Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FuKp4jE7sjuzncyBGRefDpCkYqo.roa
File: FuKp4jE7sjuzncyBGRefDpCkYqo.roa (raw, json)
Hash identifier: WyV1Uea5noUKu4Xwhn8aLLSygnkULjweHkNFD2HS+Zs=
Subject key identifier: 16:E2:A9:E2:31:3B:B2:3B:B3:9D:CC:81:19:17:9F:0E:90:A4:62:AA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01923A43B571222A8DC28EF286DBF7226D99
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FuKp4jE7sjuzncyBGRefDpCkYqo.roa
Signing time: Sat 28 Sep 2024 20:12:48 +0000
ROA not before: Sat 28 Sep 2024 20:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
45.144.173.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.176.214.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 09:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:43:b5:71:22:2a:8d:c2:8e:f2:86:db:f7:22:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 28 20:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16e2a9e2313bb23bb39dcc8119179f0e90a462aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:b4:87:2a:19:56:f8:36:64:60:33:2d:bb:
3b:d7:b1:fb:78:23:7a:4a:2e:2f:88:60:86:ce:21:
31:dd:26:4a:27:a5:f2:e0:0e:5c:cf:ba:d6:bb:b9:
d7:2f:e9:f7:3b:6c:c3:a5:05:4b:fa:b5:de:1b:4b:
48:46:3a:e6:45:07:13:aa:5d:19:6a:21:59:55:28:
53:37:7d:7f:49:a9:45:d2:72:5f:d1:af:c2:67:6e:
04:6d:08:96:73:2f:6d:97:b4:2b:0c:98:e3:a6:84:
6f:6a:73:b8:91:28:b1:a4:b4:e1:e4:f6:20:e1:b0:
9b:dc:50:89:e7:ca:95:88:d6:33:b5:65:f1:e8:cf:
99:19:cc:dd:53:7f:cd:38:bb:54:7f:2e:a9:c2:a8:
08:e4:61:90:7b:9d:64:da:9e:b6:61:d3:92:2c:39:
10:ea:ef:a8:26:01:a5:15:dc:cb:07:da:7d:c8:8a:
8a:28:fc:34:8d:14:97:db:9d:77:15:2a:7f:1f:bf:
6a:54:08:3b:e8:86:a8:cc:34:63:b7:21:a9:bf:2a:
51:00:ae:72:b3:04:bc:35:5f:35:d1:8a:de:a3:7b:
8d:3f:63:cd:db:29:24:ea:ad:eb:c4:3b:f6:95:44:
c4:62:d3:85:e6:33:d4:20:ec:0b:c6:3b:bc:37:6b:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:A9:E2:31:3B:B2:3B:B3:9D:CC:81:19:17:9F:0E:90:A4:62:AA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FuKp4jE7sjuzncyBGRefDpCkYqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
45.144.173.0/24
77.81.100.0/24
89.34.106.0/24
91.132.51.0/24
93.114.183.0/24
94.176.214.0/24
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:85:b0:80:7c:7e:e0:8d:2c:dc:4c:5b:43:38:51:88:39:70:
fe:29:92:3e:6b:88:93:26:27:d3:0d:b4:ff:64:7b:83:fc:0f:
b3:d1:45:38:13:5f:2c:b5:69:cd:e9:6c:86:07:2a:e1:32:4f:
ae:32:b1:b9:73:d7:f3:e1:13:83:c7:11:b2:3c:23:2f:11:0d:
36:64:1c:1b:fd:29:89:17:33:07:ca:1a:cc:a0:5d:55:0a:ce:
f5:2f:05:6d:05:fd:e5:51:da:ac:92:67:69:0f:50:09:01:ff:
76:14:fa:39:eb:37:05:d8:06:c8:7d:06:44:d3:02:a9:49:40:
ad:40:36:1e:6b:a6:c5:c5:77:21:d8:33:2e:43:8e:55:e4:5b:
c2:3c:e2:ba:40:a2:e0:ca:9b:7a:ca:f0:32:0f:74:8b:40:af:
75:8b:fa:d4:38:f4:aa:3e:c4:93:2f:b0:f3:d2:3a:78:84:3f:
82:af:f2:98:b3:9c:ab:6c:e7:93:b9:30:04:ae:43:f2:22:20:
1d:8e:96:e7:75:7c:32:a2:75:00:02:2a:29:63:0d:a4:41:93:
b3:79:ae:2b:bd:58:c9:82:43:b2:86:93:72:6b:ee:c1:25:be:
61:3b:71:db:e0:f6:cb:29:9c:51:12:c2:bc:ad:63:9e:77:28:
45:4b:2d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 11:05:00 2024 by rpki-client on console-fra.rpki-client.org