Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V24OUHtIOFOeFN3eJUS0EkRl_xk.roa
File: V24OUHtIOFOeFN3eJUS0EkRl_xk.roa (raw, json)
Hash identifier: k2an6nhbQ7FWiho545Gg5L1H5I6VXC1CI4wQ6Mu/TMg=
Subject key identifier: 57:6E:0E:50:7B:48:38:53:9E:14:DD:DE:25:44:B4:12:44:65:FF:19
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01925DC166FD975DDDAFB753C832F7528848
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V24OUHtIOFOeFN3eJUS0EkRl_xk.roa
Signing time: Sat 05 Oct 2024 17:36:48 +0000
ROA not before: Sat 05 Oct 2024 17:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 16:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5d:c1:66:fd:97:5d:dd:af:b7:53:c8:32:f7:52:88:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 5 17:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=576e0e507b4838539e14ddde2544b4124465ff19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:ed:e2:66:b8:ba:67:18:b7:2d:51:4b:25:
ed:44:90:b0:9c:af:60:42:35:8b:85:a4:bc:23:95:
0e:0d:8f:36:93:bc:30:f5:e7:3c:aa:4d:e0:46:04:
2c:e1:ed:70:69:b6:6d:65:24:89:75:80:c2:7e:83:
66:8d:d7:79:9d:9b:93:58:4b:68:60:7e:cf:64:0e:
11:36:70:9e:60:d6:01:9c:84:87:e8:44:66:fa:4d:
17:ae:a0:91:84:4e:7f:42:de:24:20:e3:43:cd:46:
a8:0b:45:36:ea:11:00:f7:a9:85:90:91:9a:13:ac:
66:48:db:67:cc:04:20:61:a1:5e:9f:ae:8b:fe:b9:
d0:2d:c6:92:11:eb:8b:bf:e4:32:f3:24:4c:4b:0b:
2a:c7:1a:f3:ba:e2:4c:2b:bc:82:56:bd:3c:88:a5:
a0:4a:33:fc:0b:c0:81:34:e2:ba:10:d9:01:21:13:
b0:e4:61:ef:48:59:fa:67:95:49:d8:b0:1d:24:b2:
ac:20:81:bb:3f:1f:8e:0e:1a:3a:6c:44:fd:2e:60:
79:ee:a7:36:57:6a:65:15:d9:cc:62:f9:3b:ac:9d:
14:94:60:3d:c3:a1:08:b1:14:1e:b0:f8:34:6d:8b:
18:0b:bb:a2:9c:82:50:a1:b4:4d:a3:94:4b:5a:a4:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6E:0E:50:7B:48:38:53:9E:14:DD:DE:25:44:B4:12:44:65:FF:19
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V24OUHtIOFOeFN3eJUS0EkRl_xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
91.132.51.0/24
93.114.183.0/24
94.177.51.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
58:bc:63:45:7d:36:f0:68:b9:08:06:97:c4:70:00:33:e6:fc:
9f:eb:f9:5a:7d:37:b2:0c:35:52:1c:8e:83:93:09:f7:f8:2c:
59:8c:50:b1:31:3d:63:73:3b:ac:42:cb:80:89:9f:e7:62:bb:
46:7e:ee:60:66:0d:5a:e8:03:74:b9:d6:1d:57:b0:13:b2:e8:
4b:41:bf:ff:2b:af:78:c9:df:bf:9f:7e:eb:5e:8b:23:e6:a9:
fe:ab:6c:12:73:cd:66:b6:89:64:46:58:a9:e1:9b:80:a3:95:
18:41:c6:46:86:c7:1e:62:77:ea:68:a5:c1:c1:5f:4e:8b:e6:
70:46:87:8e:13:46:c2:92:58:a0:dc:d2:1d:02:c8:e6:6a:70:
74:03:75:35:69:49:65:c8:81:f1:70:94:90:95:d5:ba:89:e9:
12:08:1d:4e:77:1f:da:d6:16:9b:0a:d9:35:cf:d6:b0:e8:3c:
0d:81:15:65:a4:90:13:05:88:58:c5:20:a3:68:b1:c1:a6:9e:
ec:a9:36:05:ca:de:06:8f:80:c0:2c:b6:ad:cb:62:97:b8:c8:
91:21:5d:d2:0b:b0:ec:a1:6b:41:a3:20:d3:e5:ee:fd:bd:ac:
f1:34:e4:16:11:79:c8:5c:b6:96:8b:e3:3e:8f:4e:21:21:04:
56:96:82:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 21:05:55 2024 by rpki-client on console-ams.rpki-client.org