Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vJaQysdL7MaO05Bh7DboxMNnO8I.roa
File: vJaQysdL7MaO05Bh7DboxMNnO8I.roa (raw, json)
Hash identifier: zWROXJqgM1KlTWCSdt8eh786xZMcp6g61HxutpJfBB0=
Subject key identifier: BC:96:90:CA:C7:4B:EC:C6:8E:D3:90:61:EC:36:E8:C4:C3:67:3B:C2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0191EAC648E19BB46E8E856D07EC9BE166A1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vJaQysdL7MaO05Bh7DboxMNnO8I.roa
Signing time: Fri 13 Sep 2024 09:45:48 +0000
ROA not before: Fri 13 Sep 2024 09:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.176.214.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 11:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:c6:48:e1:9b:b4:6e:8e:85:6d:07:ec:9b:e1:66:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 13 09:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc9690cac74becc68ed39061ec36e8c4c3673bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:6f:15:db:5b:81:8f:e9:af:80:7c:15:2e:
cf:62:63:5d:27:94:fb:ca:92:75:90:2f:03:a7:cc:
9c:ae:75:00:b5:d5:d2:43:66:2f:a8:f9:a2:6d:69:
44:7f:77:c9:c3:51:cc:02:ce:5e:cc:3c:dc:3c:b0:
06:93:dc:69:70:b6:9a:8f:50:1d:56:6a:45:3a:4a:
2c:e8:9f:ac:96:1b:0a:9d:74:c3:e0:c9:75:8e:fa:
2d:13:cf:53:8b:aa:2d:16:5e:f0:19:ea:c0:10:d6:
19:63:df:ad:9e:45:ae:2d:53:e1:fa:02:ee:b6:05:
30:90:7f:82:d3:82:56:31:2a:1c:24:c2:30:04:f5:
89:5e:c2:ac:b3:70:68:da:00:a1:85:b1:42:55:f1:
18:bc:1a:cf:54:d5:6c:31:0e:68:65:d0:37:bf:0e:
75:f2:66:05:93:6b:91:8f:f7:98:5e:82:5c:05:73:
61:d7:7c:18:b6:c2:2f:0f:06:df:51:fb:c5:49:7b:
3d:2a:a0:1e:0d:c3:2b:c5:a2:9e:de:dd:d4:f2:42:
29:b9:66:6c:84:99:69:96:36:64:67:ec:85:e1:62:
6f:25:db:1a:59:b3:d0:5e:3f:8c:96:07:86:85:a4:
ea:d6:d9:2c:cd:d9:f3:8f:00:56:82:e2:6d:ef:ec:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:96:90:CA:C7:4B:EC:C6:8E:D3:90:61:EC:36:E8:C4:C3:67:3B:C2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vJaQysdL7MaO05Bh7DboxMNnO8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
91.132.51.0/24
93.114.183.0/24
94.176.214.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c6:69:99:cc:48:d2:92:58:56:70:03:73:8e:64:ef:97:93:
ee:85:06:aa:65:e1:b5:f8:bb:ec:b9:f6:fd:da:fe:e7:ed:84:
38:7d:51:ad:89:78:fe:cd:c9:7a:ef:0f:ee:19:b8:2c:b1:e5:
b8:b8:fc:eb:a1:af:2e:34:b3:10:9e:e0:c2:8f:6c:10:aa:d0:
14:1c:34:d6:4e:32:aa:8c:49:41:97:6c:0b:72:39:01:36:4f:
24:fc:e2:bd:5a:5a:96:33:2a:21:f2:3e:19:b0:5d:d1:3e:3d:
43:53:70:05:e4:85:21:c0:d5:3f:54:d0:a7:44:65:4d:34:aa:
1f:03:08:5b:9d:9a:3f:90:12:bc:7d:aa:5c:69:06:70:78:f3:
fd:b2:6e:a2:01:5c:76:15:2f:83:e1:44:1a:29:40:30:f4:5a:
fa:16:e1:99:90:16:6f:e5:5a:89:98:43:89:b3:63:bc:28:be:
0f:ef:51:1a:3b:02:74:00:1a:ff:85:f8:87:7c:b4:52:42:71:
6b:05:8e:76:46:ec:de:ce:24:15:15:e8:33:ec:97:04:eb:7b:
7a:ed:06:49:ab:96:76:0d:e7:1f:e2:5f:53:4e:e6:14:9f:66:
b5:4c:77:64:1a:fe:7e:f4:ec:0a:09:fd:ca:09:f6:2d:bc:c7:
10:c3:ba:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 14:26:46 2024 by rpki-client on console-ams.rpki-client.org