Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6tLtqLsUnS0_dwdqWK2k0XlC_P8.roa
File: 6tLtqLsUnS0_dwdqWK2k0XlC_P8.roa (raw, json)
Hash identifier: 5esbXmXJTCPji/YqkmzhTUsKOduhx2peJKMYmaIocrc=
Subject key identifier: EA:D2:ED:A8:BB:14:9D:2D:3F:77:07:6A:58:AD:A4:D1:79:42:FC:FF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01922DC4DB406F40158A99EA8F4E3EEFB819
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6tLtqLsUnS0_dwdqWK2k0XlC_P8.roa
Signing time: Thu 26 Sep 2024 09:58:48 +0000
ROA not before: Thu 26 Sep 2024 09:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 31.14.10.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
45.144.173.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.176.214.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Sep 2024 20:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:c4:db:40:6f:40:15:8a:99:ea:8f:4e:3e:ef:b8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 26 09:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ead2eda8bb149d2d3f77076a58ada4d17942fcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:b8:cb:3f:0c:19:8c:79:ce:33:4b:27:1f:
d2:b0:79:3a:54:f8:15:7d:93:29:26:60:ef:45:e2:
97:31:4d:9b:d6:a5:22:30:a5:58:c8:d0:91:66:6f:
e9:ab:aa:34:c4:c8:b5:ce:c5:5e:99:38:00:cc:e0:
68:09:99:0c:3b:32:30:08:43:72:74:3e:9e:39:3c:
c5:a4:fb:ad:a6:cb:78:3b:af:3f:3e:b6:79:b8:bb:
a6:6b:02:38:11:d1:a6:0e:29:dc:d1:90:b7:1c:49:
82:c1:da:44:57:6e:64:e8:95:e5:ec:d5:5b:ad:34:
00:36:50:b3:41:41:0c:99:9e:4c:c9:72:2c:7b:e3:
ca:d8:64:65:b4:c9:09:92:f7:ee:65:7e:98:0e:75:
fa:23:e3:83:e9:2d:dd:12:c4:da:eb:ba:79:4a:cc:
0a:2e:84:53:fb:0e:d4:05:16:51:05:a9:00:36:04:
e3:90:c9:be:6c:97:fc:eb:43:b7:c2:d6:81:9c:ec:
2c:ad:ed:4d:5c:ae:2c:fb:6d:cd:db:1f:fb:c1:bd:
53:d7:97:cb:3e:a7:42:15:c8:4f:b6:24:70:2e:8b:
1e:8a:9f:72:e6:b5:08:2f:4f:cb:ef:2d:04:a3:53:
27:7b:68:70:8c:77:4f:04:11:72:0a:0e:e5:03:24:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:ED:A8:BB:14:9D:2D:3F:77:07:6A:58:AD:A4:D1:79:42:FC:FF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6tLtqLsUnS0_dwdqWK2k0XlC_P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.10.0/24
45.135.182.0/23
45.144.173.0/24
77.81.100.0/24
89.34.106.0/24
91.132.51.0/24
93.114.183.0/24
94.176.214.0/24
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e7:eb:9e:c9:6a:14:54:c2:93:f3:a8:d7:c1:dc:92:ad:9a:
97:36:ab:4b:7b:be:46:7c:4e:3d:37:8b:7c:40:24:b8:d8:19:
97:83:2f:64:4a:5a:34:2c:1f:38:57:b8:2a:7a:4a:bc:8b:1a:
fa:bb:29:83:7e:72:3c:d8:d9:95:b4:e7:9a:d6:77:65:ae:8a:
fa:27:0c:e3:fc:fb:4d:66:c8:a3:a3:16:39:68:46:2e:f9:51:
ac:b3:28:6b:ef:04:bd:4e:c7:51:ea:ab:95:22:34:79:46:08:
c7:ee:f9:05:11:18:9e:0d:98:c1:60:7c:95:1e:1e:96:19:fc:
78:7c:6a:bf:7f:73:94:60:b1:09:f2:6a:d0:d3:e0:5d:ba:dd:
92:de:07:64:b2:d2:02:92:52:74:b2:95:87:2c:63:f9:c4:9e:
60:a4:20:1e:34:54:f7:8b:01:49:b7:f2:4b:61:90:80:06:b8:
5f:f3:1d:04:b8:eb:95:ff:37:35:df:65:61:26:b3:98:91:48:
49:39:96:15:2c:d4:17:bb:08:d5:e2:4a:95:34:ad:59:cd:d3:
02:a2:24:a0:de:95:77:de:ea:bf:c1:01:a4:b0:1e:72:73:4a:
34:86:c7:13:51:2b:21:f6:a8:74:0c:05:1f:e1:27:d3:26:88:
97:05:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:55 2024 by rpki-client on console-fra.rpki-client.org