Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/crpLL64KNnLs6uAp5zrdrbGWJOE.roa
File: crpLL64KNnLs6uAp5zrdrbGWJOE.roa (raw, json)
Hash identifier: SR71ecoKkrZUEJE/D0zon4e87JEJ8r0TL9acBNzIh3g=
Subject key identifier: 72:BA:4B:2F:AE:0A:36:72:EC:EA:E0:29:E7:3A:DD:AD:B1:96:24:E1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190B9C810702773374F7E33C3E267E3B58F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/crpLL64KNnLs6uAp5zrdrbGWJOE.roa
Signing time: Tue 16 Jul 2024 04:23:34 +0000
ROA not before: Tue 16 Jul 2024 04:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
86.107.101.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.113.57.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
176.223.66.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 10:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b9:c8:10:70:27:73:37:4f:7e:33:c3:e2:67:e3:b5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 16 04:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72ba4b2fae0a3672eceae029e73addadb19624e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:fb:59:c6:f1:12:05:2f:b2:7e:95:79:3b:
01:ca:18:5d:88:e9:03:f3:d4:b2:06:13:07:db:c6:
d7:a0:3d:3d:a1:fe:b6:00:5f:a1:95:42:08:9c:d5:
ca:2b:5d:a6:de:b4:36:62:d4:a2:0b:7c:98:08:20:
93:41:92:d1:56:0b:5f:2a:33:dc:b6:c1:70:a4:26:
ff:6b:4d:bd:0f:56:7e:00:55:77:5a:29:80:f4:bb:
9e:00:e9:f4:ad:33:db:7e:67:e9:5f:34:38:eb:1f:
ab:66:85:e3:64:55:ac:ea:44:3a:29:fc:c2:8a:f0:
38:85:e9:07:39:29:ff:72:c2:65:9d:ba:c2:61:40:
ad:64:b5:a8:63:9b:f5:f2:3a:5e:ba:59:08:85:00:
bb:92:59:da:48:fe:c6:5d:99:f6:92:74:e2:cc:a5:
55:eb:9d:98:83:e6:be:f9:2d:3a:a2:b2:0a:12:37:
04:90:4c:c8:a3:c1:9e:2e:41:cd:90:1b:a1:22:a7:
f9:32:cd:47:0c:94:9a:bf:ff:35:89:d0:f6:8c:f4:
a7:3d:e7:ba:b5:45:47:77:5d:80:4b:80:20:4d:b1:
c6:14:b5:d5:41:39:14:38:66:21:1f:4d:47:da:e0:
6c:d3:12:48:36:3d:f0:61:f2:45:2e:ce:df:09:93:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BA:4B:2F:AE:0A:36:72:EC:EA:E0:29:E7:3A:DD:AD:B1:96:24:E1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/crpLL64KNnLs6uAp5zrdrbGWJOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
86.107.101.0/24
89.34.106.0/24
91.132.51.0/24
93.113.57.0/24
93.114.183.0/24
176.223.66.0/24
185.198.235.0/24
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e0:5a:56:b0:9e:34:97:d6:de:33:94:20:4b:f1:88:9b:30:
c9:2e:ae:6f:1d:33:f7:3b:85:c7:fd:a8:84:60:ec:43:4c:c8:
8e:f8:12:6f:9a:94:77:60:51:01:33:5a:0f:d1:19:64:4a:54:
ec:38:24:db:08:eb:ea:31:c5:56:a1:86:13:86:6c:67:fa:80:
4e:e1:18:53:c1:bb:f8:5e:12:53:10:d6:49:67:5c:8b:f2:55:
91:47:14:9e:30:6f:6a:05:84:4e:d3:f1:de:6e:85:f5:79:38:
fd:f4:91:2e:e6:c2:b2:26:62:89:ac:4b:bd:15:43:08:6d:32:
f2:a1:0e:eb:3c:fb:4d:dc:2f:fc:fb:4f:78:1b:7a:0c:28:7c:
86:e1:08:8d:35:d8:4c:f9:7e:c3:58:de:15:06:e0:d7:d5:e5:
a9:67:f7:18:0c:84:17:ed:08:3e:15:c0:30:01:3c:46:63:eb:
bb:c9:51:b8:1e:fe:68:c0:9c:f3:a5:90:92:22:74:5a:2a:d6:
29:1a:cb:4b:60:40:96:35:26:ab:20:64:c4:1b:59:1c:26:8e:
44:59:25:2d:5a:7e:fc:d8:0b:c5:73:77:47:e1:34:5a:16:a2:
46:9a:55:cb:cc:66:b9:59:23:ed:3c:d5:ad:52:f4:95:47:69:
8f:6b:f7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 13:11:04 2024 by rpki-client on console-fra.rpki-client.org