Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cRdaXDE-qm_G0KdleG1Ym_kRcOU.roa
File: cRdaXDE-qm_G0KdleG1Ym_kRcOU.roa (raw, json)
Hash identifier: YqrgO6hFI/vFwvC22MSJzSdgrhmzOiAfVIRZ/r5aA3s=
Subject key identifier: 71:17:5A:5C:31:3E:AA:6F:C6:D0:A7:65:78:6D:58:9B:F9:11:70:E5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192FBDE21B629486C6BE2CC60244FCF9835
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cRdaXDE-qm_G0KdleG1Ym_kRcOU.roa
Signing time: Tue 05 Nov 2024 10:28:11 +0000
ROA not before: Tue 05 Nov 2024 10:28:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.57.241.0/24 maxlen: 24
45.135.181.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 09:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fb:de:21:b6:29:48:6c:6b:e2:cc:60:24:4f:cf:98:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 5 10:28:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71175a5c313eaa6fc6d0a765786d589bf91170e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:05:26:7b:d5:ba:a1:b0:ef:e9:9b:b7:c2:
6d:d6:b4:be:a6:01:22:86:9d:e2:73:92:1e:5d:4b:
4b:21:a2:2b:49:b5:6e:e4:74:79:00:6c:2c:67:32:
52:1c:44:ee:74:05:5f:e4:be:12:02:23:a3:f8:58:
b2:3f:49:aa:1c:cb:f5:b6:ec:fe:f5:5d:67:22:9f:
d5:86:4c:f5:7a:c5:b4:37:94:42:fb:a3:d8:bd:6a:
27:26:5b:f7:fd:03:9d:2b:28:7f:a2:3e:21:41:c4:
15:37:37:c5:70:61:b9:69:aa:ec:7f:c2:c9:79:ea:
1c:ec:95:2e:b2:db:1d:d5:ba:74:46:41:db:75:3a:
33:78:de:7a:08:99:e3:21:14:74:d6:fc:2f:71:7e:
72:95:cd:29:de:39:cf:a4:e2:20:5e:82:1d:af:01:
85:d9:17:dc:d5:52:02:b4:93:88:cb:86:76:b7:7a:
c4:f3:73:92:c5:10:aa:ed:25:7d:88:06:eb:b8:36:
c3:54:aa:d2:2f:42:7d:4d:7e:d4:63:3e:d0:be:e9:
a8:35:68:c9:85:f8:e6:94:0b:25:5d:69:b3:29:0f:
1e:22:bc:22:0b:ba:21:fc:07:54:c1:5d:42:16:ea:
a1:c4:42:99:57:56:64:a3:3c:7b:1b:c7:c1:95:fc:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:17:5A:5C:31:3E:AA:6F:C6:D0:A7:65:78:6D:58:9B:F9:11:70:E5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cRdaXDE-qm_G0KdleG1Ym_kRcOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
45.135.181.0-45.135.183.255
89.34.106.0/24
93.114.183.0/24
188.64.142.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:24:8f:b8:d2:de:7a:9d:12:a3:0d:2b:00:43:e8:cf:1a:04:
5e:f6:10:8f:80:08:a3:45:d8:33:17:5d:55:32:a0:a2:57:04:
22:4a:85:e9:e9:90:d0:3c:3e:74:ae:d8:53:cc:3b:62:d1:98:
87:26:05:c5:15:5e:87:c2:10:3f:88:02:31:4a:fb:1b:3f:80:
61:65:95:78:37:5c:3f:f2:1d:1c:de:01:f8:cb:bb:6e:b7:27:
7e:37:91:97:75:58:f3:8e:a3:d6:31:f5:45:b9:ed:c4:4a:b6:
20:82:f1:ff:a6:31:fd:eb:cd:25:59:9f:1a:95:e8:5a:5d:e2:
d8:80:83:5c:c6:d3:b1:51:8c:43:2c:9e:ca:ae:9b:07:b5:9a:
46:e3:40:20:ab:30:fe:ba:53:ee:c3:39:97:78:a1:c7:39:c1:
eb:3a:72:f3:f1:a2:bd:2f:5c:4f:d9:b0:87:c0:ca:d0:2f:32:
0d:c0:1f:ee:ea:26:c3:ed:12:fd:7c:ee:bd:d8:f7:19:96:d1:
2a:7f:4a:93:8b:38:56:e9:db:d3:23:b1:16:c4:67:2b:42:c1:
02:61:f3:1d:15:73:58:0e:3c:b0:be:fd:87:ee:73:a6:b0:6a:
29:a4:dd:70:c6:85:43:1e:df:b6:be:e1:5c:4d:13:0b:d9:d0:
ca:0d:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 13:09:04 2024 by rpki-client on console-fra.rpki-client.org