Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dOGjSClh7UtZ6tzls-1GDnUajGs.roa
File: dOGjSClh7UtZ6tzls-1GDnUajGs.roa (raw, json)
Hash identifier: 4fim3GqoocLe4B92lbbR5TrDESOEw78YJDpWUyRvwLI=
Subject key identifier: 74:E1:A3:48:29:61:ED:4B:59:EA:DC:E5:B3:ED:46:0E:75:1A:8C:6B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018DF0B28717DBE18ED00E794217FF327434
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dOGjSClh7UtZ6tzls-1GDnUajGs.roa
Signing time: Wed 28 Feb 2024 17:10:48 +0000
ROA not before: Wed 28 Feb 2024 17:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 45.135.180.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 20:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:b2:87:17:db:e1:8e:d0:0e:79:42:17:ff:32:74:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 28 17:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74e1a3482961ed4b59eadce5b3ed460e751a8c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d7:6d:f2:6b:19:61:bc:33:b6:a4:cf:6d:e4:
a4:26:7d:86:44:b9:16:89:3b:d7:79:10:9f:fc:03:
d3:e3:75:70:37:35:06:59:c7:94:95:ba:69:a9:58:
55:52:c4:ab:50:a0:d8:da:3d:9a:31:a0:d5:eb:13:
04:e5:d3:b1:05:31:de:9c:57:af:37:2c:b9:50:ae:
a3:e3:eb:ad:47:95:cf:1b:0f:2b:20:05:60:bf:e8:
29:0d:6e:4a:95:18:e0:4c:a1:d1:22:53:83:99:74:
0b:ff:cd:8b:f5:99:77:48:51:f7:3c:4a:53:ec:7b:
71:60:8b:58:53:f7:64:b5:ab:f4:51:c9:30:28:b6:
7c:b7:07:82:ae:38:fd:3f:f7:4d:93:7c:73:4d:c5:
5f:89:c3:2c:9c:9e:a3:47:d4:1f:8d:63:05:7c:b8:
40:6d:dd:1a:2d:fc:37:96:1c:58:3e:c3:6b:ee:b9:
f7:f8:fe:e6:97:81:22:37:25:56:e3:1e:8d:ef:37:
c2:09:4a:0b:f0:c9:b8:be:0c:02:50:fe:54:c0:4d:
83:21:27:4e:99:2a:55:b0:28:b5:80:9e:b7:00:72:
aa:3a:c5:3a:15:bf:78:9e:14:a6:d6:13:43:68:d7:
d9:ca:ae:33:a8:c4:e5:4e:49:8b:83:fe:61:04:4e:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:A3:48:29:61:ED:4B:59:EA:DC:E5:B3:ED:46:0E:75:1A:8C:6B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dOGjSClh7UtZ6tzls-1GDnUajGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
45.135.182.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ec:66:12:06:b3:d8:f6:be:12:5b:fe:70:24:f3:9d:de:77:
8d:37:16:db:cd:b2:95:c4:5d:56:b6:e2:36:ea:e0:8e:a4:13:
e3:96:64:29:15:e6:12:dc:5a:17:8d:18:81:73:30:80:d5:1b:
7c:53:86:3a:ea:4d:0b:e6:e7:2f:e2:ae:3f:d5:be:87:28:64:
b6:f1:d6:41:e4:1c:6c:35:b6:32:79:13:8c:c3:fa:85:26:b9:
2d:ae:05:d9:50:0e:76:fc:75:47:8b:b7:70:6d:d1:81:8d:53:
91:4f:ce:1a:91:df:e0:5a:c8:1f:51:d5:b9:ab:5c:60:8f:12:
78:a2:0e:11:a5:82:82:25:4f:50:b0:f1:c9:31:12:27:99:e8:
23:01:14:93:47:da:c0:37:ff:07:0f:27:78:99:e5:ea:7e:0f:
18:f5:4d:46:66:9e:d3:87:89:f1:6a:62:af:ae:ce:8b:55:36:
72:e1:0d:0d:e2:28:71:05:8a:69:82:a3:cf:6f:a5:a3:58:e7:
c6:70:cc:b8:19:ae:d2:50:a6:4b:95:06:62:c7:c4:1c:10:85:
d6:f0:93:ce:c3:11:f0:67:cc:d0:f5:b2:36:d8:e6:0d:59:83:
21:6f:27:44:93:11:da:10:ca:fd:fe:2c:11:70:59:36:04:11:
b6:88:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org