Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YgDHG2p_mPxNubCKmC2xcD4Pmvw.roa
File: YgDHG2p_mPxNubCKmC2xcD4Pmvw.roa (raw, json)
Hash identifier: ZEoBs8fDFj1l7M4GREvG/T1KebVMDWOqojPfKRQMiyg=
Subject key identifier: 62:00:C7:1B:6A:7F:98:FC:4D:B9:B0:8A:98:2D:B1:70:3E:0F:9A:FC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192F85AED218198EB67F084F72B05E0D1B8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YgDHG2p_mPxNubCKmC2xcD4Pmvw.roa
Signing time: Mon 04 Nov 2024 18:06:01 +0000
ROA not before: Mon 04 Nov 2024 18:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 10:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:5a:ed:21:81:98:eb:67:f0:84:f7:2b:05:e0:d1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 4 18:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6200c71b6a7f98fc4db9b08a982db1703e0f9afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:ba:21:f2:e0:27:4b:b4:a1:19:aa:2c:46:
15:5f:08:9a:d4:2a:c3:c7:5e:85:61:0f:f4:f6:be:
e3:8f:34:5c:79:0d:b6:68:1b:1e:c5:54:16:ee:7b:
c0:de:ce:a1:7f:44:5c:37:88:cd:5e:dd:59:28:3d:
44:55:2b:02:95:d8:8d:d7:eb:4c:11:40:ab:07:fc:
1f:28:22:2d:30:2e:cd:2b:0c:bb:7a:b5:69:a4:c3:
59:de:b6:a2:22:4f:b6:24:b0:28:e2:7c:72:9b:cd:
4e:3c:78:73:ae:98:da:4a:99:19:aa:db:d8:4c:87:
90:65:4b:f1:7e:47:67:c6:5a:ed:2d:a2:17:02:17:
16:40:16:7d:79:44:94:07:33:e8:e9:03:62:fa:2e:
ac:94:5f:46:60:73:c8:61:57:31:27:06:ec:3f:07:
c1:e0:06:be:00:7c:09:a8:7b:6c:7e:07:5b:1c:13:
e2:a8:2a:40:0b:fc:60:91:98:56:b1:6b:91:fa:80:
b2:b2:c5:d1:1e:87:79:3e:b0:c8:c8:34:29:46:03:
7f:99:21:2a:78:f4:5d:94:16:e3:61:12:30:7c:4c:
df:2e:b5:7a:34:c0:4f:5a:1c:1b:02:9e:ea:65:17:
26:65:c1:cc:41:7f:c2:f6:f5:a0:fa:f0:d6:0c:1d:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:00:C7:1B:6A:7F:98:FC:4D:B9:B0:8A:98:2D:B1:70:3E:0F:9A:FC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YgDHG2p_mPxNubCKmC2xcD4Pmvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
188.64.142.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
09:82:6d:41:33:d0:13:95:e4:f5:8c:c8:36:2e:67:3d:20:6b:
b5:03:64:42:d4:32:46:9a:01:ce:c4:7e:19:c5:1b:d1:63:e7:
1e:3f:4e:2e:12:7b:96:2c:d1:24:fb:33:1e:69:4d:ed:85:97:
03:b2:58:fd:b2:db:21:f0:ed:a5:99:02:b8:e2:e3:82:f6:43:
29:27:f8:9d:d2:f2:8b:a7:d5:54:3b:0a:aa:6c:a4:0b:75:06:
fd:ed:67:51:cf:97:b6:71:dc:7c:dc:79:c0:d1:d0:9a:a2:81:
da:da:84:ab:a8:67:04:43:b0:ea:2b:bb:c9:73:96:4e:7c:f1:
f3:05:80:e6:70:e2:1e:5a:c1:fa:6e:bf:cc:fd:4e:ae:87:b5:
e2:67:fb:85:21:40:69:7d:3d:bd:13:9a:1f:ce:5e:53:0d:ac:
a2:c6:4a:dd:61:4a:c5:2e:8a:0f:31:51:c5:f2:7b:16:af:a1:
dc:65:18:62:5e:9d:ad:4d:50:ee:94:4a:de:6e:99:4a:1a:2b:
2d:05:82:56:f8:f7:37:b0:0c:c9:0e:65:86:13:0d:e5:d0:a2:
e3:d3:8c:88:63:e1:28:80:2e:9d:13:70:22:bc:50:d0:ff:44:
36:4f:53:8f:5f:78:b1:47:d0:c5:ea:a5:19:25:a3:0f:40:9e:
16:35:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:11 2024 by rpki-client on console-ams.rpki-client.org