Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-C9S8Rc8ZirYUA9jRwWOTh-UTEo.roa
File: 1-C9S8Rc8ZirYUA9jRwWOTh-UTEo.roa (raw, json)
Hash identifier: vpXyurXgWpxp9Xd850DqvQQoXqhu3I2VPGX5NbRhmi4=
Subject key identifier: F8:2F:52:F1:17:3C:66:2A:D8:50:0F:63:47:05:8E:4E:1F:94:4C:4A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190ED8DB1EDA00C2075F29CEB1EC8225D68
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-C9S8Rc8ZirYUA9jRwWOTh-UTEo.roa
Signing time: Fri 26 Jul 2024 05:40:04 +0000
ROA not before: Fri 26 Jul 2024 05:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.113.57.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 15:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ed:8d:b1:ed:a0:0c:20:75:f2:9c:eb:1e:c8:22:5d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 26 05:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f82f52f1173c662ad8500f6347058e4e1f944c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:32:71:21:82:41:56:5b:c0:ec:08:80:35:44:
02:08:11:28:51:1e:7f:39:40:4e:e1:4f:5e:24:18:
50:3a:01:1b:da:e1:9e:c6:bc:96:eb:8c:f4:53:e8:
14:62:78:db:c5:38:a2:0e:54:dc:76:b1:03:91:be:
31:ba:4c:10:d9:f7:4c:b7:e4:c9:a3:89:32:14:73:
f7:31:49:01:23:4c:b2:f6:49:23:a3:df:60:e2:34:
b9:de:b9:af:b1:74:a5:ca:5e:6e:19:f2:fb:ef:6b:
37:11:42:48:16:26:d9:97:1f:7b:08:b2:f2:75:2e:
f8:33:f8:4c:dd:56:6f:29:1b:46:9b:11:40:fc:50:
b3:92:cd:d8:ef:9d:ef:e5:79:1a:41:5e:88:1e:f4:
2d:60:f4:90:ac:82:97:ab:f8:b2:d0:80:8e:6d:da:
93:45:c9:2d:94:18:42:b5:39:f4:54:f8:a4:fa:7b:
75:70:8d:6a:51:12:f7:1c:7b:35:b4:39:14:0e:08:
e7:e8:34:90:1c:f0:3d:d4:57:e1:fc:bd:00:8b:a6:
6a:77:f6:a0:ca:ea:37:36:64:6a:fd:a2:64:7f:f9:
ba:b7:8a:30:cb:b5:7c:87:82:54:72:bb:3a:e1:fa:
ed:d7:e8:d1:b2:a3:f4:73:51:1f:f3:7c:3d:d8:7a:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2F:52:F1:17:3C:66:2A:D8:50:0F:63:47:05:8E:4E:1F:94:4C:4A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-C9S8Rc8ZirYUA9jRwWOTh-UTEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
91.132.51.0/24
93.113.57.0/24
93.114.183.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:32:26:4c:67:9a:c6:96:b5:7e:9f:8e:63:29:e3:1a:9d:84:
d2:49:78:f7:0d:5d:dd:aa:d2:69:12:83:5c:37:83:d1:34:3b:
5c:c7:d9:18:b0:59:dd:83:2a:30:2d:ef:c1:9a:9a:84:14:0e:
24:73:93:f8:ed:0f:3d:14:3e:33:86:42:84:3e:3e:c0:ae:35:
2c:93:06:f0:68:b6:e7:cd:ff:61:09:53:56:1f:4d:16:ef:c9:
ab:14:4b:48:50:41:78:43:fa:4e:47:0e:5d:d9:e7:f9:41:43:
92:d0:7c:80:b0:89:43:74:5e:95:46:08:4d:a4:55:ff:fb:c8:
5c:49:18:2a:6e:06:91:3a:73:64:7c:41:df:2d:25:5a:2a:49:
48:68:0c:d0:d8:6e:60:e2:99:bc:06:3e:d9:00:da:d8:b1:83:
5c:ec:1f:12:3d:0c:4b:1e:f5:cd:19:f6:25:8b:90:7f:8b:33:
a7:11:e2:81:03:af:c5:f4:e0:85:54:54:36:d8:b3:6a:26:23:
60:c5:4a:03:7a:f1:e8:38:8b:06:30:60:42:5a:dc:48:28:b8:
dd:fa:a1:0a:64:8b:e9:38:44:4b:27:fc:48:bb:30:ea:da:6a:
57:2e:a4:8d:ef:49:e2:dd:57:ef:56:d8:7f:8c:d8:26:51:b2:
a3:55:a4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 17:19:07 2024 by rpki-client on console-fra.rpki-client.org