Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2IiTUDCHBfNilo6KGNbnVJk75nY.roa
File: 2IiTUDCHBfNilo6KGNbnVJk75nY.roa (raw, json)
Hash identifier: nSDfXlg45JuGW3jvNoCThzaNWXUMIh5gU/y2ZwSDZDY=
Subject key identifier: D8:88:93:50:30:87:05:F3:62:96:8E:8A:18:D6:E7:54:99:3B:E6:76
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194D02AB259DB16B6A55D80BEDD06FAEA1E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2IiTUDCHBfNilo6KGNbnVJk75nY.roa
Signing time: Tue 04 Feb 2025 08:54:06 +0000
ROA not before: Tue 04 Feb 2025 08:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 14:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:2a:b2:59:db:16:b6:a5:5d:80:be:dd:06:fa:ea:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 4 08:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8889350308705f362968e8a18d6e754993be676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ec:ac:90:6a:eb:03:11:db:e3:3a:12:1f:0a:
86:0b:95:73:b2:f9:12:96:cc:04:ca:5a:f5:77:05:
ea:9b:87:18:40:5c:33:ff:c0:e9:76:c7:57:fa:00:
88:e6:ef:26:5d:4c:e5:bd:e3:2a:0e:cb:5b:c8:fc:
97:7b:84:20:f6:47:76:79:7c:34:da:65:25:ea:2e:
76:73:d4:66:f9:70:37:a5:9d:75:05:56:63:5e:aa:
ca:d4:f9:f3:51:3b:6d:8d:a4:0a:47:f8:51:f7:f1:
55:bc:aa:bd:0f:bd:14:ab:db:93:29:36:d5:00:ff:
61:b1:e1:95:6a:40:f4:97:bd:2d:c7:c2:7d:83:4b:
db:fe:7b:ea:2c:eb:32:3d:af:68:2d:76:06:4b:e6:
03:c0:ff:ac:1b:ae:f2:1a:5b:59:86:b4:8e:05:1a:
b6:a8:03:af:a8:ab:0a:4c:eb:42:3e:88:33:2d:de:
91:bf:36:0e:04:b5:ee:5f:69:d0:30:76:18:94:b9:
fe:48:47:75:e1:be:1d:e0:fb:fc:76:bf:f8:6e:7e:
8d:fe:f5:3a:d0:2a:5d:37:95:d7:8a:4f:db:e3:dc:
32:2c:d7:ee:48:ff:75:1b:6b:f3:03:6f:c2:4d:d6:
13:c0:9e:99:99:26:9e:ab:1f:34:47:6c:b4:39:3a:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:93:50:30:87:05:F3:62:96:8E:8A:18:D6:E7:54:99:3B:E6:76
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2IiTUDCHBfNilo6KGNbnVJk75nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.254.66.0/24
188.214.107.0/24
193.124.36.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b7:a8:6a:e6:92:db:e6:d5:1c:ad:49:67:e4:7d:58:53:e3:
a5:bc:d3:f1:97:aa:7f:64:42:84:af:61:34:81:5b:21:4c:13:
4f:1c:c9:ce:10:77:e8:31:95:bd:f4:d3:23:49:a0:16:89:7c:
e5:08:08:2e:9d:88:65:ef:ca:31:13:5d:41:cc:87:89:49:95:
dc:71:de:6a:a4:b7:55:74:97:b8:c8:01:33:95:69:ff:1c:64:
92:0b:46:b4:ac:c2:53:b5:d9:2b:cc:dd:cf:2a:da:57:dc:2f:
ae:6d:e6:6d:c5:53:0e:68:3a:f5:79:ca:9e:22:d1:d3:45:4f:
f6:80:5f:a0:5d:48:a4:83:63:c8:03:7f:91:c3:dd:6e:a7:bc:
9f:99:1d:9d:2f:f8:b0:fb:17:2a:36:da:85:69:06:48:9a:9e:
ca:b8:95:14:36:3b:35:71:51:9b:cb:a7:7d:28:bf:b3:ea:b6:
3e:34:d7:8e:28:b7:1e:07:f6:cd:93:78:b7:c0:b0:d0:9c:57:
8d:a0:b5:2d:49:76:7b:31:88:16:5a:5b:0b:73:4a:f7:ee:97:
bd:cc:71:dd:fe:26:53:8a:8b:2b:07:77:44:6f:34:82:2f:82:
58:8b:95:b8:12:37:ca:75:69:c4:1b:50:90:aa:c8:b4:c2:08:
6c:e9:b6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:17 2025 by rpki-client