:ff:33:2f:86:ab:c3:df:c8:ae:71:13:ba:fd:60:ff:04:
76:86:30:08:2f:d5:49:d5:28:50:52:6c:0e:73:2d:e9:ee:8f:
53:c1:f1:83:e6:5b:46:30:d9:77:df:57:c9:43:ae:4c:e0:ac:
9a:31:56:5c:79:e8:86:86:3c:4f:45:b8:d7:21:78:b2:0b:41:
d7:36:f6:f0:f0:0b:84:65:7a:06:6a:af:d3:57:36:a5:da:26:
4a:c3:85:5a:8f:cb:45:ca:8e:21:fb:99:c2:fb:b6:17:c1:9f:
ad:2c:34:de:d0:08:24:f7:fe:5e:8a:f3:c9:51:eb:eb:e0:c9:
42:1d:96:0c:c9:75:5b:dd:8c:54:09:c0:de:15:1e:26:7d:b9:
01:0c:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:03:14 2024 by rpki-client on console-fra.rpki-client.org