Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/N2iaiZb8VUUwuNiGrcYYEnS0yuo.roa
File: N2iaiZb8VUUwuNiGrcYYEnS0yuo.roa (raw, json)
Hash identifier: 5blJ1V+ryl/c85fJy4BARKorOxGWedjheNzr7syeAK8=
Subject key identifier: 37:68:9A:89:96:FC:55:45:30:B8:D8:86:AD:C6:18:12:74:B4:CA:EA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FD9615D8C413715150BBF5536BF872B0E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/N2iaiZb8VUUwuNiGrcYYEnS0yuo.roa
Signing time: Sun 02 Jun 2024 14:36:27 +0000
ROA not before: Sun 02 Jun 2024 14:36:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.57.241.0/24 maxlen: 24
45.135.181.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
45.144.172.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 13:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:61:5d:8c:41:37:15:15:0b:bf:55:36:bf:87:2b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 2 14:36:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37689a8996fc554530b8d886adc6181274b4caea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:6f:45:d5:62:67:43:5d:60:24:04:2f:5c:
c2:10:61:ed:ba:af:d3:bf:07:65:d4:25:b8:70:30:
df:1a:04:2a:39:16:06:35:3f:af:7e:db:c7:d5:3a:
b5:df:bf:33:2e:2e:7f:f9:bf:e9:93:0a:5c:81:0e:
df:0a:26:c0:f3:3e:75:6b:49:86:e6:05:43:68:a8:
ad:5d:e7:70:25:57:a6:88:ad:60:ee:67:0b:47:b8:
1c:dc:1d:bb:d8:2a:a4:8d:fd:d3:b9:46:3d:a3:ea:
2d:00:a5:e1:e3:75:54:3d:d4:fb:52:61:0b:5a:a8:
93:24:ba:02:d9:79:af:da:f8:ef:97:37:7a:72:4f:
e1:ef:64:21:4a:1a:be:b4:52:04:45:9b:df:70:4f:
58:b7:a4:56:90:44:46:2b:34:d0:84:05:33:3e:ae:
59:78:b8:c3:5c:4f:9f:19:48:b2:6f:b2:9e:38:c6:
93:cf:44:26:79:59:d0:91:55:2c:c7:23:73:10:03:
23:e5:c7:c7:f6:c0:c8:e8:fa:9f:07:64:1e:88:d2:
9b:c9:60:82:3d:2a:2a:24:79:20:cf:63:fd:ee:da:
cd:23:ea:ca:53:fe:51:7c:59:32:93:76:be:82:3b:
57:f6:93:35:91:f4:6c:cb:bf:6e:e7:32:11:ca:7e:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:68:9A:89:96:FC:55:45:30:B8:D8:86:AD:C6:18:12:74:B4:CA:EA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/N2iaiZb8VUUwuNiGrcYYEnS0yuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
45.135.181.0-45.135.183.255
45.144.172.0/24
86.105.4.0/24
86.107.100.0/24
89.34.106.0/24
92.114.32.0/24
93.114.183.0/24
94.177.51.0/24
188.64.142.0/24
188.208.103.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
46:44:d0:7e:c5:4b:0d:ea:e1:d6:59:73:4b:8d:9e:71:31:ff:
91:57:7c:bd:f4:85:7a:0f:54:1d:42:50:14:bf:d4:b7:cd:ba:
8f:56:14:44:c0:6a:06:03:7e:74:ef:97:49:2e:3e:3f:0b:39:
74:35:0c:9a:2b:0e:3f:61:55:84:87:9c:38:f8:7e:2d:db:61:
67:fd:60:e6:c8:72:91:96:59:71:11:78:5b:76:c6:a5:fb:ec:
55:fd:ad:33:25:6c:eb:d4:67:08:d5:8a:9b:92:6e:29:ce:aa:
a7:73:ba:b3:82:2f:17:13:92:da:e1:62:e5:06:f7:d1:de:2e:
63:66:d5:dc:fb:64:7e:13:91:87:ce:24:bb:2d:7c:29:ae:e1:
f5:fb:66:c7:f8:8b:b0:6f:a0:11:db:41:09:8e:ba:c8:d9:23:
13:e6:4e:26:16:ba:20:79:b9:16:b7:93:db:82:46:d3:90:25:
6d:41:22:35:9b:c5:a0:44:a1:41:36:30:3a:98:75:33:d9:91:
e6:42:2b:bb:b4:ff:c7:b1:6d:87:c1:63:78:7b:b8:6e:cb:d4:
47:c1:f7:6d:0e:ca:bb:10:71:e6:68:1e:c7:1f:08:0e:ab:e4:
d7:b4:00:65:26:28:0a:14:06:47:bc:ed:bb:8b:84:ae:2b:44:
d0:1b:2d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org