Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/eTPG61GsUD-KWKtGVTjVVti0pNM.roa
File: eTPG61GsUD-KWKtGVTjVVti0pNM.roa (raw, json)
Hash identifier: w83xVxmrxuG4yRpLFiUhuhDLNa4/ignfL64f1PG7TbI=
Subject key identifier: 79:33:C6:EB:51:AC:50:3F:8A:58:AB:46:55:38:D5:56:D8:B4:A4:D3
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018F82938C77F94424BDDD87A99ADB26466C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/eTPG61GsUD-KWKtGVTjVVti0pNM.roa
Signing time: Thu 16 May 2024 18:04:18 +0000
ROA not before: Thu 16 May 2024 18:04:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.85.124.0/22 maxlen: 24
45.91.20.0/24 maxlen: 24
45.91.22.0/24 maxlen: 24
45.130.136.0/24 maxlen: 24
45.132.193.0/24 maxlen: 24
45.149.104.0/24 maxlen: 24
193.176.210.0/24 maxlen: 24
2a07:e340::/32 maxlen: 32
2a07:e341::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 16 Sep 2024 10:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:82:93:8c:77:f9:44:24:bd:dd:87:a9:9a:db:26:46:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 16 18:04:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7933c6eb51ac503f8a58ab465538d556d8b4a4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:81:5b:3f:fc:ab:09:75:a5:8a:eb:cf:05:
c9:86:3f:62:07:24:6a:0f:63:b3:61:71:64:58:f3:
81:04:86:a5:38:69:61:8d:4a:0b:3c:cb:1e:e8:59:
18:ed:1d:b6:5e:43:b9:10:9c:69:d6:50:71:b2:96:
a6:f8:12:33:88:2f:7d:f9:d3:78:b6:4e:55:26:08:
f4:52:dc:d2:da:ef:d5:fc:d5:41:e3:3d:69:cb:42:
7c:55:16:08:1f:71:81:56:6f:ab:de:b8:96:37:ed:
2a:6f:d3:f5:6f:e4:d5:e7:27:42:30:ff:cc:40:0d:
d1:7d:cd:92:39:0d:6f:ce:5b:fd:4a:6c:a1:d8:c4:
ac:9a:dc:e0:41:a1:11:b5:8b:60:e5:ac:e1:03:ae:
39:3e:9b:f6:30:8e:f2:e7:4c:1c:3c:da:59:b7:c3:
a8:ab:15:46:15:54:ff:2b:e8:e7:fd:6d:f1:49:93:
b5:50:dd:4a:ea:4f:6c:4f:5f:f8:45:ae:ee:50:57:
0d:a6:20:42:5e:40:96:75:9e:6c:c3:db:51:93:46:
f9:13:5e:08:b5:3f:a8:42:4f:ad:7a:2d:b6:c3:31:
3e:a9:50:ce:5f:25:5f:94:a2:83:18:b2:16:a5:72:
7b:89:e6:01:b6:7e:85:f7:4c:54:83:6b:b2:f4:eb:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:33:C6:EB:51:AC:50:3F:8A:58:AB:46:55:38:D5:56:D8:B4:A4:D3
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/eTPG61GsUD-KWKtGVTjVVti0pNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.124.0/22
45.91.20.0/24
45.91.22.0/24
45.130.136.0/24
45.132.193.0/24
45.149.104.0/24
193.176.210.0/24
IPv6:
2a07:e340::/31
Signature Algorithm: sha256WithRSAEncryption
08:1d:df:88:73:99:f3:7a:19:27:b4:21:ff:79:97:c2:e0:7d:
04:a6:79:71:97:8e:b4:82:ff:70:72:48:39:80:9a:03:85:90:
07:f6:ce:e6:bb:2a:d6:7e:4f:15:02:0e:a3:ed:c4:27:cd:23:
4d:9c:f0:80:0a:08:74:0a:fb:32:3b:ed:7c:04:98:c8:9d:d0:
92:58:1c:12:27:17:51:a9:61:9e:d4:b3:70:fa:f3:a2:94:7f:
e6:0c:91:30:25:bc:b6:22:40:10:46:61:7f:43:9a:ad:8d:3b:
8c:c3:86:15:a3:14:35:26:bd:a7:73:a6:37:30:d6:71:4e:82:
9c:80:28:a3:24:12:67:53:8a:db:15:cc:b7:ef:24:02:53:43:
7b:72:ad:24:49:37:44:84:9e:40:ff:06:d1:a0:d3:c2:96:f8:
52:02:8d:50:5d:60:38:a4:10:44:af:9b:fb:76:5d:18:be:a5:
d3:60:1f:1f:f4:b5:ec:34:1b:0c:f2:a5:17:8f:cf:c3:80:f9:
66:57:8e:8a:dd:98:a8:3f:35:3b:a9:b6:fc:78:52:30:71:68:
93:88:c8:84:8e:02:f2:64:cb:6d:14:88:48:23:a7:89:49:bc:
a0:42:24:a8:59:e0:4a:b2:12:c9:dd:84:a4:7c:91:d4:86:01:
86:ba:37:6f
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAY+Ck4x3+UQkvd2HqZrbJkZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwNTE2MTgwNDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTMzYzZlYjUxYWM1MDNmOGE1OGFiNDY1NTM4ZDU1NmQ4YjRhNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreeBWz/8qwl1pYrrzwXJhj9iByRq
D2OzYXFkWPOBBIalOGlhjUoLPMse6FkY7R22XkO5EJxp1lBxspam+BIziC99+dN4
tk5VJgj0UtzS2u/V/NVB4z1py0J8VRYIH3GBVm+r3riWN+0qb9P1b+TV5ydCMP/M
QA3Rfc2SOQ1vzlv9Smyh2MSsmtzgQaERtYtg5azhA645Ppv2MI7y50wcPNpZt8Oo
qxVGFVT/K+jn/W3xSZO1UN1K6k9sT1/4Ra7uUFcNpiBCXkCWdZ5sw9tRk0b5E14I
tT+oQk+tei22wzE+qVDOXyVflKKDGLIWpXJ7ieYBtn6F90xUg2uy9Ot0mwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFHkzxutRrFA/ilirRlU41VbYtKTTMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvZVRQRzYxR3NVRC1LV0t0R1ZUalZWdGkwcE5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCLVV8AwQA
LVsUAwQALVsWAwQALYKIAwQALYTBAwQALZVoAwQAwbDSMA0EAgACMAcDBQEqB+NA
MA0GCSqGSIb3DQEBCwUAA4IBAQAIHd+Ic5nzehkntCH/eZfC4H0Epnlxl460gv9w
ckg5gJoDhZAH9s7muyrWfk8VAg6j7cQnzSNNnPCACgh0CvsyO+18BJjIndCSWBwS
JxdRqWGe1LNw+vOilH/mDJEwJby2IkAQRmF/Q5qtjTuMw4YVoxQ1Jr2nc6Y3MNZx
ToKcgCijJBJnU4rbFcy37yQCU0N7cq0kSTdEhJ5A/wbRoNPClvhSAo1QXWA4pBBE
r5v7dl0YvqXTYB8f9LXsNBsM8qUXj8/DgPlmV46K3ZioPzU7qbb8eFIwcWiTiMiE
jgLyZMttFIhII6eJSbygQiSoWeBKshLJ3YSkfJHUhgGGujdv
-----END CERTIFICATE-----
Generated at Mon Sep 16 14:52:52 2024 by rpki-client on console-ams.rpki-client.org