Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ywSlU3KtEK5HjbH6T-h7w6k_shg.roa
File: ywSlU3KtEK5HjbH6T-h7w6k_shg.roa (raw, json)
Hash identifier: r3nPUzyzPvJhCo+iXunzmUKnSvVx47ONI9RWZWtlh1U=
Subject key identifier: CB:04:A5:53:72:AD:10:AE:47:8D:B1:FA:4F:E8:7B:C3:A9:3F:B2:18
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190B2457434E4A4327D2162D6900EE5FF84
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ywSlU3KtEK5HjbH6T-h7w6k_shg.roa
Signing time: Sun 14 Jul 2024 17:23:34 +0000
ROA not before: Sun 14 Jul 2024 17:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
188.208.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 15:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b2:45:74:34:e4:a4:32:7d:21:62:d6:90:0e:e5:ff:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 14 17:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb04a55372ad10ae478db1fa4fe87bc3a93fb218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:03:f2:30:d1:5b:e4:98:f9:d1:ea:5b:37:
34:6d:ee:ce:27:b7:4e:94:e0:ab:c6:c5:70:c6:d5:
19:23:c8:1c:3f:3d:89:7d:30:8e:95:b7:5e:fe:52:
c0:de:de:fb:02:b9:72:31:be:e9:53:20:26:a5:33:
04:3c:ac:27:3a:f4:9d:5e:9b:28:e6:cc:0c:00:a7:
94:48:01:ee:93:2b:19:72:81:30:aa:84:b8:10:f7:
d7:b9:03:f1:c0:79:63:e1:2c:1e:74:d6:93:7b:12:
ce:e1:e3:56:d4:0f:42:cf:40:4e:94:5e:57:08:69:
a9:ec:4d:b2:6f:e8:1b:c5:7a:db:5c:81:0b:41:cc:
d4:03:bb:f8:00:52:b8:7b:1a:ae:5d:9b:2d:f2:5a:
1f:47:5a:97:73:e7:de:f6:0c:c6:4b:f1:33:64:02:
be:a8:6b:d5:4b:2f:0e:bf:07:79:5e:e5:6c:40:5e:
92:a1:6c:a9:51:2b:8e:61:ee:6f:c9:38:52:3f:63:
37:e0:76:07:b0:cd:0d:0c:54:64:a9:63:f1:c4:c1:
92:03:fe:cf:04:89:9a:08:ba:e8:4f:38:d9:c4:56:
40:fe:f8:ac:bd:5f:71:6c:1a:ea:ac:83:2d:b9:a1:
b8:42:58:49:38:e8:89:e6:ad:15:64:96:4b:0e:38:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:A5:53:72:AD:10:AE:47:8D:B1:FA:4F:E8:7B:C3:A9:3F:B2:18
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ywSlU3KtEK5HjbH6T-h7w6k_shg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
188.208.110.0/24
Signature Algorithm: sha256WithRSAEncryption
24:86:f7:87:76:ba:76:1b:9a:97:99:7c:96:39:41:08:1f:3f:
0f:40:ab:e2:ab:d7:90:f2:25:63:b7:34:ca:37:ca:19:ba:7e:
c0:f7:60:e2:4f:dd:e5:ff:a4:b5:8c:d2:d3:a6:3c:ea:82:04:
cc:08:c0:ba:e1:68:f1:a1:0e:c4:4f:a5:32:50:b4:59:ff:af:
95:fa:e3:bd:ce:a2:7a:4f:ef:4f:8d:2d:ce:5b:0d:08:35:07:
4d:d6:04:77:ee:d1:42:29:5f:cc:5f:84:b8:9a:07:a0:a0:1a:
7c:fb:80:b4:23:1c:78:89:50:33:eb:0f:5a:61:da:d8:57:24:
f4:04:70:5e:23:f7:0b:6f:98:d3:44:df:a5:21:df:03:9e:8d:
c9:c2:3b:40:78:b4:1d:87:ab:8c:96:cc:25:ed:e4:6c:fc:31:
85:49:32:89:03:b6:ac:57:8c:d3:5d:be:28:19:b8:3d:92:7a:
ca:04:f0:b0:f2:7c:b7:80:e6:95:3d:ef:5e:d3:c4:87:2c:f9:
86:2a:f5:e6:8a:13:88:bd:cd:fa:5a:78:f9:85:db:8b:33:3d:
e5:2b:0b:4d:37:6b:0c:b1:26:01:6c:8d:1d:9f:d0:1e:c4:3a:
c3:f0:27:f1:c6:48:34:e4:2b:71:8e:ee:b9:67:65:97:8e:14:
3f:75:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 18:23:57 2024 by rpki-client on console-ams.rpki-client.org