Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mGgzoWUERZil3M7Rc4eBKkwOm6I.roa
File: mGgzoWUERZil3M7Rc4eBKkwOm6I.roa (raw, json)
Hash identifier: TUEtZh+XtAm+uRjJa4V/tGg4HhYWlPkp3q6zJhZ1RNc=
Subject key identifier: 98:68:33:A1:65:04:45:98:A5:DC:CE:D1:73:87:81:2A:4C:0E:9B:A2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193454379AE107682274E3B30443D4F9269
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mGgzoWUERZil3M7Rc4eBKkwOm6I.roa
Signing time: Tue 19 Nov 2024 16:31:10 +0000
ROA not before: Tue 19 Nov 2024 16:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43641
IP address blocks: 45.135.180.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 08:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:43:79:ae:10:76:82:27:4e:3b:30:44:3d:4f:92:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 19 16:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=986833a165044598a5dcced17387812a4c0e9ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:c8:ed:99:ba:1a:2b:c5:f4:8d:f1:30:bc:
07:c6:2a:e5:36:a7:3e:39:cb:16:f6:cb:80:3d:2a:
27:4f:4f:4a:67:81:78:5f:6a:66:22:b0:1a:15:68:
22:41:83:13:bf:4d:62:8b:e7:60:2f:fc:70:42:9d:
6e:17:6d:e7:1d:5b:c6:50:a9:c9:93:ef:41:54:b4:
3f:cd:18:60:43:10:21:32:96:0a:a7:d1:73:67:34:
5a:23:9c:b6:16:07:c5:d5:31:18:fd:0f:e8:39:4f:
8e:86:f7:a6:5e:83:22:24:c3:f0:90:f5:9b:82:d7:
53:67:66:e2:6b:89:89:b8:20:1b:ea:42:0c:26:d2:
97:52:08:f4:42:63:4b:f0:cb:f9:0e:34:5b:58:ca:
b8:16:85:bc:1c:5f:87:c2:ae:a6:4c:da:7b:e7:eb:
91:c5:06:c6:e4:1f:8c:f2:8e:48:03:04:e6:3f:ad:
90:ee:ce:29:5e:d9:62:3f:2a:77:c9:74:ae:b2:82:
b1:05:f4:34:66:02:97:ae:ea:bf:ad:84:0a:7f:af:
44:d7:d4:96:72:6b:74:a0:66:1a:a6:1b:b9:81:04:
f9:f4:ac:b8:3c:aa:6b:32:88:53:c8:1d:ee:cd:8c:
c4:11:dd:6e:af:c6:70:af:4e:4e:a6:5e:15:91:9f:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:68:33:A1:65:04:45:98:A5:DC:CE:D1:73:87:81:2A:4C:0E:9B:A2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mGgzoWUERZil3M7Rc4eBKkwOm6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
89.35.131.0/24
Signature Algorithm: sha256WithRSAEncryption
66:21:2b:ed:08:b5:b9:f9:df:1c:e7:99:a4:4c:bf:d2:69:c8:
83:17:29:12:01:fc:29:80:ed:70:0d:9d:7e:60:84:ee:9e:7a:
30:76:ac:df:e2:29:0e:1f:ef:5d:55:07:ce:b1:68:e3:e8:61:
6b:88:f3:e6:8c:62:ee:96:a8:3c:0b:ba:94:91:e8:9a:7b:bb:
04:5f:eb:7b:61:56:8b:91:7d:6f:0a:e2:d0:0f:83:33:a1:99:
d4:66:ae:40:80:51:29:26:ea:b7:cc:cb:84:f3:95:3e:4b:ae:
f2:0c:54:a1:0c:99:e1:e5:25:fc:ee:bd:cc:d5:bd:f9:95:ae:
64:09:f5:c2:97:0c:b3:e4:03:f1:a0:5e:8c:9b:07:8e:7b:de:
fd:7f:9f:fe:8f:d4:d7:23:de:09:ab:b9:e2:67:93:4f:50:0d:
4b:fd:0a:b0:a8:80:7a:25:e1:12:72:5a:29:a4:e6:2d:d5:61:
bc:f8:4a:19:12:2f:3f:07:30:19:2a:11:75:5c:6a:7d:96:f5:
51:98:de:c0:75:c9:72:ac:14:9b:fe:60:39:b4:60:c7:f1:41:
ec:20:44:0e:5a:ae:25:1c:a7:65:8b:1b:93:c2:de:d2:74:22:
bc:69:23:b3:e0:c5:b6:9b:9e:4d:28:d5:09:65:f1:17:c2:b2:
9c:9f:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:47 2025 by rpki-client