Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oo1FgGlTux2Rud5b9e40Rokuxuc.roa
File: oo1FgGlTux2Rud5b9e40Rokuxuc.roa (raw, json)
Hash identifier: qT4uN0PlpzZdAGc19WrIwPXhChupt/YcaxzWFnbb1rE=
Subject key identifier: A2:8D:45:80:69:53:BB:1D:91:B9:DE:5B:F5:EE:34:46:89:2E:C6:E7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018DCA29E681BACC60F6A5904B10C055CFE5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oo1FgGlTux2Rud5b9e40Rokuxuc.roa
Signing time: Wed 21 Feb 2024 05:36:00 +0000
ROA not before: Wed 21 Feb 2024 05:36:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 45.135.183.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 21:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ca:29:e6:81:ba:cc:60:f6:a5:90:4b:10:c0:55:cf:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 21 05:36:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a28d45806953bb1d91b9de5bf5ee3446892ec6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:f1:78:0a:ed:0e:88:53:af:02:c0:51:62:
01:dc:27:23:b6:50:a7:69:35:ec:e7:04:81:c7:cc:
5e:66:e3:9f:ee:3b:39:4b:70:75:20:cb:5b:e1:64:
22:1e:44:d8:ff:bb:57:d9:dd:2c:86:ad:d4:14:06:
73:4c:6b:87:41:70:1d:b8:bc:d3:e5:c6:94:5f:6c:
06:c3:35:d0:05:ac:5f:f5:35:e5:77:ac:84:60:04:
b1:90:98:f7:9e:aa:43:b6:2f:ee:39:0a:22:f2:54:
f8:e2:d5:a9:cc:ac:0a:cc:ec:ae:81:a0:55:79:42:
cd:fb:56:4e:de:45:36:55:d1:e2:8a:00:95:02:de:
8d:2c:ba:55:16:75:86:a2:b9:85:c7:a9:51:59:df:
0f:0f:33:da:42:5b:c9:ab:5f:da:b0:60:e2:8c:00:
0a:65:b9:4c:58:9f:5a:ba:6f:90:c5:78:f0:68:d5:
5d:1c:2e:dc:ec:9e:34:44:24:4b:0c:c1:5f:b7:b7:
50:0d:89:d9:3e:bb:50:15:5c:d7:28:e7:11:7c:e2:
ec:7e:e1:aa:1a:af:63:21:74:f5:07:fc:42:33:1d:
57:57:c5:56:cb:f3:6b:32:9d:88:52:a3:ef:e6:02:
16:f4:aa:80:7e:35:50:ca:4c:66:04:5a:32:16:47:
3f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8D:45:80:69:53:BB:1D:91:B9:DE:5B:F5:EE:34:46:89:2E:C6:E7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oo1FgGlTux2Rud5b9e40Rokuxuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.183.0/24
185.212.119.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:7a:84:94:91:d8:aa:21:39:83:4d:b7:56:65:01:52:8f:03:
49:a1:8a:31:af:a0:cf:35:96:a0:8c:ed:26:94:73:68:0e:24:
60:d4:91:fe:74:a1:19:48:d8:5a:60:b7:30:20:62:67:f1:b3:
20:8d:12:cf:9c:ab:88:10:06:9f:24:ea:19:43:5d:24:c8:92:
1b:e9:19:a7:86:17:b7:5f:30:30:11:db:2a:e0:f2:9a:25:b7:
09:cb:61:e1:7c:5c:6f:77:eb:cc:f3:53:f2:27:e1:f3:fe:6e:
fc:6f:af:46:39:e7:b6:fc:47:0d:b4:9c:ae:25:3a:5f:b0:86:
92:a4:59:7e:68:36:d0:a8:7b:3f:fc:41:29:d9:15:2a:a5:58:
4e:a5:ab:28:46:e2:1d:df:f3:0f:a8:01:4f:c7:3c:88:b6:96:
5a:9d:a1:2b:d9:39:d2:11:5b:70:55:06:6e:87:d1:fa:74:80:
e3:25:53:40:42:05:4d:d7:90:13:d0:96:b6:3d:21:18:c4:3e:
b1:03:1f:db:c2:6c:96:28:44:d7:f9:97:3d:d9:32:22:5a:bf:
2e:73:0d:1b:f6:cc:55:11:9b:e5:56:6d:5d:ac:94:5b:86:e3:
c3:a3:a7:a9:a6:91:ae:4f:27:86:5c:93:b6:02:ce:53:49:d9:
5c:82:41:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org