Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-GGeLpj2kXalw2FLidZ5Im3LiaA.roa
File: 1-GGeLpj2kXalw2FLidZ5Im3LiaA.roa (raw, json)
Hash identifier: vLrTY2VboIDHQFhmT2ymbEv2oEPQqbXCVkyJLD/85U4=
Subject key identifier: F8:61:9E:2E:98:F6:91:76:A5:C3:61:4B:89:D6:79:22:6D:CB:89:A0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0195705A492AEE87DC4684724A989FB1A34D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-GGeLpj2kXalw2FLidZ5Im3LiaA.roa
Signing time: Fri 07 Mar 2025 11:25:19 +0000
ROA not before: Fri 07 Mar 2025 11:25:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
45.144.173.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 13:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:5a:49:2a:ee:87:dc:46:84:72:4a:98:9f:b1:a3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 7 11:25:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8619e2e98f69176a5c3614b89d679226dcb89a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:2c:00:81:f9:ac:93:79:42:15:ef:81:50:
9e:43:b7:d1:72:0b:40:b2:58:2f:5f:90:ba:c2:7e:
f5:34:d5:b2:a9:65:49:1a:bf:7c:7a:8a:d5:38:14:
9c:27:cc:3c:76:70:69:ed:64:50:ff:24:61:e3:6d:
19:56:9f:71:8b:7e:6b:17:7a:ee:c1:9b:45:69:b8:
e4:52:a9:bc:53:09:0c:b7:4b:db:85:11:af:95:2f:
6e:d7:2c:30:c9:3c:7f:bf:84:22:f2:31:44:8b:33:
75:d8:0d:be:9f:ce:1b:03:ab:11:98:3b:03:50:07:
b9:46:f3:f9:31:67:62:70:4d:09:58:82:f6:4a:90:
47:7e:b3:10:0f:3c:47:f8:9e:28:7c:5d:e0:ed:73:
b9:f9:4c:bb:b2:cc:9d:f6:11:21:a4:2b:b2:c4:ed:
2b:8a:cb:ab:08:6a:6d:76:f8:d1:cc:74:a4:b0:b1:
f5:0e:80:00:79:03:ba:39:ad:b1:f7:4d:2d:22:44:
04:01:e2:7a:79:d9:1a:82:7f:c0:83:33:b3:75:62:
a7:91:fd:e5:e0:c3:1f:ce:ab:5e:8c:f2:43:da:fc:
6b:a1:e7:1f:40:9f:25:bd:c3:79:63:9b:ca:9e:7b:
73:07:4b:fe:18:bb:9c:a1:18:4d:fe:5d:74:9d:3c:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:61:9E:2E:98:F6:91:76:A5:C3:61:4B:89:D6:79:22:6D:CB:89:A0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-GGeLpj2kXalw2FLidZ5Im3LiaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
45.144.173.0/24
89.34.106.0/24
89.40.70.0/24
93.114.183.0/24
93.115.106.0/24
194.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:01:2d:d1:3e:78:e8:de:3f:c3:5d:35:ce:cd:a3:fa:1e:ae:
f9:ed:18:4f:94:ef:2a:f1:d1:4b:b0:a6:87:30:58:69:7b:de:
ee:4e:22:72:88:ce:45:a8:a9:96:1c:32:0e:bf:47:81:b6:96:
38:6d:66:58:00:a7:cd:10:4d:ff:9b:38:ef:89:11:ed:21:31:
05:19:72:cf:e9:e6:e1:56:0d:10:96:d6:61:5c:b8:a4:17:56:
29:26:c0:f8:22:5e:fd:3c:80:a4:b2:fb:f2:eb:00:ed:e9:6a:
2b:f0:83:c5:07:28:7b:32:c4:d4:d4:39:f2:51:ba:30:0d:39:
72:e0:06:d0:3c:2a:ad:4e:13:e8:8d:cb:c3:2e:9a:a1:53:40:
20:4b:87:76:44:4d:a8:b4:0e:7c:f4:d6:5c:34:c8:b4:1e:f1:
42:0f:f2:19:63:de:59:95:a1:07:06:a8:f9:19:38:d8:c6:e1:
05:c7:b2:6a:f4:81:cc:ec:c3:64:1d:68:41:1a:fe:83:4e:23:
a3:aa:cf:82:54:3a:89:98:bb:a3:d7:ed:0b:a3:a1:4b:c8:79:
ee:bd:4e:e1:6a:13:fa:61:46:71:da:00:2c:41:14:5d:09:f2:
35:a8:f3:a6:b6:2e:e8:39:0e:e1:98:db:de:7b:1a:d6:22:fc:
3f:e6:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:31 2025 by rpki-client