Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/X33gpEXXcKFpyVnZDFQKp-B5QI8.roa
File: X33gpEXXcKFpyVnZDFQKp-B5QI8.roa (raw, json)
Hash identifier: SWFu9u4Q9uzTfuHIK5I/odTqJeM/GhRUT6bdP6UurWc=
Subject key identifier: 5F:7D:E0:A4:45:D7:70:A1:69:C9:59:D9:0C:54:0A:A7:E0:79:40:8F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018DDA9B5170D279BC02E79A00B25C0E7466
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/X33gpEXXcKFpyVnZDFQKp-B5QI8.roa
Signing time: Sat 24 Feb 2024 10:13:48 +0000
ROA not before: Sat 24 Feb 2024 10:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 45.135.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 17:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:da:9b:51:70:d2:79:bc:02:e7:9a:00:b2:5c:0e:74:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 24 10:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f7de0a445d770a169c959d90c540aa7e079408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:8a:d4:92:84:b9:dc:96:84:e2:1f:0a:0d:
f3:e9:8b:32:ad:10:c5:cf:8e:73:c2:17:a4:c7:75:
d9:a5:ae:71:11:61:25:43:71:ce:f8:ac:52:b3:a1:
0f:57:9f:4b:c4:34:0a:dc:eb:00:73:99:f7:b1:9d:
80:38:72:ec:e0:6b:01:66:e9:a7:4e:23:ba:d3:a1:
86:c2:c5:3c:d1:8b:81:fa:05:49:86:d7:f8:40:90:
95:c1:53:b4:61:5a:98:1b:4c:76:5f:47:c0:8d:3d:
04:05:08:e0:c2:d9:ce:9b:14:4e:c0:ce:04:82:69:
c5:cb:d1:19:ad:22:16:60:3b:71:99:93:bd:7f:e2:
1a:c6:15:15:a9:02:8d:88:d1:1f:32:ae:24:a2:3e:
84:7d:78:35:62:d6:8c:a0:26:74:8d:ef:6f:71:7e:
82:36:d2:63:cb:39:89:af:5a:5c:87:81:eb:1d:13:
62:0c:9d:4e:b3:d8:d5:1a:ae:ec:3a:81:7e:5d:96:
7c:95:c9:d1:18:5d:80:8e:94:0b:8c:34:e4:e1:07:
fb:3c:1b:71:35:aa:fa:19:d5:77:9f:ed:24:02:b6:
5b:6b:a2:5e:24:8c:23:f8:4b:1f:51:54:9f:c2:cc:
01:05:22:a7:d7:b8:d2:90:0b:81:ad:8b:0d:ff:76:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7D:E0:A4:45:D7:70:A1:69:C9:59:D9:0C:54:0A:A7:E0:79:40:8F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/X33gpEXXcKFpyVnZDFQKp-B5QI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c1:83:6e:60:ce:b6:82:2d:84:99:2e:57:1f:0f:26:40:07:
c1:aa:84:e2:ba:27:50:94:fb:8e:9d:d5:84:dc:9f:d2:a7:f4:
24:0b:fe:87:89:f7:8c:f3:d1:96:66:ac:bc:49:de:a0:45:1c:
0b:35:58:0e:08:a8:0a:29:81:12:f7:85:be:e9:16:94:af:d2:
56:a7:61:09:cd:12:ee:92:5e:f2:eb:a5:24:54:5c:14:58:dd:
d1:8e:34:5f:51:10:9b:98:7a:48:27:63:89:0a:11:db:77:65:
e8:09:51:83:5b:c3:61:2a:0d:d5:f3:fb:06:eb:df:89:8e:f6:
95:57:e0:95:d9:9e:7c:f8:3a:f9:03:96:97:c6:48:42:b9:97:
72:ac:76:55:a0:20:93:43:8f:60:74:4a:7e:d5:1e:d1:d8:8b:
02:f9:22:7b:de:b8:bc:3f:9b:d0:19:83:b9:05:2c:47:c4:f7:
f7:7e:c9:87:3c:54:31:d5:e1:79:86:78:93:b9:6b:b9:9d:c4:
df:f4:a8:d7:14:68:fa:ce:d6:bd:4c:69:c0:de:5a:4e:55:57:
58:c6:81:67:ec:57:a1:a3:0c:41:0d:cb:50:bd:c8:71:39:01:
59:05:14:92:b1:dc:98:95:bf:ca:2c:26:28:f9:31:c0:c1:e7:
fd:39:1f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org