Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VW0_vyz8_ByKSxl45HBfsQqWzUw.roa
File: VW0_vyz8_ByKSxl45HBfsQqWzUw.roa (raw, json)
Hash identifier: YIZY3ekiWwJFpmt9Lee6XBzt1Zusn9W3WI3OgXqruRA=
Subject key identifier: 55:6D:3F:BF:2C:FC:FC:1C:8A:4B:19:78:E4:70:5F:B1:0A:96:CD:4C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019049CFD0C3FD4CB3E8E7B3F2035B5EE62C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VW0_vyz8_ByKSxl45HBfsQqWzUw.roa
Signing time: Mon 24 Jun 2024 10:34:34 +0000
ROA not before: Mon 24 Jun 2024 10:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
45.144.172.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
176.223.66.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 17:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:cf:d0:c3:fd:4c:b3:e8:e7:b3:f2:03:5b:5e:e6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 24 10:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=556d3fbf2cfcfc1c8a4b1978e4705fb10a96cd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:f2:68:03:78:41:41:b9:ee:83:45:3b:6d:
08:a8:c6:b6:4b:3f:15:2a:24:17:1a:b3:54:89:08:
d3:3e:6d:6f:94:7e:a5:4e:93:35:91:ae:78:d5:72:
08:1e:4c:c6:0f:19:6f:92:9e:63:ba:49:2d:a9:b6:
dc:52:5d:3c:b0:9a:75:e9:5e:78:e7:3e:01:9e:e0:
60:e0:7a:2c:78:eb:4a:4d:bb:a6:03:2a:6c:b8:be:
07:12:89:77:71:0c:18:be:b4:7f:53:ca:c3:a7:49:
59:8f:6c:54:6c:c6:59:44:7f:da:3d:ab:68:23:f8:
04:c3:9e:97:a1:0c:a8:19:6a:bb:57:68:00:97:8a:
f3:fb:1b:11:6a:c5:09:3a:62:3c:5c:00:f0:96:90:
9d:40:0b:5e:67:f7:bf:bc:6c:6f:9f:b2:19:43:f1:
41:ba:e2:f9:df:fe:db:60:b2:3e:08:e6:52:b4:a9:
cc:e2:47:0b:13:d7:81:57:40:7f:81:61:7b:4a:17:
d6:3b:32:a4:66:3d:7a:6c:ad:ee:58:6d:17:06:c4:
e5:b0:ed:19:09:4f:a5:92:cd:34:d1:3c:19:6e:03:
6b:f0:d6:92:1f:b5:08:7a:f4:4a:d2:36:e9:1c:1b:
b8:ad:05:a2:5a:20:55:da:89:99:d5:7c:ab:ce:8b:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:3F:BF:2C:FC:FC:1C:8A:4B:19:78:E4:70:5F:B1:0A:96:CD:4C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VW0_vyz8_ByKSxl45HBfsQqWzUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
45.144.172.0/24
86.107.100.0/24
89.34.106.0/24
92.114.32.0/24
93.114.183.0/24
176.223.66.0/24
185.198.235.0/24
188.64.142.0/24
188.208.103.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d8:3c:45:31:d5:bf:39:34:bf:d9:a9:bd:ef:d5:0d:1c:50:
f9:c8:e4:86:1d:fa:71:8b:1d:b5:56:6e:da:dd:70:5a:34:c0:
cc:01:ba:e5:37:52:30:22:ec:99:91:34:01:ba:29:b2:29:9e:
52:be:3f:b4:b4:86:fd:4a:c0:61:88:15:b5:4b:de:c5:87:a5:
83:b0:fb:aa:cd:68:d3:9b:6d:e6:b7:2e:44:d3:4f:f2:ac:e1:
60:e9:1d:b4:bc:9d:9f:da:a5:0f:a5:04:c5:a1:b0:22:fa:44:
58:a4:cf:b0:7b:12:2f:c9:19:74:1e:5d:fb:67:17:93:ab:cd:
f3:7a:00:e6:63:70:f6:fb:87:94:70:94:28:ff:02:ee:69:1d:
c0:ff:2e:4e:af:73:da:81:5f:4d:ec:8a:a1:b8:a0:7b:63:ab:
b3:62:c8:d4:51:f1:50:d9:05:e3:a2:5b:f4:a2:2d:f0:f0:8c:
c5:62:7b:87:fa:f8:ec:e7:5c:f0:12:60:d5:1c:94:ae:d4:7d:
37:11:1a:c1:5c:09:ef:55:33:b6:e5:dc:98:e6:75:ce:0e:8f:
94:d5:dc:8a:b1:55:df:81:dd:de:37:7a:d7:58:6c:7c:68:91:
89:bb:65:66:b9:c0:7d:b5:63:bd:28:b4:15:75:a3:d7:37:14:
6a:52:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 22:04:35 2024 by rpki-client on console-ams.rpki-client.org