Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pLSe6AXHoT-18DsF6quCBE9940Y.roa
File: pLSe6AXHoT-18DsF6quCBE9940Y.roa (raw, json)
Hash identifier: k+F7G1DWobG0dvxGFj0WtXizGGWKsXXJ3McU5x2SN2c=
Subject key identifier: A4:B4:9E:E8:05:C7:A1:3F:B5:F0:3B:05:EA:AB:82:04:4F:7D:E3:46
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F6842C2722E68842AD116FBEA27093707
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pLSe6AXHoT-18DsF6quCBE9940Y.roa
Signing time: Sat 11 May 2024 15:25:56 +0000
ROA not before: Sat 11 May 2024 15:25:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.181.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:68:42:c2:72:2e:68:84:2a:d1:16:fb:ea:27:09:37:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 11 15:25:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4b49ee805c7a13fb5f03b05eaab82044f7de346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:05:6b:58:28:82:44:dd:54:8d:82:3c:b5:61:
8b:07:41:3e:27:59:c6:7d:22:28:6f:95:45:21:29:
04:a6:90:f8:61:af:3d:d3:2e:67:7f:32:7c:41:33:
64:55:c3:47:36:72:15:a6:f6:d8:10:46:16:3e:b7:
b4:be:75:7e:5e:2e:43:5b:14:2c:77:b3:c9:0e:92:
e3:4c:86:f3:11:82:16:cd:b8:0e:ee:6d:52:3e:ae:
0e:9d:c2:bf:32:92:e3:ae:a0:40:22:3c:89:da:ea:
cd:1e:23:d2:80:1f:da:ff:15:78:54:20:b2:d3:ac:
c0:4a:17:ef:79:8b:7d:c4:90:5b:d6:67:1e:0f:df:
ae:96:c8:2d:d6:d9:a9:8b:22:82:71:ba:b3:c0:06:
87:93:70:66:45:d1:f9:f2:61:0e:18:a5:4a:4c:03:
fc:0c:83:d5:6d:14:d3:42:91:e0:a3:9b:3f:33:47:
22:78:fe:2b:cb:98:89:6e:6c:7b:74:ae:2c:dd:e6:
42:bb:cb:cf:f0:22:2a:10:46:f5:6b:08:46:f6:57:
e3:58:3f:67:c8:56:c7:07:b4:33:ee:5d:08:0c:8b:
5f:a0:31:cf:44:96:5d:5e:31:13:eb:a7:d3:99:00:
10:00:0a:2c:54:64:3f:42:b9:8e:23:74:c8:bc:4c:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B4:9E:E8:05:C7:A1:3F:B5:F0:3B:05:EA:AB:82:04:4F:7D:E3:46
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pLSe6AXHoT-18DsF6quCBE9940Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.181.0-45.135.183.255
86.107.50.0/24
89.34.106.0/24
93.114.183.0/24
185.198.234.0/24
188.64.142.0/24
188.208.103.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:71:b6:b3:c2:76:76:33:b9:ac:bf:cc:83:9a:59:d7:80:b6:
32:7f:42:2b:ff:1f:a7:c8:d7:73:9b:31:43:5c:c4:9e:8b:90:
cb:f2:3b:91:b1:40:2c:f5:6d:d2:4f:03:61:00:40:9a:68:3c:
91:9c:e3:b2:ae:ca:40:79:05:b9:29:7b:07:a8:ce:02:d1:79:
e9:97:a0:63:af:cf:77:2a:72:13:03:50:6e:9c:bd:2f:65:2d:
a1:7e:3e:aa:ca:84:d8:ed:64:8a:18:ca:5a:29:b7:d8:45:25:
69:91:b0:d9:90:71:05:7a:db:2b:9f:ff:88:58:76:f8:6c:05:
c9:09:9f:a5:45:ed:af:48:38:a4:ad:24:1f:6f:fa:69:48:22:
ba:ee:5a:bd:3a:2b:01:90:4f:0f:1d:26:6a:99:e5:86:49:34:
68:5d:b8:96:0c:4d:85:28:e3:40:a6:12:e4:d0:71:53:43:49:
20:b3:2c:2c:e3:74:0c:ca:70:c3:13:e0:fb:15:79:fa:8a:a7:
78:59:27:04:2b:95:46:a8:62:4d:bb:8c:99:fa:4a:78:9c:76:
1b:1a:d9:ea:6d:b5:6c:3f:45:1b:3e:c8:98:93:8e:41:a7:a3:
56:4d:fb:b0:90:7d:43:db:a7:55:63:91:5b:0b:a6:45:f1:9e:
51:bc:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org