Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-bYb2U5y6ouWWK5Ac6ZwEhNl8Nc.roa
File: 1-bYb2U5y6ouWWK5Ac6ZwEhNl8Nc.roa (raw, json)
Hash identifier: ZAPCmoy8QRvu26EGigDFSavmuQtp8/qUTC0VUYc1a7Q=
Subject key identifier: F9:B6:1B:D9:4E:72:EA:8B:96:58:AE:40:73:A6:70:12:13:65:F0:D7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E7AE449087305AEF491F549547DD68B15
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-bYb2U5y6ouWWK5Ac6ZwEhNl8Nc.roa
Signing time: Tue 26 Mar 2024 13:12:45 +0000
ROA not before: Tue 26 Mar 2024 13:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.180.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 13:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:e4:49:08:73:05:ae:f4:91:f5:49:54:7d:d6:8b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 26 13:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9b61bd94e72ea8b9658ae4073a670121365f0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:d1:ff:1f:bb:7b:20:ae:3c:1e:1f:b4:68:
73:17:80:5e:d4:fb:dc:2c:06:d9:e8:0a:00:61:7e:
2f:41:01:6f:00:ed:e9:ff:d4:3f:d0:db:87:e6:e4:
20:97:cd:c3:c1:3f:08:4d:f1:f1:ee:42:2d:4e:98:
11:cb:73:36:76:3e:4f:8c:7d:13:21:2d:35:ee:4a:
1c:94:ad:15:58:99:2d:57:0c:47:e1:93:e8:fa:4e:
ff:a5:45:95:ba:77:15:53:9a:88:e7:f6:f1:ea:8e:
c4:93:55:49:ea:27:00:6d:f4:f1:f9:77:16:97:64:
b1:30:f5:a1:c1:4b:9f:6a:f2:73:89:a7:ad:1e:c2:
73:2d:e5:8e:d1:be:5e:a0:bb:0c:7e:af:0f:16:95:
ae:95:41:5a:33:05:ec:31:f8:33:44:47:7f:56:fd:
ae:a9:04:15:69:80:6a:3a:ba:b2:6e:96:84:08:83:
2e:d2:91:2f:0b:00:38:8f:63:36:0c:bc:bd:83:bb:
0e:3c:2c:fe:05:b7:46:14:ae:dd:96:d6:ec:e2:d8:
e1:ad:76:d6:46:25:47:5f:f8:4b:fc:df:de:ea:0f:
86:ab:d3:3d:05:31:3c:e3:50:dc:be:29:52:13:39:
66:2e:7c:82:78:f9:c9:e4:6d:09:ec:da:8f:96:97:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B6:1B:D9:4E:72:EA:8B:96:58:AE:40:73:A6:70:12:13:65:F0:D7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-bYb2U5y6ouWWK5Ac6ZwEhNl8Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.198.234.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
85:01:5f:d1:a8:5d:90:d5:7f:a0:5e:fd:14:32:25:38:7c:a3:
0b:08:9b:e9:96:f2:d4:d0:c7:41:35:07:89:69:2f:b4:c7:5c:
a5:8f:00:83:53:54:3c:22:0c:a9:10:4c:26:22:b2:53:77:1d:
d1:8a:15:d1:53:f9:17:dd:cd:db:a3:76:e8:e7:d3:96:2f:7a:
18:2a:3c:0a:18:ef:fd:48:2f:1b:09:83:49:7a:3a:ca:46:a6:
4f:58:fd:4c:88:ee:df:69:88:65:3f:44:34:28:f0:05:c7:f0:
02:0a:e5:19:ae:ec:0f:31:b4:6a:73:0a:b7:8e:35:f9:03:24:
4c:f8:03:8b:87:05:bf:19:59:9b:80:3c:d0:af:83:a4:40:58:
c5:88:68:df:2f:5a:0a:76:30:c2:09:31:48:e5:6b:1a:f7:42:
22:57:60:d5:10:20:d1:45:b5:f5:13:51:3b:95:65:f7:e9:43:
24:c2:b0:32:90:e9:8b:12:77:1a:e0:48:7c:6d:39:5f:26:22:
2b:aa:99:84:f3:fd:28:36:9b:20:73:73:3c:41:f6:69:bc:7a:
77:af:65:89:19:17:18:98:67:f5:0d:a1:3a:35:b7:40:75:53:
55:38:41:19:15:e0:12:7f:06:ca:d8:39:b7:8a:67:0a:f0:58:
a5:75:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org