Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7xEPsxLHVVy54vfNOqt8PjZgAQk.roa
File: 7xEPsxLHVVy54vfNOqt8PjZgAQk.roa (raw, json)
Hash identifier: Pf14FLPKiYG6dHU5YWfVoFxJB69/utoij4mB2t0NmXU=
Subject key identifier: EF:11:0F:B3:12:C7:55:5C:B9:E2:F7:CD:3A:AB:7C:3E:36:60:01:09
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019072F4B773524E4A66345827E6465D0FAB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7xEPsxLHVVy54vfNOqt8PjZgAQk.roa
Signing time: Tue 02 Jul 2024 10:19:18 +0000
ROA not before: Tue 02 Jul 2024 10:19:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
86.107.101.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
176.223.66.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 07:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:f4:b7:73:52:4e:4a:66:34:58:27:e6:46:5d:0f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 2 10:19:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef110fb312c7555cb9e2f7cd3aab7c3e36600109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:d1:ee:ee:dd:ee:1b:49:0b:9d:25:20:e1:
db:64:ba:e1:55:ce:39:28:d8:a9:2b:5d:ab:dd:e8:
64:a8:96:13:b3:4a:d1:c3:ad:46:8d:bf:c8:9b:44:
c0:a4:62:73:30:6b:4c:9a:6d:d5:e6:99:4d:df:e0:
e8:eb:ed:a7:dd:14:12:f3:97:57:a5:d2:59:02:cf:
1a:87:91:5d:c1:f8:be:99:c7:90:75:43:f3:d6:dc:
d8:02:13:60:b8:6b:ed:c8:ed:1f:fa:6f:36:82:04:
80:73:f0:1a:7e:dc:36:d0:47:e1:b2:41:e2:f7:62:
c9:16:98:8b:08:97:c6:de:0e:18:54:e8:95:91:f6:
41:dd:01:a9:8a:11:39:65:2d:69:49:c3:0d:df:60:
4a:2d:1b:29:dc:62:2b:8e:84:14:f1:b5:25:1f:45:
8d:b6:ce:db:d3:b7:70:ae:5b:0b:f7:0b:ff:58:df:
60:90:4b:09:c2:c9:4b:7c:47:44:a8:49:42:3e:f3:
b2:ed:e2:fc:2c:1f:e2:f0:14:b5:7e:ed:0d:31:9c:
67:92:35:0a:29:c7:ad:70:a5:7e:6a:56:ad:33:b4:
a1:91:b2:59:68:7a:bc:ab:be:88:26:2d:a2:96:8f:
cc:87:b9:b0:43:0d:ff:5b:e0:64:ec:f1:5c:28:f7:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:11:0F:B3:12:C7:55:5C:B9:E2:F7:CD:3A:AB:7C:3E:36:60:01:09
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7xEPsxLHVVy54vfNOqt8PjZgAQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
86.107.100.0/23
89.34.106.0/24
93.114.183.0/24
176.223.66.0/24
185.198.235.0/24
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:8a:df:b5:59:19:8e:f4:de:c0:cc:ff:80:d0:1b:9a:98:9a:
61:97:92:1a:aa:c6:8b:4f:10:b2:6b:61:59:1d:d1:ea:38:ef:
ac:bf:58:74:1c:e9:ed:be:48:7b:c3:99:d3:72:fa:57:11:e8:
7f:f7:17:db:3e:99:9c:69:a1:73:fc:b7:c7:f6:4d:c8:8d:80:
6d:33:d2:b8:19:76:58:b0:10:54:ab:9e:dd:65:2e:60:b2:0a:
b4:69:3a:f6:43:ae:60:2f:23:fe:cd:b4:0d:40:1e:fd:e5:d3:
cc:03:42:bf:88:20:5b:be:6c:ec:8f:2a:66:a6:9c:4a:48:f3:
4e:f3:58:f8:21:24:6d:12:d5:94:7e:eb:d5:a8:df:c6:df:b5:
65:f2:75:d4:0a:bb:2c:6c:98:ad:aa:7a:2a:98:1f:1e:f7:0c:
8c:be:0e:f5:f6:39:d1:d0:10:a5:73:eb:df:bd:50:93:96:08:
13:1d:6f:40:6d:b4:39:9d:e9:0f:4c:9b:af:3a:3f:42:7e:91:
cb:36:a0:64:aa:de:d3:89:e9:bf:2a:dc:35:7b:25:ed:87:47:
05:1a:90:44:d6:ed:e6:01:d0:36:52:6b:11:d1:78:30:73:9c:
1e:42:9b:75:34:07:6f:23:0c:12:33:0e:aa:b7:51:07:cf:96:
bb:69:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 08:42:33 2024 by rpki-client on console-fra.rpki-client.org