Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q9sscucZ4YG3Q9cEkH8NTYYWnF8.roa
File: Q9sscucZ4YG3Q9cEkH8NTYYWnF8.roa (raw, json)
Hash identifier: MdOl9F+Sf60kPb57j43p/8/TjtZ21LmtMNqY9DX7j9A=
Subject key identifier: 43:DB:2C:72:E7:19:E1:81:B7:43:D7:04:90:7F:0D:4D:86:16:9C:5F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01927D01A263C9802CE64E1A68AEAA123E76
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q9sscucZ4YG3Q9cEkH8NTYYWnF8.roa
Signing time: Fri 11 Oct 2024 19:15:11 +0000
ROA not before: Fri 11 Oct 2024 19:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.113.255.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.141.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 15:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7d:01:a2:63:c9:80:2c:e6:4e:1a:68:ae:aa:12:3e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 11 19:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43db2c72e719e181b743d704907f0d4d86169c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:91:60:e3:22:5e:70:25:02:79:96:72:a0:
48:80:c5:1c:0f:b4:78:ff:6c:03:61:f0:3f:a1:62:
e2:8f:fe:29:0a:c2:3d:3d:ed:c7:2a:82:69:f8:08:
cc:92:1f:c3:52:d8:f3:c8:ed:22:9a:7a:94:c8:0a:
86:b3:d0:72:ee:2c:c3:22:9c:a7:c1:00:e9:42:43:
6b:a4:ab:7b:e2:7f:2e:1a:e8:d2:04:a6:7a:f6:87:
e6:95:fa:34:3f:b1:5a:a9:e7:ff:73:57:e0:8d:45:
4f:3a:cc:9a:9a:41:6c:02:8f:aa:49:35:a2:11:ff:
76:29:83:bd:54:8c:8d:df:bb:65:55:47:7e:5d:ba:
b3:79:01:70:43:7f:84:94:9d:8c:6c:d0:fc:ba:19:
6f:68:90:34:06:04:58:8a:b6:75:19:ea:b2:43:55:
2d:83:7f:64:b1:f9:80:81:97:d6:cd:a6:4b:f8:cd:
83:48:53:26:88:a7:a6:8f:ef:90:f6:57:60:4d:07:
59:78:41:c7:dd:9f:0a:1e:c0:4d:42:02:17:30:99:
38:e2:ec:b3:3e:0d:e5:13:5f:3b:b7:7b:eb:0d:1c:
1a:be:b4:38:0d:d0:31:97:9a:9a:60:26:7f:f1:10:
08:6d:cf:78:da:5b:b7:3f:fe:ab:f0:b2:3e:6f:d6:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DB:2C:72:E7:19:E1:81:B7:43:D7:04:90:7F:0D:4D:86:16:9C:5F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q9sscucZ4YG3Q9cEkH8NTYYWnF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.113.255.0/24
93.114.183.0/24
185.141.218.0/24
Signature Algorithm: sha256WithRSAEncryption
54:78:54:7b:07:50:e1:47:94:7c:f7:ca:63:a8:8f:c7:6a:32:
88:aa:ab:4a:17:e1:7d:c6:9b:d6:b7:3e:2a:90:3e:52:ed:16:
a8:97:90:9a:1f:66:bb:10:26:49:5d:27:fa:71:c1:24:a0:d1:
f5:99:00:6e:a2:ce:eb:41:b0:0a:98:8f:52:0d:dc:66:b1:f5:
2b:aa:29:49:9b:f7:b9:b7:b6:c3:da:e1:34:e9:1f:15:73:e3:
40:a6:6e:09:8a:f7:af:47:2e:74:82:1d:f8:d5:0e:7b:54:e4:
cd:7d:89:15:55:dd:de:a8:0c:68:13:ac:6d:ff:7d:96:f4:0d:
52:72:0e:d7:99:5c:c6:e2:f9:d4:30:05:f3:61:9a:08:0a:12:
96:d0:17:31:97:51:4a:5c:d0:56:ce:0e:19:5a:78:63:ea:95:
ff:b2:86:74:ff:46:d2:c1:0b:e3:42:af:6e:e3:a1:4a:4a:56:
59:ac:ff:42:9d:79:99:23:b4:92:e5:83:f8:be:e0:c7:fa:75:
4f:c0:a3:c1:00:11:22:e2:1e:5a:63:48:9b:63:c7:7e:2e:03:
f9:23:18:d8:ba:f6:95:7a:8f:b8:dc:35:6e:c8:12:f7:2f:a3:
e1:7a:f8:03:26:01:a5:ab:10:2e:c4:1b:93:70:e3:d1:c5:96:
5e:ee:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 19:35:31 2024 by rpki-client on console-fra.rpki-client.org