Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WORzYMzV3R9ELY0XrHBTSPUerXw.roa
File: WORzYMzV3R9ELY0XrHBTSPUerXw.roa (raw, json)
Hash identifier: pu/JyitiE3w90qOpT4OdhM/I5hLoxKm9EvE2YIYC2X4=
Subject key identifier: 58:E4:73:60:CC:D5:DD:1F:44:2D:8D:17:AC:70:53:48:F5:1E:AD:7C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019016FE2D53CF1820DBF7268B3ACA7AC935
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WORzYMzV3R9ELY0XrHBTSPUerXw.roa
Signing time: Fri 14 Jun 2024 13:44:34 +0000
ROA not before: Fri 14 Jun 2024 13:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
45.144.172.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.177.147.0/24 maxlen: 24
176.223.66.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 12:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:fe:2d:53:cf:18:20:db:f7:26:8b:3a:ca:7a:c9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 14 13:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58e47360ccd5dd1f442d8d17ac705348f51ead7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:02:a9:de:59:50:76:96:ff:8b:9d:c4:ac:
23:39:01:1b:e3:81:ba:d0:4c:24:68:65:80:5a:3c:
25:a6:eb:c2:08:74:dc:cc:3c:0b:6e:4c:62:27:e1:
94:de:d2:41:fc:9f:c7:0b:b3:00:7f:f7:92:60:fc:
cc:ab:b4:d0:9a:b2:16:9e:45:d6:5e:6f:6b:06:32:
a9:72:ae:d0:a4:e9:ae:d8:ba:d4:45:08:19:6e:dc:
2e:47:50:e6:7c:b7:64:d8:e1:34:0e:4f:e3:3b:4a:
8d:d4:2e:f7:a4:94:8f:1f:de:ea:b8:98:da:45:26:
ee:9c:81:0e:8a:4e:d9:37:49:de:ac:ce:e7:1b:ad:
03:80:2a:32:c0:8b:87:bb:1c:e5:45:ae:ae:cf:0b:
ea:a7:13:6f:37:1c:6d:6f:dc:13:18:d3:3b:ac:cc:
5d:00:54:3a:5d:15:5a:b9:d3:f6:08:89:53:75:5d:
28:1a:bf:72:28:55:3c:75:79:39:eb:f2:75:b6:7e:
f3:c9:d7:a1:be:0c:41:cd:24:69:d2:4b:f8:9f:5e:
31:8c:71:f6:ee:65:f1:a6:1e:dd:d7:30:40:f9:71:
05:77:be:fd:99:b0:a7:ab:17:ad:9c:cd:99:ef:21:
ec:21:27:b7:0f:79:86:2b:45:a8:ae:02:9c:68:e8:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E4:73:60:CC:D5:DD:1F:44:2D:8D:17:AC:70:53:48:F5:1E:AD:7C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WORzYMzV3R9ELY0XrHBTSPUerXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
45.144.172.0/24
86.107.100.0/24
89.34.106.0/24
92.114.32.0/24
93.114.183.0/24
94.177.147.0/24
176.223.66.0/24
188.64.142.0/24
188.208.103.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c2:14:2a:e8:d9:fe:78:3c:f1:0d:b2:6c:18:e6:97:1e:10:
97:ae:55:11:a4:f9:46:28:b2:f4:e1:2e:a6:b5:d7:1a:f2:a5:
9b:90:87:1d:91:54:b8:3d:8c:a5:2c:fa:59:86:15:da:1d:5c:
8a:95:b1:8b:65:d5:90:92:f3:32:25:e9:c0:fb:a8:e6:c6:32:
bb:f6:e7:a6:f0:3a:f7:50:cf:66:c8:08:91:a1:cf:3f:b9:1e:
0a:e3:f7:2a:78:45:4b:09:7c:77:53:d1:7a:fc:8a:4f:1a:84:
a6:97:bf:2e:ce:b5:7f:be:45:7a:22:e3:f1:8b:71:66:21:29:
67:fe:99:96:fa:b3:70:4e:73:99:f9:ef:b8:e4:2e:71:bd:88:
9c:e5:24:f0:85:63:43:e9:9c:95:87:4a:4a:9c:d3:a3:5b:ad:
7f:cb:74:8f:75:ef:87:fd:4e:f8:f4:58:bd:8a:a9:b0:7f:2c:
27:65:2a:b0:32:59:f4:0a:51:95:4e:14:4d:b9:38:26:c4:59:
c8:75:b1:f5:aa:b4:03:9a:1a:56:d3:bc:30:ca:19:62:28:27:
fb:ca:06:7f:51:15:b5:31:af:7d:d2:f8:9c:16:db:cb:b8:32:
12:4a:d9:08:e9:d0:8a:ee:f6:01:c6:2e:cd:34:ff:cd:71:5f:
7c:02:24:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 15:45:57 2024 by rpki-client on console-ams.rpki-client.org