Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tTYf9jmxlzJY11mfOh4ZFWYgdPk.roa
File: tTYf9jmxlzJY11mfOh4ZFWYgdPk.roa (raw, json)
Hash identifier: v5pEn44zszvwizssogluK5qz2djonZx0cG4p9y0L+fc=
Subject key identifier: B5:36:1F:F6:39:B1:97:32:58:D7:59:9F:3A:1E:19:15:66:20:74:F9
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018D795BCCAB5253DBC0A34ABD082A93581F
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tTYf9jmxlzJY11mfOh4ZFWYgdPk.roa
Signing time: Mon 05 Feb 2024 13:01:15 +0000
ROA not before: Mon 05 Feb 2024 13:01:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149457
IP address blocks: 45.134.145.0/24 maxlen: 24
85.92.114.0/24 maxlen: 24
185.233.17.0/24 maxlen: 24
185.233.18.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
194.76.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 02:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:5b:cc:ab:52:53:db:c0:a3:4a:bd:08:2a:93:58:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 5 13:01:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5361ff639b1973258d7599f3a1e1915662074f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:e6:51:18:21:43:c9:ab:c3:d9:35:0d:4a:
72:b9:9c:bb:13:7c:24:8d:b5:b0:5b:78:83:a8:c0:
c5:8c:5c:ef:62:ce:87:20:f2:17:dd:a7:7f:b7:4f:
a7:0e:12:39:5a:5c:43:dc:08:62:f8:3d:9a:64:d4:
d4:1a:6b:d3:98:5c:81:16:da:99:9e:8e:3e:f2:01:
d2:3c:68:aa:0e:76:b3:71:30:3d:92:b9:c0:bd:64:
4b:3f:be:fb:f0:8f:fb:94:42:df:00:4b:8e:44:34:
54:fc:86:68:ba:69:47:68:55:dc:f4:5e:35:c0:ac:
9a:93:5d:ce:e2:a1:6d:b3:0f:c5:dd:0c:90:14:74:
99:7c:04:6b:f3:4a:15:b9:70:26:b3:d6:59:fd:0f:
c0:3d:c9:9d:d8:b9:2c:1d:6a:4e:70:74:4d:c5:39:
e9:45:b7:da:a4:84:9c:51:02:f4:b3:30:92:2d:19:
2e:45:76:6a:1d:fb:67:2c:7f:ba:d2:8f:a7:08:7a:
15:62:88:af:ac:51:53:0a:6c:8c:2c:70:18:ad:6d:
08:6f:2e:98:3a:88:b3:c7:db:e6:87:fc:12:46:88:
f4:b9:29:5c:bc:5f:68:a6:f3:e5:6a:74:1e:f5:2f:
30:be:42:bf:91:b9:2c:2f:89:9a:a7:bc:db:ce:88:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:36:1F:F6:39:B1:97:32:58:D7:59:9F:3A:1E:19:15:66:20:74:F9
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tTYf9jmxlzJY11mfOh4ZFWYgdPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.145.0/24
85.92.114.0/24
185.233.17.0-185.233.18.255
193.107.218.0/24
194.76.0.0/24
Signature Algorithm: sha256WithRSAEncryption
62:37:f8:9d:1e:1d:2a:8d:1f:6b:6c:17:c6:c6:fd:89:36:7b:
ba:dd:fe:b1:19:97:f5:10:99:67:ba:8a:40:9a:67:b5:34:62:
f6:27:49:e0:a1:e1:7d:51:79:8a:fd:9d:4b:1a:ee:59:46:2d:
e5:22:b5:bb:63:2b:67:4f:15:a6:77:fc:67:ea:d5:ef:c1:a9:
c0:0c:bd:55:6d:09:6a:74:14:50:a4:64:bf:2d:c9:ef:a3:22:
2e:4d:ec:5a:51:59:ab:7b:65:27:ba:47:ba:45:01:68:1f:d0:
67:4e:e6:b6:e6:89:66:c6:0f:d1:e9:8c:33:24:98:8f:b7:aa:
9b:0a:0c:87:78:10:d0:87:79:2f:cd:c0:f1:cd:ad:25:a6:12:
21:c4:44:cc:90:22:9a:31:f3:8e:10:f8:88:ce:73:74:5e:dd:
36:6c:77:3f:bb:3e:d3:0b:a5:dd:d7:47:7c:6c:6e:07:76:1c:
2d:ad:c4:c5:12:21:78:2c:a1:78:a0:b8:01:81:45:3f:f3:96:
0a:f4:e0:f7:4a:6f:9c:58:46:62:ce:dd:49:2f:dc:e1:56:ce:
fe:24:9b:a1:b7:62:03:73:28:1f:bf:8e:7e:a7:91:12:40:a5:
48:8b:db:6a:85:ea:69:72:05:3c:c2:24:7f:ff:e8:11:00:69:
c3:00:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org