Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VcnSEKueE7WSrHQy7jLY4C5cUlA.roa
File: VcnSEKueE7WSrHQy7jLY4C5cUlA.roa (raw, json)
Hash identifier: K/fwL04q3HsFkz8B36Sc61HTcBPGOucnwtBowhZte3c=
Subject key identifier: 55:C9:D2:10:AB:9E:13:B5:92:AC:74:32:EE:32:D8:E0:2E:5C:52:50
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E802273542E9B31EE05696C7B27EC484C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VcnSEKueE7WSrHQy7jLY4C5cUlA.roa
Signing time: Wed 27 Mar 2024 13:38:45 +0000
ROA not before: Wed 27 Mar 2024 13:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.180.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 17:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:22:73:54:2e:9b:31:ee:05:69:6c:7b:27:ec:48:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 27 13:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55c9d210ab9e13b592ac7432ee32d8e02e5c5250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:3c:c4:68:2f:b6:9f:34:6f:65:08:1f:7c:
5a:2e:c4:4c:0d:7b:be:2f:4c:85:fd:ca:92:ec:1e:
cc:bd:69:0a:06:70:46:9f:cd:fc:b8:fa:81:8e:e8:
ef:2d:77:91:f2:37:13:b3:7c:27:b6:28:da:d3:5d:
20:57:84:4a:35:d2:37:1c:97:04:1a:39:94:63:77:
36:f8:cb:c4:60:2e:7a:71:e7:11:66:f8:ab:4d:d1:
1d:67:42:3f:2b:49:99:55:9c:28:95:8a:e2:ad:3d:
20:4e:7c:28:71:a8:f4:72:5e:28:a1:fe:14:d8:c1:
84:4b:4e:93:86:1b:4e:65:84:ec:c6:79:82:3f:4d:
4b:47:61:c9:79:bc:17:d6:0b:ae:bd:90:39:ae:a2:
de:ac:ae:ed:9b:c1:10:e4:f2:ac:85:a2:00:a0:f3:
1d:51:5c:4e:12:ec:fb:1c:cc:66:d1:bf:00:0f:87:
6b:f7:11:75:18:86:f9:6e:73:54:47:d6:ef:33:8d:
c4:fc:bb:d2:86:1e:44:7e:31:07:9a:6c:2c:f4:3f:
06:6e:f5:f1:58:4e:29:9b:60:75:35:56:dd:49:73:
e9:79:3c:80:18:e2:26:72:27:35:2f:e7:d6:59:24:
b4:00:c8:96:bc:04:02:ef:b5:25:0f:36:56:1b:d9:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C9:D2:10:AB:9E:13:B5:92:AC:74:32:EE:32:D8:E0:2E:5C:52:50
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VcnSEKueE7WSrHQy7jLY4C5cUlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.198.234.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e5:32:20:d2:7f:c1:b9:f7:1b:bc:de:74:fe:a8:38:b1:92:
e5:d0:bb:1d:e0:dc:3e:10:b5:94:c6:dc:6e:cd:77:b4:9c:1a:
32:15:b8:a4:f3:0c:cc:bb:73:fc:39:f9:0d:ea:b1:c2:1a:1c:
de:71:5f:e3:21:be:96:78:21:15:ef:b2:13:0c:88:f9:94:03:
d8:1b:82:d4:64:7f:cb:f8:bf:6e:09:86:ec:a3:65:53:f9:86:
d1:4b:15:f7:3b:a3:2e:c0:0b:b8:58:06:8a:96:e5:26:98:47:
02:26:47:ec:27:27:ef:c6:f4:57:0b:23:b5:09:93:92:8c:89:
65:2e:9c:44:f6:3d:af:7a:32:45:be:cb:a6:66:9a:a7:8d:1a:
b4:db:36:cf:b4:e1:4d:f7:6e:71:a2:2b:ee:dd:c8:e5:7a:e8:
53:92:e6:7d:0a:98:7c:5d:7a:bd:f4:60:51:13:e7:ab:3c:1c:
b2:43:eb:3b:13:b9:16:17:ec:6b:a6:13:7c:df:1d:ba:f5:bd:
1e:7e:ce:b8:49:19:ca:c0:05:fe:c0:ef:e9:d0:df:c2:57:37:
2d:3a:33:5d:e8:9f:60:99:dd:b5:b7:0b:2d:6d:81:fd:45:42:
c7:9c:73:0b:d4:2d:a7:50:a2:f7:c9:aa:ac:48:e7:6e:6b:bd:
39:43:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 21:46:03 2024 by rpki-client on console-fra.rpki-client.org