Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TDCjnu4HncjZX3Bx2QcTv839AUs.roa
File: TDCjnu4HncjZX3Bx2QcTv839AUs.roa (raw, json)
Hash identifier: RxvaZROnBwbWzCo0Fh9CRE7eo3GyATfJl1daomvFMV4=
Subject key identifier: 4C:30:A3:9E:EE:07:9D:C8:D9:5F:70:71:D9:07:13:BF:CD:FD:01:4B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190FA070DF44A03040AAF7F5F7EB7FBD920
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TDCjnu4HncjZX3Bx2QcTv839AUs.roa
Signing time: Sun 28 Jul 2024 15:48:04 +0000
ROA not before: Sun 28 Jul 2024 15:48:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 14:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fa:07:0d:f4:4a:03:04:0a:af:7f:5f:7e:b7:fb:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 28 15:48:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c30a39eee079dc8d95f7071d90713bfcdfd014b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:95:5e:5e:f5:20:09:80:67:24:3a:58:62:
6d:62:e8:88:1e:e1:4c:7f:1b:06:9a:a0:17:e3:7b:
60:22:8b:a6:d7:d2:16:61:5f:3b:e0:e4:57:f0:06:
dd:8a:fb:df:0c:c7:c3:41:7b:46:85:33:37:f7:94:
d0:56:62:73:ed:27:fa:73:f6:cc:15:0f:7c:21:f5:
d3:63:de:1b:a7:8c:b2:d0:14:6c:6a:51:c9:2f:4a:
3f:da:09:02:e5:c3:bc:ac:d6:c7:f6:d8:8e:6e:2d:
52:62:e1:a1:75:d3:3e:ba:43:5c:6e:70:18:96:45:
a9:fb:72:39:ef:ae:cb:a8:cb:ad:1a:70:12:f7:bf:
d4:fb:77:6c:13:b4:5e:39:e2:01:ef:ca:9f:1f:59:
a5:cf:6f:14:86:57:f3:a9:d5:f0:6c:e3:10:d2:96:
f6:46:94:76:2b:0b:9f:27:e9:2b:ba:ec:10:5e:9b:
f1:03:ee:0f:c3:8c:cd:b3:45:39:b4:02:a0:7b:aa:
51:8d:04:0f:d0:b2:f9:ec:c1:84:37:f5:3c:6b:58:
be:55:53:ee:00:98:c7:84:3a:a5:76:1d:25:80:1b:
68:2b:12:03:5e:aa:9d:a6:4c:2e:ba:af:08:97:2c:
7e:b0:df:d4:cd:a5:61:9b:4f:99:6b:86:29:45:10:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:30:A3:9E:EE:07:9D:C8:D9:5F:70:71:D9:07:13:BF:CD:FD:01:4B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TDCjnu4HncjZX3Bx2QcTv839AUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
91.132.51.0/24
93.114.183.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
22:79:a3:3d:60:fc:1b:da:e2:6d:d2:29:7e:58:9c:62:98:18:
03:d7:54:09:8e:0a:33:e4:d6:5f:5a:6f:35:6c:37:b6:e1:93:
18:f1:c9:77:ce:34:14:27:fd:b7:15:0d:18:53:3a:db:7f:63:
d0:5f:e3:80:51:fb:89:ca:62:fb:51:e2:0d:e4:ef:1b:d9:29:
78:c4:e1:80:e6:db:d9:da:ed:5d:5b:49:c4:0f:e5:c9:75:16:
3e:fa:8f:5b:81:36:28:aa:dd:d9:9e:cf:61:4d:2a:c7:ab:96:
f8:f8:24:30:fb:12:03:51:41:b6:37:c5:cf:db:31:1f:9c:7c:
14:1d:7c:a4:57:f4:54:7c:c1:10:2b:bc:77:26:2b:1b:23:4c:
0b:cd:17:60:2a:55:f2:4b:51:48:7a:3d:cb:64:8f:63:3b:63:
0d:8b:fd:c0:5e:3a:9e:c4:e1:3a:e7:c3:03:8f:d4:eb:0d:6d:
2b:de:16:f0:af:89:0a:a8:cf:36:e0:4c:14:15:dc:7c:20:5a:
a2:31:59:fd:b0:8d:c5:a2:e1:06:8f:ba:b4:af:8f:b8:7b:97:
dd:e8:a1:30:0e:4b:bc:2d:05:16:d0:47:bc:96:e3:49:cb:b0:
e4:fb:6e:17:ea:ac:eb:cf:4c:f4:80:a8:5a:2d:23:0b:26:12:
a3:ae:2a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 17:42:17 2024 by rpki-client on console-ams.rpki-client.org