Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ExGCqRddOC5KXGDnGCYE-9Adf1k.roa
File: ExGCqRddOC5KXGDnGCYE-9Adf1k.roa (raw, json)
Hash identifier: odbKTCJyMf9ivZ39GchaDGB4BJD3NdXyC203DpJNo9E=
Subject key identifier: 13:11:82:A9:17:5D:38:2E:4A:5C:60:E7:18:26:04:FB:D0:1D:7F:59
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01902A70CF667E0766A3192FE25C368675D3
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ExGCqRddOC5KXGDnGCYE-9Adf1k.roa
Signing time: Tue 18 Jun 2024 08:22:34 +0000
ROA not before: Tue 18 Jun 2024 08:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.87.20.0/24 maxlen: 24
45.140.214.0/24 maxlen: 24
45.142.204.0/24 maxlen: 24
45.142.206.0/24 maxlen: 24
45.144.156.0/24 maxlen: 24
45.144.158.0/24 maxlen: 24
45.145.249.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
45.148.25.0/24 maxlen: 24
136.144.25.0/24 maxlen: 24
2a07:e343::/32 maxlen: 32
2a0f:e381::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 22 Jul 2024 11:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:70:cf:66:7e:07:66:a3:19:2f:e2:5c:36:86:75:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 18 08:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=131182a9175d382e4a5c60e7182604fbd01d7f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:f2:f8:98:92:d0:80:48:10:59:bc:e2:aa:
17:b7:d5:bd:0a:8f:8b:99:cd:a2:56:59:30:7a:50:
5a:ee:93:44:e7:22:d1:31:3d:c7:78:fe:0a:6a:6b:
f6:e8:81:b2:d6:b6:44:c3:81:5b:a7:c1:f6:41:7c:
f7:23:23:f0:4e:17:43:5c:cf:d5:73:af:2d:c4:8a:
85:ff:15:d4:bf:cd:c3:71:37:fc:68:1f:25:cd:41:
03:01:f4:ba:81:5e:f5:28:c4:d7:5e:af:8b:ce:71:
c4:db:df:c0:48:4e:d8:3e:3e:4d:6f:86:86:65:e5:
ba:c7:6d:06:45:32:8e:2c:a3:ae:b2:5e:fc:48:79:
51:0d:64:11:24:d9:02:01:89:3e:bc:67:c0:71:ad:
e8:49:ef:2b:da:48:a6:d9:35:55:5f:03:76:e6:9e:
5b:0c:df:c3:95:03:b2:ec:61:17:d4:83:df:0f:ab:
45:44:61:94:29:1b:32:9e:06:92:5c:af:eb:90:cb:
63:18:a0:0c:70:58:f3:ae:dc:03:4b:36:44:52:e4:
aa:f5:c1:6c:cf:cc:92:70:b3:36:ca:2f:02:e6:85:
d9:47:54:78:5f:54:96:89:1b:22:e7:34:a3:6d:3d:
ed:03:59:09:b8:29:78:06:e0:87:12:c6:d6:a9:e7:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:82:A9:17:5D:38:2E:4A:5C:60:E7:18:26:04:FB:D0:1D:7F:59
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ExGCqRddOC5KXGDnGCYE-9Adf1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.20.0/24
45.140.214.0/24
45.142.204.0/24
45.142.206.0/24
45.144.156.0/24
45.144.158.0/24
45.145.249.0/24
45.146.53.0/24
45.148.25.0/24
136.144.25.0/24
IPv6:
2a07:e343::/32
2a0f:e381::/32
Signature Algorithm: sha256WithRSAEncryption
3b:3a:29:d0:b3:05:48:c6:06:67:3f:9e:7b:90:e4:ba:5d:d9:
b6:b7:5e:ad:d5:33:d3:9b:b7:c5:6d:5b:2f:60:03:ce:c9:91:
b5:76:40:9f:14:06:84:c1:62:09:d5:24:da:80:fd:85:a6:e2:
ca:d0:72:97:18:22:8e:d8:1d:fa:dd:b7:60:02:dd:b2:0f:94:
ae:fb:0e:5b:69:60:e3:c6:33:24:b5:4f:59:a7:35:a0:c2:1d:
d7:5b:ca:11:d8:b3:69:70:c1:10:31:aa:96:e0:ba:81:4f:95:
72:f0:57:09:5c:e5:81:48:e9:98:35:48:58:0e:d0:e7:86:cb:
fe:7c:fb:62:af:14:c6:1a:7d:12:d3:1b:49:60:c9:87:47:21:
65:8a:d5:e9:b5:bd:7c:5b:45:b5:bb:68:7c:4a:2f:41:48:4c:
08:ae:90:64:d8:2e:aa:0e:c7:82:d8:38:48:8b:ed:a3:09:8a:
7e:73:b8:5f:25:37:24:46:7d:e8:51:ec:ac:b6:c2:2c:85:6c:
dd:b2:1a:e2:ad:ae:aa:22:1e:47:61:3c:aa:57:35:e9:88:4c:
7f:09:13:52:3f:90:3f:50:65:b0:95:bf:fd:f1:5b:e3:93:36:
4b:9d:21:12:8c:4d:9a:ca:22:de:32:d6:2c:2d:db:23:e9:ac:
57:82:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 14:12:10 2024 by rpki-client on console-ams.rpki-client.org