Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-A8T7sotLt6gNBBurAC7JmEqEgg.roa
File: 1-A8T7sotLt6gNBBurAC7JmEqEgg.roa (raw, json)
Hash identifier: lHuysPW7kyjQZn/wWNYMZR0RuFvz7XPpgT6bw9OjN1o=
Subject key identifier: F8:0F:13:EE:CA:2D:2E:DE:A0:34:10:6E:AC:00:BB:26:61:2A:12:08
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019262AD2BE474670236E5E067BE8EEB2375
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-A8T7sotLt6gNBBurAC7JmEqEgg.roa
Signing time: Sun 06 Oct 2024 16:32:49 +0000
ROA not before: Sun 06 Oct 2024 16:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.113.255.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 06:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:62:ad:2b:e4:74:67:02:36:e5:e0:67:be:8e:eb:23:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 6 16:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f80f13eeca2d2edea034106eac00bb26612a1208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:2e:61:18:75:4f:57:04:cc:85:9c:92:a8:
b7:c3:5f:1f:65:de:79:03:b0:83:d9:cc:d1:53:ed:
ca:b8:4f:bf:9a:48:a7:6d:f7:33:d8:72:65:54:ba:
6d:bf:fa:db:73:5f:83:80:55:1d:2b:bb:b3:72:0e:
5a:a4:e6:8f:fd:ee:8e:4a:f5:48:b0:ae:76:4b:53:
39:3f:2c:d3:40:cf:22:9e:82:e6:05:c5:95:11:e9:
df:05:9e:66:54:62:1c:e2:31:d8:ff:3e:9e:0c:85:
99:a8:54:47:df:82:79:2a:ad:e9:3f:94:48:83:46:
b1:1d:9e:22:ba:fc:b7:97:07:cd:87:98:96:d9:a3:
4c:d5:6b:8d:c1:1f:8b:86:d6:11:e1:a8:52:a3:7c:
2b:fa:a0:d7:18:24:c3:87:f8:fe:21:db:19:3a:19:
85:42:2a:5e:96:65:c1:b9:5e:40:bc:71:94:c0:08:
3a:cf:49:57:8e:4a:3f:67:a6:0f:3a:56:95:4d:04:
73:4b:89:72:f8:36:fc:ff:97:2f:3a:91:e1:eb:bb:
5a:8e:6c:a1:e4:60:fd:4e:6d:c6:19:2d:b7:c9:3c:
1c:53:24:cf:40:97:81:b5:ef:79:e5:74:8c:0b:26:
27:0c:51:08:ff:93:59:65:4d:30:12:c4:4d:46:56:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0F:13:EE:CA:2D:2E:DE:A0:34:10:6E:AC:00:BB:26:61:2A:12:08
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-A8T7sotLt6gNBBurAC7JmEqEgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
91.132.51.0/24
93.113.255.0/24
93.114.183.0/24
94.177.51.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a7:65:15:20:ca:ae:03:70:0b:46:b1:a1:96:45:cc:58:ac:
99:12:02:53:92:9e:ee:7d:fc:26:7f:7f:3e:73:84:40:b0:0a:
00:3a:74:95:f1:ba:00:cb:34:18:f7:7f:61:54:30:41:aa:f2:
17:dd:92:24:71:97:79:4a:9d:26:31:4e:dc:e7:f3:6b:2e:c4:
57:fb:8f:a0:f1:7f:89:f3:9c:89:09:d4:f4:53:05:ec:d5:46:
34:ce:52:4d:20:ca:2d:0c:db:1a:6a:93:b5:7a:ca:9a:43:09:
d8:9a:48:39:04:68:fd:21:0f:2e:a7:36:9f:90:76:e3:d3:55:
72:21:0a:f1:a1:ef:2f:ae:4a:1a:0a:0e:64:ee:d4:d6:e6:a5:
6e:a0:4e:4f:a1:ee:1a:4e:65:e0:24:a5:31:ed:d1:7c:1f:69:
fa:41:83:7d:fd:cd:6d:c6:d8:86:56:86:87:fd:a3:1c:a7:12:
9b:af:3e:68:1d:0a:3b:27:6d:81:c6:36:85:bf:af:5c:c3:8e:
b1:f8:ab:53:50:70:5e:5b:3b:1b:62:48:bb:6f:4a:25:ab:28:
51:d5:56:59:f1:df:5f:0e:f4:b6:2e:4a:a6:f8:41:5b:a1:fc:
ad:08:d1:b4:87:83:20:45:c3:98:13:59:0b:cf:d1:38:11:0b:
9e:fa:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 08:45:25 2024 by rpki-client on console-ams.rpki-client.org