Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PK80MlI2LG-Hqm2jrHw0klEolTM.roa
File: PK80MlI2LG-Hqm2jrHw0klEolTM.roa (raw, json)
Hash identifier: dVbwXl1+X2tIRoneFlWTY9qYeMiLRsRc9hh5D6kOPLg=
Subject key identifier: 3C:AF:34:32:52:36:2C:6F:87:AA:6D:A3:AC:7C:34:92:51:28:95:33
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019276780D019303714A6F7C4B1B9DBE82F1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PK80MlI2LG-Hqm2jrHw0klEolTM.roa
Signing time: Thu 10 Oct 2024 12:47:12 +0000
ROA not before: Thu 10 Oct 2024 12:47:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.113.255.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.141.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 19:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:78:0d:01:93:03:71:4a:6f:7c:4b:1b:9d:be:82:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 10 12:47:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3caf343252362c6f87aa6da3ac7c349251289533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d9:87:52:e8:c3:80:25:b5:93:b1:23:d9:ba:
2b:28:b8:65:33:38:5a:66:3e:90:8f:4a:0f:fc:f9:
56:41:77:7f:5d:8a:b3:c0:82:db:6d:ce:6f:a1:ea:
13:19:a4:de:61:5d:76:02:1e:54:4e:5e:3b:ae:b9:
ca:6e:01:f5:78:a5:5e:a8:6d:d7:59:93:c8:07:e1:
49:f2:a0:bc:af:43:02:19:ca:c4:c8:27:ca:6c:f2:
5f:16:5e:73:c6:05:00:6e:66:43:9f:6a:47:5a:f0:
35:9a:f6:83:38:96:dc:5f:bc:d7:28:fe:11:40:a7:
c4:1a:13:fe:fa:2f:ac:a2:b0:3d:5c:bf:69:a8:b7:
95:c6:5e:b4:6f:20:5b:a4:ad:2b:b9:4f:58:cb:99:
83:45:d5:3e:ca:bc:b4:c4:4e:0b:53:11:9e:d8:30:
09:bb:d0:af:54:d0:bb:41:6d:0e:ee:c7:1f:28:2e:
f7:03:02:e0:d1:d0:d2:5c:f9:4c:58:f8:eb:e9:ab:
a3:f3:ef:cf:9d:da:bb:96:54:78:d4:7d:9b:86:0e:
d5:5b:33:21:91:0d:d2:9d:4f:a7:66:05:77:d3:7b:
5a:6e:30:65:68:d6:8c:67:b6:72:01:58:3b:e4:6a:
ed:19:45:b1:6e:10:91:cc:e4:70:ac:8d:81:57:d5:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AF:34:32:52:36:2C:6F:87:AA:6D:A3:AC:7C:34:92:51:28:95:33
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PK80MlI2LG-Hqm2jrHw0klEolTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
91.132.51.0/24
93.113.255.0/24
93.114.183.0/24
185.141.218.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:3c:da:a5:6e:17:60:dc:b7:5f:8e:a5:3c:81:3d:90:a1:2e:
eb:04:d4:9a:24:51:cf:b9:56:87:5a:a6:bd:dd:25:ff:07:9b:
c5:d4:0f:71:24:77:5a:a8:98:6e:36:70:53:30:6b:dd:f5:d4:
87:2d:01:ee:bf:e6:e8:a8:3a:4c:5b:4f:7b:da:35:03:53:89:
55:0e:f9:ea:0f:3d:98:b3:86:f4:56:cc:e1:f7:7e:d1:63:06:
e3:b8:e8:c4:cf:e4:72:15:81:62:45:77:ba:5a:6b:14:92:f0:
d4:f7:cd:8a:80:48:bd:cf:d6:3f:fe:fa:3e:2f:a3:29:93:63:
3e:c7:3f:a1:1c:76:c3:02:f6:2d:1d:ff:7a:21:19:b3:a5:a9:
05:f6:78:ac:1d:bc:f6:2b:a6:94:38:94:39:b0:9f:2f:cb:95:
3f:fd:26:8d:55:29:5a:af:6d:e8:ef:8a:dd:66:03:49:0e:4d:
c7:ef:3e:60:95:61:ad:c6:24:49:ac:21:de:2c:ca:a1:37:90:
c8:41:fe:11:09:8d:92:5f:9c:6f:1f:f7:99:e4:4e:40:6c:a4:
ec:e6:c4:87:d4:86:d5:97:aa:0e:c8:64:77:9c:d8:91:85:88:
9f:ab:b1:bf:13:67:47:3d:43:44:6b:3a:78:ce:ec:53:6f:67:
7e:2c:6f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 20:05:57 2024 by rpki-client on console-fra.rpki-client.org