Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/utvqpYXg5tPwUa3FX29zbCa9o3U.roa
File: utvqpYXg5tPwUa3FX29zbCa9o3U.roa (raw, json)
Hash identifier: /ZOM7kkMNfBfk+9o3jEJUB35zskQ4mb0XaaeZW/81Xs=
Subject key identifier: BA:DB:EA:A5:85:E0:E6:D3:F0:51:AD:C5:5F:6F:73:6C:26:BD:A3:75
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190912DD6CBADC21A09B07F7BBAD3D6AEC4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/utvqpYXg5tPwUa3FX29zbCa9o3U.roa
Signing time: Mon 08 Jul 2024 07:10:18 +0000
ROA not before: Mon 08 Jul 2024 07:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
86.107.101.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.113.57.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
176.223.66.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 17:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:2d:d6:cb:ad:c2:1a:09:b0:7f:7b:ba:d3:d6:ae:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 8 07:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=badbeaa585e0e6d3f051adc55f6f736c26bda375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:da:3c:d5:c3:24:ea:25:60:cf:58:37:42:
0c:ab:88:6f:d3:86:a2:99:5e:ce:31:d4:51:8c:29:
6c:22:c7:b8:39:f7:93:45:ba:43:a9:8a:01:7a:f6:
91:71:1a:c2:63:f7:32:3e:94:6e:12:f4:10:c6:03:
f3:18:95:fe:e5:17:11:0c:a6:7d:dd:cb:3c:d4:ab:
5b:1d:81:32:41:ee:49:43:7c:c9:55:e8:ef:ba:23:
85:37:5c:8c:c8:17:88:58:9e:ca:60:59:ae:fc:ee:
50:74:c1:10:05:5d:ce:50:49:af:ed:67:e0:25:c3:
a7:6a:7c:a3:85:0e:9a:65:78:6a:f6:6d:43:ff:d9:
eb:85:c7:25:c5:fb:0e:21:ee:49:8e:8b:fc:c4:0f:
ef:74:e1:19:3d:67:b2:cb:9c:c6:ed:a2:c3:46:a2:
61:e9:3c:8b:67:71:a8:49:06:cf:8c:79:2b:a2:ca:
97:f6:a6:d8:b5:e3:a1:b7:09:17:43:cc:d7:d9:55:
90:f2:ff:91:3e:30:28:c1:48:51:cd:cc:0f:cd:d8:
f0:ff:7a:71:c3:a7:c4:10:f2:b5:fb:00:b7:2d:40:
b5:f3:dc:6d:e4:e1:64:42:0e:48:51:dc:63:58:19:
3f:c9:8d:57:38:f5:98:d7:27:ba:97:67:63:e9:4e:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DB:EA:A5:85:E0:E6:D3:F0:51:AD:C5:5F:6F:73:6C:26:BD:A3:75
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/utvqpYXg5tPwUa3FX29zbCa9o3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
86.107.100.0/23
89.34.106.0/24
93.113.57.0/24
93.114.183.0/24
176.223.66.0/24
185.198.235.0/24
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
76:71:a0:e0:c7:b2:e2:ee:92:72:20:e2:43:c6:4e:ba:2c:2b:
9b:34:33:c6:0f:c3:02:33:ea:cf:28:52:06:af:89:86:03:60:
5a:dc:72:d8:7f:aa:f3:8a:ec:81:54:eb:19:e3:92:20:3f:38:
08:02:07:8f:14:21:64:22:e6:2a:34:ea:0d:15:c9:3e:14:17:
a6:99:94:9e:42:f2:15:b1:29:5f:68:92:0c:41:6c:91:1c:89:
b7:8e:9d:2a:c3:23:7f:7f:a5:cc:d1:51:18:40:b3:11:46:4f:
62:bf:b6:b5:63:77:02:2f:82:fe:bf:d7:6e:1a:c6:43:b6:65:
02:7c:cb:06:36:0a:7a:81:56:82:81:f3:fb:72:43:af:5f:cb:
0d:cf:d7:2a:a3:5d:0f:18:74:8d:d7:a5:9f:1a:bb:8e:68:ed:
33:02:a4:69:82:53:d9:ef:fe:25:69:42:8a:77:6b:9b:6c:52:
38:78:95:06:c9:92:1c:69:a1:e8:88:66:ce:38:ae:30:0e:c8:
d2:ef:16:93:c8:47:7b:1f:d6:99:81:f6:7c:b2:f8:ca:2a:0a:
b7:31:b6:00:72:4b:94:91:77:1e:c2:11:eb:db:ef:e3:ea:c9:
70:d2:13:af:12:47:25:93:41:c8:48:c8:b0:26:a1:85:1a:dc:
a2:c7:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 19:12:37 2024 by rpki-client on console-ams.rpki-client.org