Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pMYiutWROY9GWKSqLDHOWV3SyXM.roa
File: pMYiutWROY9GWKSqLDHOWV3SyXM.roa (raw, json)
Hash identifier: xzkTjcCM9o1QBXcE6BEkwq/Fm48VE5UmLNTmrWPXZVY=
Subject key identifier: A4:C6:22:BA:D5:91:39:8F:46:58:A4:AA:2C:31:CE:59:5D:D2:C9:73
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192C82232816993FF6A18F29CE4CD55ECD5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pMYiutWROY9GWKSqLDHOWV3SyXM.roa
Signing time: Sat 26 Oct 2024 09:22:17 +0000
ROA not before: Sat 26 Oct 2024 09:22:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.45.44.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 10:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:22:32:81:69:93:ff:6a:18:f2:9c:e4:cd:55:ec:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 26 09:22:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4c622bad591398f4658a4aa2c31ce595dd2c973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:c2:ed:65:ba:81:a0:38:22:94:c3:92:b5:
19:7c:00:a4:5d:8c:90:3b:ac:d8:86:ba:66:b3:d7:
6a:da:1c:a4:81:02:64:f5:57:ea:eb:fc:68:28:9a:
57:f2:5d:e7:cd:dd:f0:55:a4:a2:37:2f:6f:fd:dd:
4e:03:1a:76:99:f9:ec:49:e3:a2:47:1e:0f:dd:ae:
70:b9:38:5c:7b:0c:78:18:bf:a2:82:a1:1b:50:fe:
9a:01:cb:99:72:18:c4:b7:5c:f8:6c:bb:4f:17:a8:
22:32:bd:e2:58:fa:7d:75:27:20:5d:e0:3b:56:ec:
ab:24:fa:fb:e8:7a:2f:34:29:21:d1:62:6e:0d:e0:
06:33:25:ea:b5:00:9d:7d:36:80:de:0d:33:49:84:
4b:20:c8:3e:71:4b:63:a8:85:bd:46:51:c7:e9:a6:
e6:83:56:7a:6f:2d:16:f9:15:5a:17:bc:ca:fc:1f:
17:ae:1f:b7:0f:72:4f:9c:e2:45:4f:58:41:f9:01:
74:cd:a9:7b:0f:2f:35:df:33:f4:71:03:6a:51:26:
f2:11:cb:ea:46:c3:f2:58:28:7e:94:c8:0f:43:c9:
e7:5f:9d:0c:f4:fa:0b:57:67:d5:e8:75:e1:8e:e8:
30:4c:fa:86:61:b4:97:0b:2e:cb:d3:e9:d7:a0:ff:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C6:22:BA:D5:91:39:8F:46:58:A4:AA:2C:31:CE:59:5D:D2:C9:73
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pMYiutWROY9GWKSqLDHOWV3SyXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
89.45.44.0/24
93.114.183.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
45:df:61:79:a9:38:b2:a3:a8:46:14:a3:ba:bd:b5:de:89:83:
9d:d0:6c:90:b3:9c:a8:6c:24:97:1f:ce:17:a1:e9:94:ce:a6:
ef:b1:2d:6b:50:11:1e:c6:18:59:af:fb:b0:0f:07:a2:6c:b6:
e9:f2:d4:cf:32:36:86:e2:dd:6b:22:61:b6:08:d7:19:9c:ad:
82:89:2a:86:e8:11:a4:9f:8c:4e:a7:79:31:a2:3d:7a:08:e4:
0c:48:7a:38:7e:d5:1c:9e:dc:a8:ba:3f:9b:a4:1a:9f:3c:ed:
f0:e0:60:d8:31:09:42:ed:66:ef:f2:cd:7f:3d:97:33:d4:af:
e7:dd:02:ce:bd:71:2f:12:66:b5:59:55:d2:d9:6a:75:04:96:
57:b7:17:75:bb:51:6f:9e:51:08:db:d1:8d:49:e1:77:ad:d1:
0d:e9:70:bf:61:83:3b:32:47:e4:66:8f:9e:e8:e9:b3:59:f8:
d3:34:08:7c:42:5d:5e:56:72:fa:30:60:89:67:b8:c3:d4:5e:
52:0f:19:a9:cd:aa:88:0e:b6:5e:24:f0:54:c8:f8:7c:e4:71:
c9:9e:a0:45:b2:c5:5a:20:3d:d9:8f:a2:32:bc:17:25:94:89:
4c:9f:07:4e:74:de:00:43:fd:ca:8d:3f:40:45:dc:a7:0d:7f:
b5:31:37:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 14:24:43 2024 by rpki-client on console-ams.rpki-client.org