Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hWvomL1a4KPIvels9SOjb6r4WDs.roa
File: hWvomL1a4KPIvels9SOjb6r4WDs.roa (raw, json)
Hash identifier: 0MuCFG3ml7P8+H5cFU3+rLHnoIKJUfzY5aHOKCp2UBU=
Subject key identifier: 85:6B:E8:98:BD:5A:E0:A3:C8:BD:E9:6C:F5:23:A3:6F:AA:F8:58:3B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F9D5D8BBE0AD5C7A5A22A23C42C50855F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hWvomL1a4KPIvels9SOjb6r4WDs.roa
Signing time: Tue 21 May 2024 22:55:04 +0000
ROA not before: Tue 21 May 2024 22:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.181.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 14:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9d:5d:8b:be:0a:d5:c7:a5:a2:2a:23:c4:2c:50:85:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 21 22:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=856be898bd5ae0a3c8bde96cf523a36faaf8583b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:a9:b4:25:0c:ab:b1:73:ac:60:8d:5b:bd:
7f:e5:50:dd:d5:63:d5:74:3e:f1:1c:88:1f:d4:92:
a3:9c:b1:aa:d9:13:75:df:53:4f:44:99:2f:a5:dd:
cc:eb:8f:76:8c:17:d6:5e:a8:74:7c:a3:11:64:65:
42:31:a0:54:1e:bd:0d:d4:29:ed:94:35:d2:6f:03:
0d:79:ff:86:52:d7:6c:c3:fa:06:cd:64:4d:8f:71:
0d:78:c4:e9:c5:af:25:c6:f7:97:3a:1b:d9:28:ef:
59:11:46:e5:ef:f6:28:f0:b6:54:0a:98:97:70:7f:
75:ca:37:75:75:c6:25:6f:c1:56:79:7c:32:0b:54:
0e:2d:03:95:17:d6:6b:e8:90:8a:7f:10:a1:35:8e:
2d:b4:fa:27:76:0f:c6:c5:85:b5:19:ef:3a:12:85:
5f:1f:21:94:97:7c:c5:88:4b:bb:3c:a2:cc:25:af:
bd:46:67:a5:1a:9e:67:5a:4f:0c:79:37:43:d6:e4:
12:f0:76:0e:ef:36:d1:dd:63:45:ad:14:7f:e8:c6:
9a:42:36:e5:cd:64:40:5c:ab:85:a0:35:b0:c6:77:
8b:ed:5a:98:17:4a:46:af:c1:61:81:fb:4a:43:aa:
ac:77:81:1b:0b:3a:fa:e5:61:a7:99:94:d4:d5:36:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:E8:98:BD:5A:E0:A3:C8:BD:E9:6C:F5:23:A3:6F:AA:F8:58:3B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hWvomL1a4KPIvels9SOjb6r4WDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.181.0-45.135.183.255
89.34.106.0/24
92.114.32.0/24
93.114.183.0/24
94.177.51.0/24
185.198.234.0/24
188.64.142.0/24
188.208.103.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
26:cd:1f:63:5b:b3:74:d5:a2:9b:7c:49:8f:43:ce:ef:0c:be:
76:b3:ec:d7:33:82:7a:1f:44:57:86:46:71:c4:1e:20:d6:0e:
6f:75:1a:b9:4e:11:f3:9a:2c:6c:68:85:53:81:b1:f5:ed:80:
3e:c1:0f:30:7e:43:ae:5d:91:cf:de:16:e5:74:56:be:68:00:
2e:6b:fa:cf:ae:f3:8e:48:94:a1:08:70:83:8d:bb:c0:59:5c:
37:4f:b2:df:90:3a:52:0d:a8:a3:3c:df:12:d7:20:79:dc:db:
92:c3:87:10:c5:b0:45:12:2d:3c:3a:45:e5:74:15:e5:d5:82:
e3:5d:4e:69:a3:48:89:7e:7c:5f:31:6b:0b:ed:94:4c:5e:a7:
5f:17:bd:82:0f:3c:6a:09:02:da:59:be:66:a3:5b:e3:c5:1f:
82:da:7c:5e:19:dd:6b:b1:79:ab:21:58:a7:b4:5b:d3:5e:d3:
a6:1a:13:cf:9f:70:9a:27:a2:88:5b:4a:3c:d6:7e:03:78:13:
93:89:0e:8c:4f:6d:30:b3:02:38:59:53:c6:bf:b2:e1:73:cd:
bf:d2:b5:4f:07:c1:9e:e2:89:62:bb:4e:64:45:6a:1a:9d:64:
32:52:52:e0:a2:91:d0:14:57:ce:25:53:da:19:ad:5c:95:d8:
82:54:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org