Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AZLj1rqNIkVUKKgq4R9tSVk2zB8.roa
File: AZLj1rqNIkVUKKgq4R9tSVk2zB8.roa (raw, json)
Hash identifier: Jg7W3lYWfqB3RlOrR4De/Cf2x7r1iJ5qDkXR0wAqVVU=
Subject key identifier: 01:92:E3:D6:BA:8D:22:45:54:28:A8:2A:E1:1F:6D:49:59:36:CC:1F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01914CD16FD4B50C5CADF4D130D2017C982C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AZLj1rqNIkVUKKgq4R9tSVk2zB8.roa
Signing time: Tue 13 Aug 2024 17:37:59 +0000
ROA not before: Tue 13 Aug 2024 17:37:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 45.8.70.0/24 maxlen: 24
45.130.202.0/23 maxlen: 24
45.133.4.0/24 maxlen: 24
45.133.5.0/24 maxlen: 24
45.133.6.0/24 maxlen: 24
45.133.7.0/24 maxlen: 24
89.34.126.0/23 maxlen: 24
185.165.45.0/24 maxlen: 24
185.245.7.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
194.5.82.0/24 maxlen: 24
194.5.83.0/24 maxlen: 24
194.61.40.0/24 maxlen: 24
194.61.41.0/24 maxlen: 24
203.25.124.0/24 maxlen: 24
204.75.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 06:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:d1:6f:d4:b5:0c:5c:ad:f4:d1:30:d2:01:7c:98:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 13 17:37:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0192e3d6ba8d22455428a82ae11f6d495936cc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:e9:f7:39:8b:a4:61:98:49:96:89:75:f0:
c1:29:96:3c:d2:8e:9b:8d:d9:2a:8b:c6:bf:d7:cd:
e7:a4:a3:8c:67:6e:0c:f5:70:f4:51:76:18:4c:81:
94:c1:96:7a:10:61:c9:d0:f6:46:f5:ef:59:41:b0:
42:b3:7e:79:05:74:b9:45:d2:59:6d:a4:7b:c7:22:
8e:15:91:2e:a4:46:59:36:d2:0e:87:63:92:1b:7f:
00:91:4c:ec:1c:45:8e:7f:46:8a:a6:66:8e:ec:b4:
43:1e:92:70:04:92:87:0c:27:96:47:0b:69:e5:dd:
a8:eb:dc:41:db:b2:50:9a:db:ba:34:9b:49:52:9f:
41:c6:33:1b:1b:ba:32:7c:f8:53:18:8e:3f:9d:42:
05:6f:25:99:1f:ff:37:de:9a:00:54:14:de:24:a0:
47:74:43:d0:b4:e1:20:11:ba:65:70:7b:f1:2d:52:
fc:32:67:bd:95:63:35:5b:5a:96:f9:93:a2:92:f2:
22:5e:a4:9d:c9:38:77:1c:1e:61:32:82:4c:3a:1f:
3f:2d:0c:a8:1f:51:8f:1a:46:1d:09:4b:cd:15:38:
c0:55:e0:25:a3:2d:c5:44:53:48:e5:4f:1e:0e:57:
65:2f:26:6a:55:85:5d:bb:72:dc:d4:31:45:3b:32:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:92:E3:D6:BA:8D:22:45:54:28:A8:2A:E1:1F:6D:49:59:36:CC:1F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AZLj1rqNIkVUKKgq4R9tSVk2zB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.70.0/24
45.130.202.0/23
45.133.4.0/22
89.34.126.0/23
185.165.45.0/24
185.245.7.0/24
188.213.202.0/24
194.5.82.0/23
194.61.40.0/23
203.25.124.0/24
204.75.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:43:2e:dd:9c:12:54:45:95:15:48:ae:64:60:a6:b9:bc:4f:
c6:c3:c6:77:82:2c:06:4a:d7:73:4e:fa:68:24:d5:11:e7:d6:
e4:16:98:e8:6f:32:95:a5:19:07:91:95:bf:43:d9:cc:c1:fc:
1a:ff:7b:a6:81:90:02:df:73:d4:4e:4a:c8:e9:ec:e6:bc:46:
6d:d4:4a:5f:87:96:65:51:21:ce:b7:2c:08:85:de:75:3d:07:
93:73:15:66:6c:d7:2e:a0:a7:1d:aa:a1:6a:97:12:2b:71:9f:
1c:4c:f1:72:37:a7:8a:5d:9a:98:55:6e:83:0b:f1:91:4b:01:
d1:cf:a6:ca:9b:ae:63:c1:ef:eb:65:0e:92:af:3f:8d:93:21:
fc:a6:71:a3:5d:76:14:d9:84:b2:d9:3c:33:c6:ba:a5:d6:c5:
6f:a1:f8:da:a8:99:67:0f:1d:01:07:12:ea:94:29:29:92:2e:
c5:30:59:02:aa:63:96:b7:73:d5:5a:bb:60:85:28:30:b1:26:
48:60:25:c1:9e:3c:2e:8f:d8:cf:d9:e6:eb:62:4c:da:07:71:
6f:51:08:97:0f:38:e7:c6:5f:fa:45:44:a0:fd:ff:ef:b1:6b:
1a:1c:a8:55:30:37:3f:fa:7f:a6:28:6c:83:28:6d:f8:7e:ec:
b4:a9:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 07:57:23 2024 by rpki-client on console-fra.rpki-client.org