Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jtws0cDfz8iP6S1R3S6vQA4NDCU.roa
File: jtws0cDfz8iP6S1R3S6vQA4NDCU.roa (raw, json)
Hash identifier: yFd6FKQGBx/jXElIW6yg84Snh4ewV1EKNSuqISelKjA=
Subject key identifier: 8E:DC:2C:D1:C0:DF:CF:C8:8F:E9:2D:51:DD:2E:AF:40:0E:0D:0C:25
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192F7449DC254134BBD65527A632933A0A3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jtws0cDfz8iP6S1R3S6vQA4NDCU.roa
Signing time: Mon 04 Nov 2024 13:02:02 +0000
ROA not before: Mon 04 Nov 2024 13:02:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 18:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:44:9d:c2:54:13:4b:bd:65:52:7a:63:29:33:a0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 4 13:02:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8edc2cd1c0dfcfc88fe92d51dd2eaf400e0d0c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:6e:8c:53:87:82:8e:b1:8d:8f:39:7c:fe:
53:d3:98:2d:a1:98:42:f9:bc:83:92:db:7f:a1:3d:
6c:3a:1e:55:47:e7:24:77:e9:b9:0a:1f:a3:19:89:
77:fa:fb:8c:bf:49:50:7f:bb:6d:aa:c6:9f:52:36:
8e:ad:0a:ab:75:12:ed:bd:19:96:ec:20:56:0f:62:
b8:bd:72:ef:cb:34:76:9d:ff:d0:4c:ba:e8:f3:38:
3d:4d:ba:2a:d9:23:fe:58:6e:6e:72:60:64:c1:65:
a6:17:81:7e:30:e9:18:8d:be:3b:9c:23:ba:5d:ee:
76:00:9b:21:e5:9e:7a:05:53:64:a4:74:ed:9b:7a:
eb:fc:36:2e:ad:51:61:f5:38:3f:8f:32:8c:42:54:
9f:ae:4a:83:f3:08:9d:c0:ce:5f:6b:63:2d:9b:75:
66:5e:5c:ab:58:3b:cb:61:58:fa:b3:c0:c2:c9:29:
40:5a:e0:96:3b:64:a6:8c:9f:92:85:cf:7a:79:0d:
e0:7e:91:30:85:3e:25:b0:8e:7f:9e:9a:90:41:1d:
6a:74:a2:16:38:0a:50:e1:07:1f:2b:13:0c:ef:d0:
74:3e:a0:b1:7d:af:66:3d:f9:82:e6:f2:d0:bb:d9:
9c:3a:bc:c5:b3:23:32:21:13:62:79:16:ec:bb:b7:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DC:2C:D1:C0:DF:CF:C8:8F:E9:2D:51:DD:2E:AF:40:0E:0D:0C:25
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jtws0cDfz8iP6S1R3S6vQA4NDCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
103.245.228.0/24
188.64.142.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:4d:49:4e:57:31:d0:bd:18:fc:ef:3c:c0:7b:ca:cd:10:06:
c2:76:79:b3:ce:5b:a6:9c:01:34:d3:99:56:b2:96:60:05:99:
03:fa:80:95:1c:93:45:d5:4b:eb:bf:45:2b:db:ac:05:7c:72:
01:2a:1e:78:7b:7e:4a:d9:8a:d6:6b:7b:49:c6:85:eb:cb:03:
88:b1:9b:e0:03:12:dc:a9:d9:22:24:5c:c0:a5:13:7b:f1:b3:
49:20:69:7b:ab:cb:3c:0a:38:71:bc:66:17:31:57:67:74:db:
db:02:50:0c:be:b3:db:53:a6:8e:ea:02:19:89:10:fe:e6:5c:
86:bb:39:56:44:15:66:01:65:35:10:4a:02:90:92:9f:c8:53:
78:b9:ed:f6:d3:5c:29:92:b9:de:01:77:42:16:3a:6c:85:12:
f8:6d:87:64:86:28:16:93:d1:91:cf:5c:6d:21:09:29:25:b0:
de:52:19:c5:4c:5f:bb:38:6e:65:d1:db:a1:48:b3:39:13:70:
55:d3:fb:1d:4e:73:0a:e8:88:a8:45:7f:51:b6:e6:40:4e:27:
ce:43:d9:7a:60:47:02:c8:ad:b7:77:cc:8c:4f:f9:fa:5c:9c:
b4:4e:4e:c1:62:b0:b5:46:25:48:76:28:ef:23:90:96:ea:dd:
42:ed:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:29:22 2024 by rpki-client on console-fra.rpki-client.org