Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VthMaV80Ac1o90uxA2DKvyZC9I8.roa
File: VthMaV80Ac1o90uxA2DKvyZC9I8.roa (raw, json)
Hash identifier: GfNC1mBmNQ1FRmyzDXiA4LwKSOw2dYSmyD7ySlpTRDQ=
Subject key identifier: 56:D8:4C:69:5F:34:01:CD:68:F7:4B:B1:03:60:CA:BF:26:42:F4:8F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F761E12C472742CE159A7772C025DC79C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VthMaV80Ac1o90uxA2DKvyZC9I8.roa
Signing time: Tue 14 May 2024 08:00:33 +0000
ROA not before: Tue 14 May 2024 08:00:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.181.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
45.144.172.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 09:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:1e:12:c4:72:74:2c:e1:59:a7:77:2c:02:5d:c7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 14 08:00:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56d84c695f3401cd68f74bb10360cabf2642f48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:36:85:f9:c9:7c:cf:59:b7:0e:d8:0e:1a:
d6:28:9c:b1:28:01:b0:5d:41:22:84:ae:06:21:6e:
4c:0a:27:4c:2b:f0:71:29:0f:bd:6f:7c:4f:5b:7a:
44:7f:50:8f:5d:56:90:6b:cf:9b:2e:90:9e:38:3e:
ed:85:38:ef:43:43:dd:4c:ff:2e:e9:18:79:05:6f:
12:e9:b2:fa:69:6e:26:d7:27:3d:24:f7:f4:64:e4:
81:f6:df:7c:ec:5d:1f:b7:60:e6:36:32:c4:7b:df:
56:d9:62:3d:8f:80:95:cf:20:55:a1:9a:22:08:74:
a2:50:5f:c7:59:33:65:c9:85:5f:40:b5:b7:2c:64:
36:e6:48:13:4a:ef:53:10:d1:df:c8:98:74:40:be:
71:a8:38:1f:3a:13:83:48:59:54:33:b2:92:58:2a:
e1:7c:39:89:5e:4d:11:ed:38:ac:ea:13:28:7a:b5:
d4:73:18:da:c1:fa:ce:bd:31:7a:e8:93:b8:3c:a7:
2e:bc:c0:9b:ad:5c:2a:e0:e6:7f:95:04:49:3d:44:
8e:30:ab:93:48:60:c6:e9:87:d3:83:ce:75:a6:13:
8a:5c:62:60:7c:3b:d8:ce:f8:9f:39:b9:50:cb:aa:
18:21:13:48:e6:83:e3:b7:35:79:78:fb:df:50:f5:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D8:4C:69:5F:34:01:CD:68:F7:4B:B1:03:60:CA:BF:26:42:F4:8F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VthMaV80Ac1o90uxA2DKvyZC9I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.181.0-45.135.183.255
45.144.172.0/24
86.107.50.0/24
89.34.106.0/24
93.114.183.0/24
185.198.234.0/24
188.64.142.0/24
188.208.103.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
50:dd:ea:60:f1:19:45:1c:71:22:b3:07:18:d0:19:89:26:52:
85:2a:34:21:3e:76:a2:2e:06:1e:64:4a:1e:54:1f:70:7c:95:
31:7c:6a:32:b7:d3:20:ed:40:27:27:b9:ce:28:10:a1:cf:ed:
1d:da:3f:e1:e4:93:e1:8d:5f:81:8f:fc:91:25:b7:40:4e:2f:
67:93:bd:41:f5:72:39:a7:f7:89:cf:d4:98:ea:72:c3:c9:24:
ee:09:d0:bf:2b:e7:0c:66:79:e1:87:29:61:fd:eb:1b:9a:77:
94:18:b7:40:9d:25:12:cb:c8:b3:14:35:33:06:b5:93:a4:c5:
fc:24:01:54:da:4a:e6:44:18:86:f7:38:55:86:f7:e2:a1:fe:
d1:20:0c:db:80:11:e5:cb:59:d2:7d:a5:ca:c2:9b:ef:1e:97:
2b:41:e2:84:81:f4:df:2d:ae:d5:58:d9:1b:8b:76:8c:f2:cf:
a6:38:38:dd:a7:18:86:a3:b1:6c:1f:0e:ff:52:c4:1a:02:2c:
b3:ff:f3:c1:e9:49:59:48:de:a8:1e:7a:7e:27:6d:d2:d2:e5:
d7:1e:70:9d:aa:60:05:dc:12:86:86:6d:86:ff:0c:4f:54:4c:
45:fe:49:b4:93:c8:6d:39:9e:58:7b:62:d8:76:fa:0b:f8:6e:
74:fc:64:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org