Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ekKR3S8W1CIN0B7loQzmqARbNB8.roa
File: ekKR3S8W1CIN0B7loQzmqARbNB8.roa (raw, json)
Hash identifier: GCRxNvfkF01ZYjRcXqzYlqRQSWC/Og+IAdJpPI5mSfY=
Subject key identifier: 7A:42:91:DD:2F:16:D4:22:0D:D0:1E:E5:A1:0C:E6:A8:04:5B:34:1F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0191FA6ACC25CEE462BE613C7F583BAE11FF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ekKR3S8W1CIN0B7loQzmqARbNB8.roa
Signing time: Mon 16 Sep 2024 10:39:48 +0000
ROA not before: Mon 16 Sep 2024 10:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 45.88.14.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
93.118.36.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
185.198.233.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 13:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:6a:cc:25:ce:e4:62:be:61:3c:7f:58:3b:ae:11:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 16 10:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a4291dd2f16d4220dd01ee5a10ce6a8045b341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:f2:29:f5:81:4f:26:39:1f:3f:4c:cb:bc:
bb:15:c0:9f:fc:c8:77:87:8e:bc:ce:51:ac:c4:c1:
07:92:3e:00:e3:6c:15:8a:57:38:93:54:aa:6d:a4:
54:7f:40:c3:e1:7d:ed:af:81:16:e9:3d:c3:e0:24:
11:2d:81:af:79:55:0b:3d:a5:ab:e5:0d:d0:09:b4:
20:90:22:41:57:c2:23:5d:85:47:4d:38:4e:0f:76:
a2:36:e2:2f:85:42:c6:1c:41:93:86:4f:dd:16:64:
50:79:98:a7:69:0a:0f:3b:f0:61:52:27:81:48:a1:
2c:89:ab:3e:83:1d:60:ac:2b:84:e2:c9:6e:e8:93:
04:48:63:29:27:b7:7b:76:c5:b6:c6:83:36:33:a1:
54:25:06:bc:4d:15:9a:c2:77:b0:28:b4:f7:2f:9b:
c8:4c:2f:35:c8:34:e0:9f:18:b5:c7:de:ba:d4:1a:
7d:af:e8:b2:63:87:63:4f:1d:9d:10:6f:6b:9a:ad:
9e:6c:b5:26:55:44:35:69:ae:d6:dd:ce:4a:ac:fc:
c2:80:51:93:95:c6:e2:fe:1e:48:03:25:d1:41:bc:
25:ca:18:8e:fd:9c:e5:f0:97:67:9d:68:b3:2f:d6:
82:e4:ee:44:f9:eb:9b:39:df:2b:07:5c:3b:20:10:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:42:91:DD:2F:16:D4:22:0D:D0:1E:E5:A1:0C:E6:A8:04:5B:34:1F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ekKR3S8W1CIN0B7loQzmqARbNB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/23
62.192.152.0/24
77.81.182.0/24
79.110.227.0/24
85.204.18.0/24
89.34.106.0/24
89.35.129.0/24
89.37.192.0/24
89.40.36.0/24
89.40.215.0/24
89.45.35.0/24
89.47.36.0/24
93.115.106.0/23
93.118.36.0/24
93.119.154.0/24
94.198.171.0/24
128.0.41.0/24
176.223.188.0/24
185.198.233.0/24
185.212.119.0/24
188.212.121.0/24
188.215.31.0/24
188.241.221.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ff:28:20:87:45:02:23:b8:ab:6a:7e:cb:59:7b:c1:19:c0:
98:26:cb:b1:1e:f3:f3:cc:4b:c7:4e:d5:33:6d:0b:0b:1c:4f:
bd:d6:76:dc:47:c7:71:c6:f8:3e:e7:27:50:37:40:7b:ad:bc:
49:04:41:22:3a:cb:5b:f2:ad:d9:98:63:1b:48:c1:ea:58:b3:
18:4a:68:41:90:76:6d:fd:10:29:2b:c2:b7:a9:17:6c:93:57:
7b:6d:9d:77:05:26:e8:3a:d9:d2:d0:1d:08:b9:ee:df:39:09:
fd:dd:e8:0e:77:bb:d9:c0:f6:4d:78:d4:8c:58:bd:30:a1:b2:
53:37:70:fc:5f:d1:1d:ee:7f:e0:7c:a9:9b:93:b8:d9:f6:e0:
3e:d3:8d:32:49:77:7b:0c:63:65:3b:bc:86:5e:20:97:94:6c:
36:fb:b6:b1:6b:e2:54:1e:1f:fa:81:ba:a5:8c:67:fa:b4:02:
0f:cf:24:c3:a4:98:e2:db:fe:fd:56:af:da:d8:9f:a8:a6:c0:
ea:7f:df:59:50:ad:6c:bf:7d:ce:1c:21:73:3d:e3:04:97:1d:
06:7f:6b:d8:0b:d1:26:cd:af:44:a3:53:80:71:e6:b8:7c:d7:
45:1f:cd:e9:51:86:92:95:0b:97:67:e3:83:06:dc:c5:37:45:
c3:9b:22:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 14:58:13 2024 by rpki-client on console-fra.rpki-client.org