Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Sj73rT9Ndv3YjSGYcurjvq22KNY.roa
File: Sj73rT9Ndv3YjSGYcurjvq22KNY.roa (raw, json)
Hash identifier: xraHVHGv+w942/CeUGOtNVxZ6EMg+KNjezSQ//FPUrE=
Subject key identifier: 4A:3E:F7:AD:3F:4D:76:FD:D8:8D:21:98:72:EA:E3:BE:AD:B6:28:D6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019271D845EE5A46F99617DB06F718953700
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Sj73rT9Ndv3YjSGYcurjvq22KNY.roa
Signing time: Wed 09 Oct 2024 15:14:12 +0000
ROA not before: Wed 09 Oct 2024 15:14:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.113.255.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.141.218.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 12:47:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:d8:45:ee:5a:46:f9:96:17:db:06:f7:18:95:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 9 15:14:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a3ef7ad3f4d76fdd88d219872eae3beadb628d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:fd:42:1a:1d:1f:5b:6e:f0:8c:66:e1:fe:
79:06:41:69:5d:52:8f:bc:7f:d8:30:5a:df:c9:e3:
5c:e8:22:0a:9e:c9:07:18:57:16:3e:04:b4:6a:0b:
1c:13:69:70:b1:4d:bc:14:dc:5c:ad:3d:fe:5c:a8:
db:30:92:f7:1a:66:ac:72:a5:6a:ec:ed:3f:ab:7f:
bc:e2:c2:93:93:65:a9:bf:9e:d0:d1:28:01:ac:0d:
81:9b:fc:a1:51:c6:2c:e8:19:7d:39:1b:c5:e9:54:
22:42:e8:15:99:a8:13:87:f4:b8:bb:75:18:8f:25:
85:c8:60:f2:58:f5:d1:e0:a6:64:d2:74:17:e5:bf:
b6:ea:70:8d:74:c2:05:1e:27:33:40:7a:00:62:d1:
d0:bd:1c:b0:9f:0b:68:01:69:19:6c:0b:a5:bf:77:
61:71:71:df:00:d0:af:27:cd:01:a3:ee:28:8b:21:
5e:b7:6c:dc:de:79:82:3d:8d:7b:fb:04:e1:37:69:
47:29:37:63:7b:a9:eb:75:8d:4a:59:3c:5b:64:96:
34:3b:56:aa:c0:78:be:75:36:a3:4e:bb:28:d3:8d:
e7:59:78:9d:ba:6a:89:9e:86:02:55:16:eb:46:7a:
82:74:bb:94:7d:fd:e2:6d:85:70:a6:ba:32:6e:95:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:F7:AD:3F:4D:76:FD:D8:8D:21:98:72:EA:E3:BE:AD:B6:28:D6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Sj73rT9Ndv3YjSGYcurjvq22KNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
91.132.51.0/24
93.113.255.0/24
93.114.183.0/24
185.141.218.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:5d:b0:69:e4:a9:82:8c:85:e3:32:b0:68:35:6b:a4:97:f4:
10:82:0b:99:55:c2:e1:99:c7:d9:75:4f:36:d9:89:ce:d1:95:
6c:88:96:96:5a:67:03:9f:12:a1:31:3b:9f:d8:cc:4a:ec:21:
10:c5:11:e8:ff:a8:44:a7:f7:66:f8:6a:38:17:27:82:bf:fb:
6c:30:d2:0a:8a:09:7e:08:f4:b1:1c:15:ad:fe:96:8c:6e:19:
2b:62:3a:9d:c7:fa:dc:bf:94:a6:39:45:ab:d2:0d:66:c5:13:
ba:fa:e7:f3:83:b1:16:49:84:68:a0:78:5e:c2:32:95:fc:f4:
3b:1e:c1:77:a6:ae:85:a4:09:e3:7b:09:c0:67:71:c2:5d:51:
65:de:a7:46:80:42:45:90:06:0f:f1:f0:be:b2:16:96:5b:6d:
df:b9:dc:b8:59:0e:32:01:0e:ae:fd:6c:eb:db:a2:b0:b4:3c:
4e:9e:29:4f:35:1b:3b:72:6a:6a:df:3f:80:98:ba:c7:7a:f5:
f9:d1:02:38:77:f5:1b:26:b4:b1:4a:6a:54:76:c7:7b:a3:9c:
9b:e2:ef:24:3f:85:51:77:e0:55:98:f0:e3:39:6b:9a:66:92:
5e:71:5f:35:cd:41:3e:50:50:30:03:e7:1d:a1:53:e0:94:70:
c4:0d:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 18:39:27 2024 by rpki-client on console-ams.rpki-client.org