Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DDxsBCntcGbqxki8yRAG79gsuzI.roa
File: DDxsBCntcGbqxki8yRAG79gsuzI.roa (raw, json)
Hash identifier: d5OFeouIiGFyGoYuLooy3M7FTDcJd2GXFagRBTY6ByA=
Subject key identifier: 0C:3C:6C:04:29:ED:70:66:EA:C6:48:BC:C9:10:06:EF:D8:2C:BB:32
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E7697D2A49DC837E9A23CFBA6679A4C54
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DDxsBCntcGbqxki8yRAG79gsuzI.roa
Signing time: Mon 25 Mar 2024 17:10:45 +0000
ROA not before: Mon 25 Mar 2024 17:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.180.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 13:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:97:d2:a4:9d:c8:37:e9:a2:3c:fb:a6:67:9a:4c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 25 17:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c3c6c0429ed7066eac648bcc91006efd82cbb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:80:fa:dc:5b:b6:92:2d:0b:5e:e3:64:ca:
a8:41:33:35:c0:85:72:3b:52:01:7b:b1:f2:9c:fd:
18:36:fe:8c:e0:d7:50:b0:5d:c0:df:15:5b:c4:2a:
1a:c8:ed:fe:af:e8:cd:69:65:df:7d:22:54:dc:d5:
02:fd:f3:43:e0:c0:7a:22:4c:cf:1e:11:b9:fe:d4:
78:63:d0:7a:3f:b1:90:45:cb:04:7e:74:72:ab:95:
e3:11:5e:29:08:71:98:47:44:53:a3:26:fb:28:7d:
2f:f9:1d:b2:8d:c4:10:56:ba:5f:1e:2f:74:ac:01:
a0:b7:4f:bb:74:e2:fb:ee:ed:f9:57:c2:22:e1:44:
51:bb:18:e4:d1:d1:e0:9e:41:cc:90:49:16:ba:9a:
5f:10:80:e2:9e:e3:0d:8a:c9:3c:31:64:e5:41:80:
cb:e7:44:e5:9f:2c:bd:40:49:49:80:c2:f0:74:af:
a1:3a:12:e6:5f:ac:97:dd:b1:2c:b6:04:47:2f:76:
49:10:23:22:b1:49:5c:40:78:58:16:ea:61:dd:61:
a7:67:bc:95:9c:93:67:3f:72:58:b7:c4:0a:41:2f:
6d:73:35:b5:fc:41:66:66:90:62:81:8f:96:cb:dc:
75:9e:c6:47:4b:bc:fe:2a:d0:9f:e6:b4:33:40:d5:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3C:6C:04:29:ED:70:66:EA:C6:48:BC:C9:10:06:EF:D8:2C:BB:32
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DDxsBCntcGbqxki8yRAG79gsuzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.198.234.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e8:b7:0f:35:21:7c:49:c0:ef:55:1c:ee:47:59:69:c6:0b:
83:4f:1c:a6:ad:5c:19:b6:f1:93:66:7c:40:e2:e6:af:d2:0f:
d1:b7:93:3e:b6:d8:ba:2d:75:7a:1f:0e:20:5a:cf:6a:a1:03:
d8:06:5e:2c:c6:53:e5:9f:bf:41:d9:b2:45:be:3a:03:e1:3a:
93:71:02:88:3d:95:3a:8b:76:fb:d4:94:1d:e4:d9:1e:89:c3:
30:26:be:95:ba:6a:a3:ff:4b:b6:c7:c2:be:bb:46:89:5f:de:
f1:60:1e:96:f0:95:5d:ce:17:53:60:77:89:a1:48:dc:9a:11:
c7:08:fc:75:dd:8e:16:58:fb:b4:b5:7c:1d:55:a1:79:12:4d:
f3:70:f2:c6:34:1f:70:1d:e0:a7:c0:cd:91:72:7f:d9:aa:8c:
02:40:e0:d1:ed:e9:fa:2f:76:42:9d:2f:52:cd:28:4b:2a:a4:
02:3c:2f:29:38:2c:05:4b:c1:99:20:61:8f:0b:4c:5c:9a:8a:
a9:01:26:cf:fe:d6:d0:e3:d3:d7:47:e9:44:b4:98:2e:7c:81:
7a:a1:72:0f:a7:ec:6c:c3:21:00:19:53:b8:49:47:fd:ab:27:
c2:83:e2:41:ec:45:15:2d:e2:a0:96:bb:0a:97:3f:6d:3f:be:
66:5c:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org