Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Gwn_kuxeEprJXJdLcCuh3q_C4Oc.roa
File: Gwn_kuxeEprJXJdLcCuh3q_C4Oc.roa (raw, json)
Hash identifier: BqBbX4miYrkZRqEQmY8Zubh0zR3WK+ZeR2jL6HbPDhQ=
Subject key identifier: 1B:09:FF:92:EC:5E:12:9A:C9:5C:97:4B:70:2B:A1:DE:AF:C2:E0:E7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018EE178B0B5C15975E45093F777B13357FC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Gwn_kuxeEprJXJdLcCuh3q_C4Oc.roa
Signing time: Mon 15 Apr 2024 11:16:06 +0000
ROA not before: Mon 15 Apr 2024 11:16:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 10:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:78:b0:b5:c1:59:75:e4:50:93:f7:77:b1:33:57:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 15 11:16:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b09ff92ec5e129ac95c974b702ba1deafc2e0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f9:c7:5c:de:39:6f:70:e7:34:e0:3c:0d:af:
a2:51:c9:46:bd:28:f7:3a:19:31:24:0e:6a:33:47:
f6:07:ce:03:8e:34:16:29:a2:20:07:88:6b:f7:36:
23:83:c8:b1:02:65:50:fa:71:64:c2:a5:bc:8c:9a:
bc:5a:7e:93:83:a7:83:4f:5f:3c:ac:ec:76:de:ce:
5d:ac:18:30:5a:89:a8:d6:8e:85:12:0e:1c:32:76:
16:8d:90:dd:49:38:6a:b6:07:f7:89:05:4f:4b:11:
07:b4:0e:22:4a:ef:59:03:35:85:51:5a:d9:66:e1:
09:16:71:a3:31:e8:3a:dc:c8:9f:ab:5b:de:3d:6e:
7b:59:2c:8a:e9:fc:d1:fd:59:4b:ee:99:a8:88:c7:
60:db:cc:4c:28:72:b5:ce:60:12:d6:80:20:41:82:
c1:46:a8:c3:cf:36:f8:66:74:14:36:bb:be:4b:0c:
34:08:74:6b:a7:9d:57:d8:c8:6d:83:10:84:d1:dc:
5c:4d:38:d1:24:45:ac:cb:ca:96:df:d2:1f:5c:94:
c5:60:a9:71:e1:79:fa:d8:6f:e5:a1:3b:e8:76:f7:
81:84:80:ba:ff:da:5f:0b:22:8f:ee:36:5a:73:7a:
21:e4:f6:82:96:47:05:c2:b3:aa:3e:2a:8b:cf:0a:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:09:FF:92:EC:5E:12:9A:C9:5C:97:4B:70:2B:A1:DE:AF:C2:E0:E7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Gwn_kuxeEprJXJdLcCuh3q_C4Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
86.105.4.0/24
89.34.106.0/24
93.114.183.0/24
185.198.234.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2e:8d:0d:eb:2f:15:af:f8:df:4e:06:54:dc:27:cb:16:fc:
db:fa:db:85:b2:de:74:40:a8:f9:85:59:f0:d1:06:67:83:23:
e8:d7:a8:27:b9:46:97:d0:14:5c:58:38:d3:3e:1b:6c:b4:87:
03:b0:52:0f:47:10:af:fd:50:4c:86:9d:64:17:57:93:91:82:
6d:82:51:98:fc:f7:1f:8b:ae:6d:71:0a:71:e3:46:04:33:b0:
04:9e:05:ae:2d:81:95:b1:7e:a0:88:93:71:26:fb:7a:11:9e:
b6:34:10:f2:e6:a0:da:be:7f:ad:66:ee:92:31:2d:9f:2e:d3:
ca:9e:e4:66:0d:a5:57:fb:bf:41:59:a7:80:f5:f1:f3:fd:5f:
5a:0c:1a:1e:e9:09:13:08:a8:08:23:2c:77:1a:15:61:6c:77:
f4:64:03:ac:ad:a5:6d:f4:22:a2:38:d4:af:2c:3d:b5:50:91:
69:b7:d0:8c:3b:40:09:4b:d0:c0:8a:ae:4e:08:80:b0:79:c1:
fb:fa:8b:49:58:7c:61:59:a3:7a:ff:20:45:a1:36:b5:d2:eb:
f2:5a:e6:10:02:05:03:79:8e:61:47:ad:92:f3:ee:60:4e:25:
38:fb:af:61:ad:45:7c:57:f7:80:d9:57:fd:82:08:c8:53:62:
71:1b:71:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org