Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o5RbQhFjUJwjO9hAMHiieobzy2k.roa
File: o5RbQhFjUJwjO9hAMHiieobzy2k.roa (raw, json)
Hash identifier: FdGbd3LxYXd52ACDzifm168z6c+Zvq26fFrHBX5zkVU=
Subject key identifier: A3:94:5B:42:11:63:50:9C:23:3B:D8:40:30:78:A2:7A:86:F3:CB:69
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01927BBE744ED0E8A61855857B14C3505C8C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o5RbQhFjUJwjO9hAMHiieobzy2k.roa
Signing time: Fri 11 Oct 2024 13:22:12 +0000
ROA not before: Fri 11 Oct 2024 13:22:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149457
IP address blocks: 45.134.145.0/24 maxlen: 24
85.92.114.0/24 maxlen: 24
103.100.168.0/24 maxlen: 24
185.233.18.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
194.120.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 02:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:be:74:4e:d0:e8:a6:18:55:85:7b:14:c3:50:5c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 11 13:22:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3945b421163509c233bd8403078a27a86f3cb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:23:41:c4:20:f2:96:75:e6:ba:c7:70:6b:
7a:5c:61:5b:3d:eb:21:45:0a:55:a8:10:76:a9:93:
79:1a:ce:64:81:dd:e8:51:b6:5a:fb:2a:b2:7f:18:
10:f2:1e:6c:29:6d:5f:c3:12:78:d9:4c:41:69:a2:
10:49:82:4b:1f:be:3d:ab:c9:81:2d:93:7e:8b:e2:
e2:ae:91:10:3f:4e:67:21:4d:4a:e8:82:d6:a2:13:
d6:cd:e9:8d:ba:24:b5:2e:70:43:21:28:34:80:44:
2e:50:08:df:58:68:00:b5:78:d5:0d:ab:bc:cc:1c:
2d:20:a3:a4:b5:4e:9d:d5:1a:84:62:ca:43:c7:bf:
ef:08:90:0d:e1:1f:f9:66:9a:7f:5f:cd:ac:90:ca:
03:9a:bf:cb:7d:eb:c7:aa:e2:73:e5:ea:83:ea:6c:
1b:e1:1b:99:5f:8f:43:33:54:b1:97:ed:1a:af:1d:
3b:12:a3:9f:76:1d:81:b1:c1:4a:29:21:e2:77:b8:
6a:38:7a:2a:5d:3a:88:e3:ae:ef:03:e8:9d:78:00:
e3:1d:22:ae:5b:9c:b3:de:81:90:ac:00:45:9c:27:
cd:20:26:68:28:bd:cd:f9:cd:e7:8a:8e:9b:a5:a5:
68:a1:09:8b:4a:07:3f:84:ff:c3:88:09:19:86:49:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:94:5B:42:11:63:50:9C:23:3B:D8:40:30:78:A2:7A:86:F3:CB:69
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o5RbQhFjUJwjO9hAMHiieobzy2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.145.0/24
85.92.114.0/24
103.100.168.0/24
185.233.18.0/24
193.107.218.0/24
194.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:24:b5:82:7e:f3:21:95:34:b0:bf:d3:fd:de:4a:72:34:c5:
f2:ba:7e:6c:0e:2d:63:34:33:29:0a:d0:d5:47:43:b4:9f:ad:
df:29:c2:0a:e9:9b:53:34:a1:37:2c:99:36:c0:d9:55:27:24:
cf:04:72:86:3c:dd:17:3f:0a:33:e6:0b:f6:3f:f6:56:ba:a7:
34:58:88:38:18:06:40:3e:9d:dc:33:ad:49:22:97:46:ea:7f:
57:7f:9c:a0:08:07:fe:98:45:ab:82:5d:51:d2:91:8c:2b:7a:
2c:a2:89:78:fc:6c:c0:d5:9c:50:01:96:b0:31:83:36:9a:35:
12:96:90:f7:66:da:2b:6f:fb:81:a5:a9:5d:7a:a7:0e:3d:19:
a0:43:28:95:2d:dd:af:ae:32:4a:0e:f7:97:27:98:c9:9a:66:
be:e7:3b:41:0f:a4:c4:ee:76:c2:13:22:d5:e2:b4:d9:ac:ed:
0e:b7:e1:ad:83:31:5c:88:a2:e3:39:5a:85:d1:58:2f:9f:f0:
82:7c:d3:f1:af:a2:12:f1:b8:41:d5:54:f4:b1:b5:05:d1:1c:
f5:46:ae:fd:5f:7b:bf:62:8c:d0:3a:4e:71:ee:cb:e2:b0:2d:
31:e9:c7:b6:3a:3c:31:7c:ca:91:8b:8c:ed:86:a0:bb:b3:83:
5e:f1:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 03:57:05 2024 by rpki-client on console-fra.rpki-client.org