Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9rkVsz7M35i2nKsZxSdPRZ3QwrU.roa
File: 9rkVsz7M35i2nKsZxSdPRZ3QwrU.roa (raw, json)
Hash identifier: /yjv+AxsODaCHhRP1nX+LMIGtSSxeCaeZ5o7eCLW9t8=
Subject key identifier: F6:B9:15:B3:3E:CC:DF:98:B6:9C:AB:19:C5:27:4F:45:9D:D0:C2:B5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01928AB00E8328A165DF2F980EC2CC495CF0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9rkVsz7M35i2nKsZxSdPRZ3QwrU.roa
Signing time: Mon 14 Oct 2024 11:00:46 +0000
ROA not before: Mon 14 Oct 2024 11:00:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 17:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:b0:0e:83:28:a1:65:df:2f:98:0e:c2:cc:49:5c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 14 11:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6b915b33eccdf98b69cab19c5274f459dd0c2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:a0:40:b8:17:34:26:24:00:50:49:36:f9:
8d:8a:31:0e:20:57:ba:d3:fd:b1:b9:0b:c9:29:57:
67:77:c8:a1:10:99:c3:4b:f4:d2:4b:21:8a:b6:3d:
8c:6f:db:b4:43:3e:60:6a:ae:62:e1:90:f5:23:35:
c7:c1:b1:9d:b3:8d:54:99:52:c9:f3:1c:81:35:2c:
7a:20:1f:8c:f1:a6:85:15:d4:30:d9:7f:f4:7d:23:
6f:95:d1:f4:a0:52:b7:36:52:3e:53:56:47:ed:44:
6b:78:31:ef:2d:36:9f:d3:9c:ec:50:2d:24:bc:32:
52:4f:bd:88:4c:37:e0:7d:68:a9:40:9f:5f:61:12:
02:1d:d6:2e:d1:e8:70:ac:43:9e:6c:f5:01:47:e9:
56:7d:48:e3:92:8a:f0:03:d5:8b:10:ea:cc:ba:95:
0e:01:40:a5:2d:b4:a3:d9:bd:3f:d4:9c:f3:ba:85:
fa:c5:8f:5a:9c:fb:38:96:1b:19:91:48:c8:60:94:
ad:f0:a8:e8:58:44:88:bd:3e:62:75:b5:2d:fc:ca:
1e:1a:cd:d8:cd:96:0b:bd:2e:07:75:ae:74:1e:17:
a5:1f:51:6f:a3:14:64:b1:1f:1b:a2:53:c8:2d:25:
c0:ee:d8:73:5f:58:8e:83:c2:9c:c1:d2:25:e3:44:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B9:15:B3:3E:CC:DF:98:B6:9C:AB:19:C5:27:4F:45:9D:D0:C2:B5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9rkVsz7M35i2nKsZxSdPRZ3QwrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
Signature Algorithm: sha256WithRSAEncryption
71:86:24:02:70:70:57:05:27:51:66:2e:dc:53:2a:ca:e6:7c:
0b:3f:55:90:bb:39:4d:04:8f:ab:46:a7:9a:e2:71:69:db:28:
53:c0:1d:62:24:35:cb:34:b8:c1:c0:a7:3c:08:be:99:67:8b:
56:66:a6:60:bb:28:c2:5d:40:fa:c3:03:aa:ba:71:44:96:24:
32:e8:52:c5:26:42:36:04:64:f7:ba:2f:dd:39:e8:82:e7:aa:
87:4a:f8:16:ef:23:be:35:6e:b7:e0:4a:10:10:f0:20:99:da:
0a:c0:db:fe:6f:36:0b:9d:41:cb:2c:a0:e5:10:95:18:18:8b:
78:5c:8d:a3:23:b3:14:d9:ed:84:91:77:5d:9f:3c:69:1b:a5:
00:7a:95:af:ba:f8:f1:40:2e:2b:3f:c5:b9:68:85:89:0f:ce:
be:2d:21:3c:02:38:c6:79:10:75:29:35:fe:fb:f7:14:5e:2f:
7e:bf:c3:ed:d3:20:b3:cf:19:11:17:85:c0:83:4d:c0:81:4d:
03:e0:9f:29:55:a3:11:fb:78:01:6b:9c:0b:08:b2:78:79:9f:
d4:4d:f2:46:5a:3a:3c:80:19:c2:b8:a8:de:63:7c:11:dd:9d:
a6:20:48:96:28:5c:dd:80:35:c4:87:06:68:52:6b:e7:78:b2:
0c:9c:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:37:18 2024 by rpki-client on console-fra.rpki-client.org