Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BeVEcDlCZnHL_jovLvHeEbkyhE0.roa
File: BeVEcDlCZnHL_jovLvHeEbkyhE0.roa (raw, json)
Hash identifier: 5SSIn9VFKIy8uk7OW6Pix/y5jBDaNgAWu1bA2QM9ZdE=
Subject key identifier: 05:E5:44:70:39:42:66:71:CB:FE:3A:2F:2E:F1:DE:11:B9:32:84:4D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E616AFC26C79AB1D0BBD1835C594EA783
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BeVEcDlCZnHL_jovLvHeEbkyhE0.roa
Signing time: Thu 21 Mar 2024 14:29:45 +0000
ROA not before: Thu 21 Mar 2024 14:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.180.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 10:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:6a:fc:26:c7:9a:b1:d0:bb:d1:83:5c:59:4e:a7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 21 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05e5447039426671cbfe3a2f2ef1de11b932844d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:04:30:cf:d3:a9:29:40:97:e3:b6:b6:da:
b9:4e:a3:bf:37:c9:e3:b1:e1:8c:24:59:bb:cf:5e:
bd:7c:f1:b9:5c:c9:9e:4f:de:34:38:05:28:6e:af:
9e:a0:45:74:40:b1:44:95:e7:c8:e6:56:1e:ed:28:
35:83:db:56:3c:a3:c6:4b:ba:77:eb:44:f4:da:0c:
5b:03:b8:7a:d7:3c:8f:dc:97:95:e7:29:83:c3:b6:
58:b3:86:68:39:b3:0d:27:a8:60:1e:7b:62:3a:63:
f3:7b:74:3f:5c:1d:0a:a0:90:59:d4:3a:72:95:8a:
46:7e:2b:e5:76:9a:e3:9d:60:2a:ff:91:c7:f9:9e:
a1:89:be:09:fb:f4:c3:85:c6:9f:00:19:a9:f1:1c:
a8:36:cb:ac:09:fa:cb:f4:2e:98:aa:c3:54:60:48:
6b:89:6b:41:32:01:3f:96:6a:da:0c:71:a1:aa:8a:
bb:9b:35:ab:64:cf:46:73:f5:76:21:74:a8:3b:b2:
de:f7:44:23:9b:66:43:94:6c:b3:06:3d:d1:c7:a7:
3a:15:3d:08:d3:68:4c:18:26:60:6f:ec:65:c4:69:
29:ec:3a:b8:2c:71:bc:70:03:64:44:a7:9c:8d:b4:
09:30:50:03:4a:4c:28:9b:6e:82:55:86:00:79:d8:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E5:44:70:39:42:66:71:CB:FE:3A:2F:2E:F1:DE:11:B9:32:84:4D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BeVEcDlCZnHL_jovLvHeEbkyhE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
Signature Algorithm: sha256WithRSAEncryption
78:63:ce:1b:98:22:eb:c2:89:71:84:d4:e8:23:45:be:e3:90:
39:22:f5:24:ed:8a:ff:3f:e9:c0:1f:45:62:66:0b:0b:64:d1:
16:e9:97:13:f1:a5:c5:c3:8a:f7:bd:93:6f:47:6d:13:87:6e:
11:e0:16:0a:94:0a:eb:dc:c3:c9:ac:4d:e7:d6:30:e6:32:f5:
54:d8:b0:77:0a:e7:ca:75:9b:50:db:a6:1c:a2:fb:51:d7:cc:
eb:9f:26:08:a0:70:d7:9a:30:85:14:e8:e5:ab:92:94:57:6c:
9f:fb:b0:11:7b:de:c4:b2:92:79:1f:f7:69:df:35:e7:4b:83:
82:93:0a:36:b1:44:c1:e8:84:7b:a3:76:4a:b2:92:5f:52:fa:
1d:d6:12:4e:18:3b:e2:e0:53:c8:ea:2e:3c:c5:aa:5e:a9:76:
ba:17:02:f9:f8:50:bc:be:95:0c:88:36:2a:4f:26:87:3b:83:
f1:77:5b:e5:ce:c5:9d:b7:d4:dc:e4:2a:f8:25:ed:33:c3:5a:
62:47:3b:33:01:ee:06:eb:20:b4:f0:0f:7a:ad:2d:ab:49:ee:
c3:2c:af:8e:3d:ca:10:80:de:4c:87:f9:d2:65:04:93:83:ac:
c9:b4:e1:92:16:86:58:3f:f4:37:a7:01:77:2e:a2:1a:e4:46:
3c:06:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org