Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b4943aiQ3r9A0L5dIM9CNqWNlPc.roa
File: b4943aiQ3r9A0L5dIM9CNqWNlPc.roa (raw, json)
Hash identifier: DmGxPX9rge3GuaChD79H6qc9ZcsYk4ly60kx6QdPPPU=
Subject key identifier: 6F:8F:78:DD:A8:90:DE:BF:40:D0:BE:5D:20:CF:42:36:A5:8D:94:F7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F7762100299238625F4BC846004C16D55
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b4943aiQ3r9A0L5dIM9CNqWNlPc.roa
Signing time: Tue 14 May 2024 13:54:25 +0000
ROA not before: Tue 14 May 2024 13:54:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.181.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 May 2024 17:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:77:62:10:02:99:23:86:25:f4:bc:84:60:04:c1:6d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 14 13:54:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f8f78dda890debf40d0be5d20cf4236a58d94f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:1a:e3:d8:28:a5:f7:5e:24:91:0f:f6:db:
a1:60:5f:85:4e:dc:a9:a0:79:43:56:e0:e0:85:de:
0a:b6:68:85:eb:cb:7b:cd:84:29:b5:78:27:1f:a3:
3d:d8:76:fb:d5:f1:76:2e:34:77:00:d3:e8:d8:a4:
4f:45:e8:88:b6:af:aa:4d:95:81:72:57:fa:43:b2:
d1:43:14:21:12:16:bd:3c:69:54:e8:f3:20:a3:9f:
fb:fa:8d:79:fa:bc:7f:7b:7d:52:73:b1:aa:89:84:
1a:b0:45:5d:2d:09:69:e1:32:bc:ab:f2:25:9c:bd:
49:0b:c9:23:e6:e4:6e:7e:76:a6:88:d7:fe:26:aa:
8a:26:1b:6c:b6:17:e9:ae:e3:65:1e:6d:9e:ab:8e:
4c:2d:cd:50:c6:10:f8:76:f7:7f:b2:47:a3:ff:9a:
c9:db:ef:cb:c1:6b:20:19:3d:20:b0:7b:91:55:86:
48:c5:40:05:5a:36:3c:9f:c8:1f:03:47:8f:42:f3:
21:90:4a:3b:d6:05:8d:53:ab:6b:f2:b3:63:08:dd:
86:29:9e:1c:3f:15:32:15:7d:fa:8d:55:3c:4d:2f:
ce:d2:4b:2e:c3:bb:58:0d:7d:a9:00:ee:08:67:e0:
59:ec:1d:d2:d9:89:82:ef:59:4f:6f:2a:42:67:0f:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8F:78:DD:A8:90:DE:BF:40:D0:BE:5D:20:CF:42:36:A5:8D:94:F7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b4943aiQ3r9A0L5dIM9CNqWNlPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.181.0-45.135.183.255
86.107.50.0/24
89.34.106.0/24
93.114.183.0/24
94.177.51.0/24
185.198.234.0/24
188.64.142.0/24
188.208.103.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
57:80:73:0f:b9:8b:8e:5f:43:27:00:5b:fc:11:f4:2b:5d:cc:
3f:1b:5d:f3:96:c9:e8:c6:71:83:e1:9b:64:ea:86:5e:cf:4d:
c4:f7:c2:1f:00:80:7d:08:15:28:7b:4c:1a:02:7d:b8:68:a7:
d6:f9:1c:d2:88:63:69:fd:d3:9b:fc:3b:e8:b5:72:72:aa:3b:
01:b5:19:b4:34:f9:40:d3:f8:eb:64:56:90:ff:64:68:41:4b:
46:c1:62:94:ca:d9:3b:eb:14:cc:d1:20:20:fd:c7:6f:a6:4f:
83:72:75:a1:f3:69:05:1c:ad:0f:39:3b:7e:31:2b:48:32:54:
7b:99:aa:57:17:32:e6:4e:c9:89:d7:04:83:07:3f:32:40:fe:
5d:3e:f9:53:df:0b:4d:8e:7f:b1:0c:85:88:71:9f:0d:f4:ca:
c8:21:d6:e7:d2:d5:86:80:e5:1b:a2:85:86:d8:06:af:6d:cc:
18:bd:b9:5b:8a:ef:24:82:85:81:a4:b4:c2:16:8d:a4:9f:15:
3d:6a:a5:c6:aa:f9:9e:18:ac:d7:3c:d8:4a:6e:c6:e9:99:4f:
2b:6c:57:87:15:12:12:96:71:9f:7b:64:bb:1d:2d:1d:b5:54:
01:ab:cb:83:19:c0:b9:7a:4d:c7:38:85:7f:c6:5c:68:47:93:
5b:1f:fd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org