Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/91MkCFvRg-t2csnLXlm6PBD4Dbo.roa
File: 91MkCFvRg-t2csnLXlm6PBD4Dbo.roa (raw, json)
Hash identifier: IZgfSeN+jX9tSJJojf8BYFQllL/yuuUUnW+g6RtLdXc=
Subject key identifier: F7:53:24:08:5B:D1:83:EB:76:72:C9:CB:5E:59:BA:3C:10:F8:0D:BA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0191BD24AB71E77FE79553438DEED046E964
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/91MkCFvRg-t2csnLXlm6PBD4Dbo.roa
Signing time: Wed 04 Sep 2024 13:06:22 +0000
ROA not before: Wed 04 Sep 2024 13:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 16:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:24:ab:71:e7:7f:e7:95:53:43:8d:ee:d0:46:e9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 4 13:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f75324085bd183eb7672c9cb5e59ba3c10f80dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:5c:99:f5:1f:8a:0e:03:84:35:1e:a9:af:
33:01:b1:19:99:16:85:bd:c3:01:88:a6:d9:91:d0:
2a:91:bf:06:c4:de:d2:d0:d8:4c:f2:f8:11:65:1d:
04:e5:b6:88:2d:75:68:16:ba:29:ef:0e:2d:e6:44:
f4:a7:c4:16:ca:80:72:41:28:47:c7:ca:45:5f:40:
d3:96:96:04:fb:56:b0:b3:9f:0c:9b:fd:1e:5b:ae:
65:b4:3a:db:6c:7f:16:d7:4b:4b:c5:8d:e0:89:15:
ab:ac:8b:65:db:82:e4:4f:5c:ae:cd:fb:ee:8d:cb:
6e:b0:50:fb:3d:48:ab:ec:ee:bb:ce:c0:0e:6a:c9:
f6:19:47:96:9c:f4:b2:74:60:a2:9d:c4:63:61:9b:
57:eb:91:3b:9b:94:13:a2:72:fa:0d:1e:95:4f:5d:
fd:fa:57:41:5d:49:c4:f7:ce:29:28:d3:11:5a:5f:
fd:65:91:02:b9:e1:b9:93:5c:97:5b:a6:d6:b6:69:
f7:57:be:d2:72:aa:a8:73:86:7e:35:86:9c:d4:de:
55:a9:b1:53:4a:65:a3:30:7b:84:e4:7d:03:e6:be:
08:1d:0b:63:ec:93:a0:52:84:b8:e7:39:8a:97:d5:
11:77:7c:6b:45:6d:c2:36:72:53:71:0d:69:39:c0:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:53:24:08:5B:D1:83:EB:76:72:C9:CB:5E:59:BA:3C:10:F8:0D:BA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/91MkCFvRg-t2csnLXlm6PBD4Dbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
89.40.70.0/24
93.114.183.0/24
188.213.216.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fc:d7:53:99:c6:09:f8:e0:b5:dc:56:9b:f5:43:14:c0:4e:
5a:d9:36:e5:99:bf:1a:83:11:80:a0:5c:47:f7:6f:b9:48:17:
e2:b2:c7:11:a4:e5:d6:5c:0b:0a:21:3c:a9:38:17:77:61:85:
cb:d1:59:17:95:3d:3b:5d:22:d4:5f:6c:53:86:c6:10:68:bf:
9c:f6:c2:0e:5b:84:de:5b:88:bc:87:0b:a2:10:3c:a8:b2:67:
e3:e6:a7:57:f7:d2:1c:58:ff:56:1e:4d:8e:3c:fd:86:fd:4c:
d6:6c:4b:3e:f3:93:60:51:16:56:97:02:33:5b:2a:bc:0e:79:
03:7d:df:51:38:9a:59:d1:20:c3:e9:2c:f0:1a:c3:f0:f0:91:
b3:8e:95:d1:9f:bb:14:39:ce:79:13:29:ad:11:95:29:06:ce:
f2:ce:da:7c:5b:16:fa:cf:c0:c5:b3:ba:87:7a:c2:fa:df:ee:
d1:ee:3b:2f:83:6d:d3:5a:ed:93:d9:f8:ee:0a:a2:99:14:1d:
23:b5:e8:47:2c:06:87:cc:90:38:b2:ff:7b:95:3b:53:a8:5d:
2a:e2:ae:81:1b:87:f9:48:34:88:1f:27:1c:40:86:0d:4f:40:
c4:c3:21:40:3a:1d:57:44:d1:f2:c4:27:ec:5f:74:22:f6:69:
28:65:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 19:15:49 2024 by rpki-client on console-ams.rpki-client.org