Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ddmGdTj2_SWZOoJn8mPBcJRhIQw.roa
File: ddmGdTj2_SWZOoJn8mPBcJRhIQw.roa (raw, json)
Hash identifier: sKe1GGkNaFSD4J+QhySMjCO9oqQX2lOxdl9h7pT5vKw=
Subject key identifier: 75:D9:86:75:38:F6:FD:25:99:3A:82:67:F2:63:C1:70:94:61:21:0C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192815657F1F9CDD0E43B58796DCAED98C1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ddmGdTj2_SWZOoJn8mPBcJRhIQw.roa
Signing time: Sat 12 Oct 2024 15:26:12 +0000
ROA not before: Sat 12 Oct 2024 15:26:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.113.255.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:81:56:57:f1:f9:cd:d0:e4:3b:58:79:6d:ca:ed:98:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 12 15:26:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75d9867538f6fd25993a8267f263c1709461210c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:72:59:b9:52:a0:51:78:e8:13:b0:21:36:
93:4d:61:bb:ea:a4:28:db:e7:f0:7d:a1:f6:c0:a4:
29:ac:20:83:d5:bf:4c:05:8d:49:89:1e:2b:59:f4:
16:d8:5d:00:6b:0e:17:6d:8e:c8:f0:c3:b1:50:8c:
27:a3:61:2c:4a:96:5d:36:99:2e:37:9c:9d:77:ea:
86:d5:f5:7d:5d:1e:14:fd:c5:f9:c4:ab:07:7b:15:
8b:ed:c3:83:38:02:f1:54:8b:d6:5b:78:f5:fa:9f:
14:46:24:8f:59:88:c4:48:d4:8f:9e:e9:af:b1:f3:
aa:cb:06:db:f2:68:ed:83:63:44:75:83:9b:d6:76:
84:bd:64:05:ed:65:c4:08:2e:fe:0e:de:6b:94:23:
e1:f8:07:3b:33:74:32:7e:d0:21:2c:81:02:7a:7b:
ff:23:df:49:9f:ba:d1:7d:1c:e7:b8:51:26:06:da:
c2:ad:cf:26:13:78:f3:5d:3d:81:ef:6d:c2:3a:79:
62:88:9d:5a:cd:38:56:69:b8:dc:42:e6:a4:23:a4:
1c:5c:88:b7:e2:d2:42:48:2b:85:fb:c2:4c:15:3f:
8c:73:55:6e:f6:d3:70:f3:14:65:9a:0d:cf:36:e3:
5f:50:87:a7:39:44:aa:80:90:2b:1f:4c:43:21:20:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D9:86:75:38:F6:FD:25:99:3A:82:67:F2:63:C1:70:94:61:21:0C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ddmGdTj2_SWZOoJn8mPBcJRhIQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.113.255.0/24
93.114.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:98:7a:7e:f5:80:6e:99:8a:2f:a6:fe:cb:0a:58:25:21:80:
00:5f:ba:da:b6:31:73:45:61:6c:95:86:74:a9:b7:6c:64:4c:
e7:e5:51:44:ed:4e:aa:d6:7e:a3:41:b9:e2:53:fa:de:12:6a:
c2:8e:4d:09:d0:c9:d6:ef:06:1f:82:e4:7d:bd:c3:63:6a:3b:
b6:45:85:3a:5f:3c:1b:a4:2e:f1:3a:4b:25:4b:bf:2b:09:a3:
d6:f0:04:94:39:19:15:d2:6a:dd:e4:5b:2e:f2:da:46:62:0e:
07:88:80:57:ef:bd:06:e8:95:c0:b0:6c:2d:47:d8:bb:97:fd:
be:fc:60:a1:31:6c:d9:94:c6:eb:c5:a7:ea:86:78:a6:f2:9b:
16:b5:63:2d:f4:4f:a1:59:4c:8d:7c:b1:47:98:29:fc:0a:1f:
3a:1d:4a:cf:d9:5f:1d:0e:ce:c1:cf:4e:d3:73:0a:8d:b7:a4:
5c:69:fb:fd:18:08:10:47:44:c1:a4:52:25:cb:a4:fb:60:91:
2d:c2:a8:10:88:2d:f3:21:80:69:cc:9b:a7:e2:42:2f:a9:e3:
63:76:22:dd:e9:40:d1:1a:e9:9b:b9:d9:a8:17:b1:f8:bd:ff:
a1:fd:bd:ff:b2:8e:f7:12:fc:91:ef:8b:20:95:b2:47:0b:cf:
4d:51:da:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 13:08:42 2024 by rpki-client on console-fra.rpki-client.org