Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ly91dEztETSGze4f1JloXFQnTo8.roa
File: Ly91dEztETSGze4f1JloXFQnTo8.roa (raw, json)
Hash identifier: nLbmG5SoRIf6vrAsWlA9fbyflagM2YutDOVd/0kb4Gw=
Subject key identifier: 2F:2F:75:74:4C:ED:11:34:86:CD:EE:1F:D4:99:68:5C:54:27:4E:8F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190BF5321331DD8FE4EA60B3E6F0C42564F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ly91dEztETSGze4f1JloXFQnTo8.roa
Signing time: Wed 17 Jul 2024 06:13:34 +0000
ROA not before: Wed 17 Jul 2024 06:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
45.144.173.0/24 maxlen: 24
86.107.101.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.113.57.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 11:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:53:21:33:1d:d8:fe:4e:a6:0b:3e:6f:0c:42:56:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 17 06:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f2f75744ced113486cdee1fd499685c54274e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:ab:45:95:28:a7:9c:af:32:f3:94:40:d9:
36:34:a7:65:3d:d9:8d:95:f3:b7:d1:08:7d:df:ba:
89:78:fa:16:18:1f:fe:3f:89:85:f4:8f:2d:e0:88:
71:83:f5:5d:7a:9d:9c:5a:0a:c5:45:f4:23:97:5f:
45:c7:f0:9d:5e:10:52:dc:a8:86:f2:1d:17:36:4a:
ce:23:30:15:90:36:c0:f0:85:3c:e7:d4:ce:f5:5d:
c6:6b:8d:92:96:d4:6e:9f:ec:a7:56:97:9f:38:f5:
9d:78:0a:90:17:1e:57:47:21:b4:51:4c:c2:b0:fb:
3a:37:e4:5b:86:11:60:49:6d:3d:33:44:22:14:84:
d1:4b:9a:1c:67:71:a4:fe:4c:2c:73:27:a2:65:02:
13:72:af:94:b0:af:81:eb:b3:9b:42:ed:22:51:5a:
c5:03:f1:f0:49:ad:bd:de:19:8b:0b:a1:a5:7e:47:
b2:2d:9d:7e:a2:75:e0:ba:ef:e2:dd:cc:fb:ae:ce:
b3:7a:2c:b9:e8:ff:a3:2b:54:5a:a0:8e:32:d7:fd:
42:5f:06:f3:55:91:75:ee:03:5e:b4:be:9f:c8:0b:
c0:34:f5:9d:a3:24:7d:fc:40:67:67:75:99:38:1f:
7d:d7:32:2d:54:fc:ea:a9:d6:9b:ef:ff:b9:71:9d:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2F:75:74:4C:ED:11:34:86:CD:EE:1F:D4:99:68:5C:54:27:4E:8F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ly91dEztETSGze4f1JloXFQnTo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
45.144.173.0/24
86.107.101.0/24
89.34.106.0/24
91.132.51.0/24
93.113.57.0/24
93.114.183.0/24
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b1:b3:69:04:1f:e7:ca:cb:7a:e3:78:98:5e:12:f2:e0:82:
86:ee:e8:ca:d1:bd:54:2e:b9:88:6a:cd:80:9c:65:b7:ae:c3:
0f:ce:79:73:26:a2:b2:76:e3:d0:4c:3d:3e:1f:d0:98:d1:31:
2f:25:e5:67:7d:93:14:68:3f:a6:25:ec:f8:c0:70:8d:2b:d4:
61:d8:ac:a5:2d:05:6c:00:a1:cf:ad:9a:50:eb:52:90:a2:8d:
cd:21:8e:2b:2f:de:fb:82:b3:c5:3c:40:81:6f:52:f3:7a:1d:
68:fa:06:67:cd:a3:9d:06:ce:89:27:da:39:eb:96:10:a9:3d:
49:cf:0c:a5:e0:cc:8c:cc:03:76:ac:a6:cb:9a:8c:ca:74:bb:
8a:f9:01:e1:f0:ea:70:7c:0e:4d:d3:47:50:ae:ee:a0:72:92:
0b:15:bd:5a:64:f7:54:94:3b:45:6f:d2:93:61:d5:bc:cc:a9:
50:bd:32:fd:f2:90:23:b5:5b:a4:ab:61:3d:c5:9b:ae:9b:7c:
7b:60:08:60:32:d5:96:80:38:5b:42:a9:d8:4b:3e:c7:0f:ba:
9f:7a:c0:7e:34:c1:a9:4f:1d:d7:92:f6:4b:d7:05:9e:9f:35:
1c:19:30:35:ec:7b:e4:fa:db:70:c9:c1:88:6b:14:ba:88:f2:
44:a5:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 14:07:27 2024 by rpki-client on console-ams.rpki-client.org