Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_mQuc4n3lwWvHHe7ySxBXNIBkm8.roa
File: _mQuc4n3lwWvHHe7ySxBXNIBkm8.roa (raw, json)
Hash identifier: TKW/2GD1PKnQ3P9YjGmCK8CDUItaRH+u0DNCV38R2+Y=
Subject key identifier: FE:64:2E:73:89:F7:97:05:AF:1C:77:BB:C9:2C:41:5C:D2:01:92:6F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0191C86142935151CC040547990B855D8005
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_mQuc4n3lwWvHHe7ySxBXNIBkm8.roa
Signing time: Fri 06 Sep 2024 17:28:22 +0000
ROA not before: Fri 06 Sep 2024 17:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 18:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c8:61:42:93:51:51:cc:04:05:47:99:0b:85:5d:80:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 6 17:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe642e7389f79705af1c77bbc92c415cd201926f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:92:6a:a9:a3:73:be:d7:61:ed:21:14:62:
68:99:28:65:59:1b:1c:dc:ee:e2:f1:d9:4b:1d:1e:
bb:74:86:c1:9d:71:1a:a1:04:33:aa:73:66:c7:0c:
4c:90:73:5e:99:ad:aa:ac:11:53:85:89:42:bb:52:
95:41:5a:c3:7e:c6:d8:1d:5e:b0:df:3c:14:03:1d:
47:e5:15:d2:1c:b3:1c:99:18:e2:cd:f2:f8:fd:62:
1a:a2:0f:60:49:b4:76:8d:99:55:9b:fc:c7:ad:c1:
ac:65:df:57:7b:ae:20:64:9f:40:c5:0e:80:30:b0:
53:ed:b9:8a:01:fe:a9:cd:7a:c3:11:e8:60:1a:94:
ac:32:f2:01:1a:11:30:b5:0a:32:c9:c7:4d:b5:74:
46:0d:05:2a:be:35:83:c7:c3:be:b5:be:a2:3b:39:
0c:d9:ac:e4:cb:a4:32:13:da:13:a2:88:9b:8e:a8:
a7:ac:a5:a3:d4:5c:20:1a:3f:35:df:96:e2:7e:68:
9d:e3:eb:75:78:29:5f:78:4d:60:d1:d9:60:d2:4b:
ed:d9:73:cb:0e:d7:f8:ab:b1:c2:38:a0:51:8c:c5:
e8:f9:5a:02:b1:db:56:ce:60:46:33:b7:c7:69:8f:
c8:4d:6b:ad:6b:7a:68:ec:a8:85:08:33:d5:fb:8c:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:64:2E:73:89:F7:97:05:AF:1C:77:BB:C9:2C:41:5C:D2:01:92:6F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_mQuc4n3lwWvHHe7ySxBXNIBkm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2e:d4:8f:14:16:25:8a:11:9e:b8:eb:de:36:ca:45:97:ca:
3c:e6:17:4d:29:64:8e:52:bc:af:91:f7:f0:c4:57:57:0f:ac:
0f:d1:48:73:54:ed:45:82:ec:d6:65:53:a2:8b:aa:9d:0a:21:
79:c1:50:94:a4:11:6f:1d:d6:6d:66:49:ac:f7:ba:12:49:13:
2f:dd:97:93:2d:e2:7f:f5:d4:a4:a6:20:01:96:72:13:8f:ae:
d1:f9:08:af:69:98:86:64:29:ff:3f:82:69:a2:6e:27:73:3a:
4f:19:86:6c:dc:0c:31:e4:1c:0f:ad:a5:1d:10:04:0c:b5:19:
97:e7:85:8e:fe:3f:77:aa:2a:1a:77:b7:93:05:88:4a:12:e6:
8e:78:04:68:2d:bc:69:7c:75:4f:71:a4:87:b3:82:f1:88:aa:
5a:38:62:72:f7:60:79:58:e5:54:08:da:db:c5:12:7d:ec:d6:
97:c7:dd:df:e6:1e:e6:f4:75:fc:fa:e3:c8:bb:0d:36:eb:16:
e8:82:eb:f7:0a:11:c6:b0:6e:8c:71:a3:0f:d3:03:8b:c7:ef:
e0:6e:14:d7:41:83:47:94:a0:8b:fc:05:19:c9:01:c2:50:ff:
9e:b1:4c:04:3b:8a:88:de:22:64:a3:24:34:32:3d:40:af:c5:
70:dc:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 20:55:08 2024 by rpki-client on console-ams.rpki-client.org