Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5dGZakcHAqyn6VNLRCzA7ubfAkg.roa
File: 5dGZakcHAqyn6VNLRCzA7ubfAkg.roa (raw, json)
Hash identifier: 5CVEqWV6OsUZByeEA1v5Cza7u0OInAJxr6+TOj3w42g=
Subject key identifier: E5:D1:99:6A:47:07:02:AC:A7:E9:53:4B:44:2C:C0:EE:E6:DF:02:48
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0191B250758ED785F317613BB48FB1BE85D2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5dGZakcHAqyn6VNLRCzA7ubfAkg.roa
Signing time: Mon 02 Sep 2024 10:38:23 +0000
ROA not before: Mon 02 Sep 2024 10:38:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 13:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:50:75:8e:d7:85:f3:17:61:3b:b4:8f:b1:be:85:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 2 10:38:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5d1996a470702aca7e9534b442cc0eee6df0248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:0e:11:76:a3:f0:6e:5c:b4:fe:9c:cf:6e:
33:6e:65:72:c2:65:51:92:f3:83:25:b9:a5:92:b2:
73:5a:fe:24:2f:7e:bf:a2:81:c3:0c:c7:ad:88:b9:
29:94:d4:0c:1b:44:06:48:3c:2d:86:f9:2d:a6:af:
d7:d8:05:b9:f0:a4:04:51:ac:95:cb:8e:84:52:87:
69:2a:cf:f5:d0:18:36:c5:b0:5c:96:a8:58:f4:9d:
4f:e9:dd:16:bf:0e:b6:2d:6e:57:2b:13:22:d5:57:
de:ff:ae:60:7e:76:c6:20:a8:2d:55:09:6b:49:5d:
22:5b:93:17:bf:6d:ae:4d:62:07:7b:f0:eb:f3:62:
b4:41:b3:24:70:8d:a6:c9:8b:fe:be:1a:56:22:dc:
8d:3f:e9:ec:29:70:94:c5:99:da:e0:dd:91:45:b2:
4f:2d:db:41:b2:47:0b:fd:f8:50:e2:6d:fa:0d:f3:
d5:d0:ec:f5:57:68:ab:cb:8d:34:c4:04:32:0b:9d:
19:99:cb:df:f0:9f:65:52:ef:87:2c:b2:3d:66:a4:
24:59:22:3d:f2:bf:f6:9d:ca:18:64:df:7c:e6:17:
df:1e:39:89:de:f9:0b:0d:45:74:eb:5a:65:e2:ee:
4a:aa:fc:9c:1b:0f:0d:00:21:03:09:42:30:6d:d0:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D1:99:6A:47:07:02:AC:A7:E9:53:4B:44:2C:C0:EE:E6:DF:02:48
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5dGZakcHAqyn6VNLRCzA7ubfAkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
89.40.70.0/24
93.114.183.0/24
188.208.103.0/24
188.213.216.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b0:a4:2d:41:d3:b0:d5:70:6e:ef:06:9a:42:71:17:14:53:
8d:02:cc:21:4e:34:ca:25:f1:a3:57:4e:cb:60:00:f4:32:bf:
9f:c6:78:62:0f:f7:b5:3b:9f:a9:ed:4d:2b:c3:0a:42:fc:37:
ec:64:a7:6b:24:ec:4f:13:92:39:10:e4:1b:28:08:64:c0:bb:
43:69:74:99:f4:31:1d:34:a1:7a:de:1d:6b:0c:9f:27:b6:91:
4f:d5:9b:e8:a1:9e:c6:34:57:37:3e:dd:24:12:0c:f4:30:74:
0b:c6:a0:6f:98:5d:75:cd:1b:ef:1e:49:9b:fe:68:41:cc:77:
3c:0a:7a:00:56:4b:d6:bc:5d:0d:16:7f:49:d7:8a:c6:3b:fe:
27:8d:7f:0c:60:b1:2d:33:0b:bc:41:98:74:3c:62:80:b9:10:
ee:41:da:b7:4c:14:ea:7d:90:71:0d:b1:1f:1f:94:97:35:05:
53:11:79:15:c9:e1:48:11:b9:f9:e6:ef:1d:08:4f:ca:96:33:
4c:f0:08:21:48:5e:b9:aa:ad:88:fc:f9:3e:9f:71:20:e0:1b:
9a:c0:41:dc:c0:20:97:35:d0:3b:3d:60:4a:53:f4:da:39:81:
92:0c:c2:82:be:4f:4f:5b:c5:10:ef:4f:a7:fb:d9:e7:ed:8a:
6e:bd:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 15:47:28 2024 by rpki-client on console-ams.rpki-client.org