Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4O7knn4YdMeBSI7f0VSXZKRLyHQ.roa
File: 4O7knn4YdMeBSI7f0VSXZKRLyHQ.roa (raw, json)
Hash identifier: rIBAsTp7F68g1Drg/0HHb987XdcYFDipNgp80y8UVwM=
Subject key identifier: E0:EE:E4:9E:7E:18:74:C7:81:48:8E:DF:D1:54:97:64:A4:4B:C8:74
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192D2AEFFF11BD97796E9CE60BAC7C8B290
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4O7knn4YdMeBSI7f0VSXZKRLyHQ.roa
Signing time: Mon 28 Oct 2024 10:32:17 +0000
ROA not before: Mon 28 Oct 2024 10:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.45.44.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 12:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:ae:ff:f1:1b:d9:77:96:e9:ce:60:ba:c7:c8:b2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 28 10:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0eee49e7e1874c781488edfd1549764a44bc874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:a7:83:d8:90:83:a0:9a:15:44:14:e5:18:
7b:de:24:76:59:7b:0d:75:50:84:f4:63:b5:4d:80:
5f:dd:17:24:6d:e8:86:8a:36:c3:f7:a7:b4:b8:55:
6d:8e:d6:da:cf:7a:ce:4d:ca:63:b7:25:53:22:f3:
c0:b2:5d:62:3a:39:88:af:ed:c1:09:18:45:af:fc:
20:9b:84:ae:b4:60:d2:05:f2:e2:26:15:b3:cd:a5:
40:74:21:7b:5d:48:bd:58:00:be:9b:72:1e:d1:da:
c1:da:4a:25:a8:6d:3e:78:e4:e1:8c:b1:b2:06:f9:
e5:2f:68:42:6a:02:ff:1e:c5:b9:6f:22:f9:19:54:
e8:26:24:17:95:92:96:61:0f:5b:6e:2f:ec:0e:b4:
b0:7c:86:cc:58:4a:f2:08:e2:fc:ca:d7:eb:bd:c5:
af:1c:b9:7b:62:28:4a:17:47:6d:14:20:8f:d5:ad:
52:38:9c:73:b4:03:82:e6:f7:17:45:7e:bb:67:16:
c7:4e:f2:10:e9:11:5e:15:cb:0b:cc:9d:c2:30:bd:
98:67:ba:81:26:c0:0d:50:36:af:90:85:de:cb:85:
fe:a1:c4:e2:72:4b:33:d2:a3:28:88:cc:6b:61:af:
d8:ce:f7:08:f4:56:61:f5:6f:09:e5:b3:e5:01:ec:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EE:E4:9E:7E:18:74:C7:81:48:8E:DF:D1:54:97:64:A4:4B:C8:74
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4O7knn4YdMeBSI7f0VSXZKRLyHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
89.45.44.0/24
91.132.50.0/24
93.114.183.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
00:08:87:9e:78:5d:db:59:06:c4:be:45:16:b0:5b:9a:2f:52:
58:e5:53:79:23:f6:54:94:84:4e:2e:70:9a:b9:99:cc:98:8f:
16:79:c4:ba:dd:99:6e:de:35:84:d7:8d:ae:cd:cb:72:7b:67:
05:d5:f0:f0:bd:88:45:6d:19:6f:a3:e1:6c:16:05:e4:53:7e:
72:42:8c:e9:2a:6c:f1:e5:8f:1e:94:9e:9f:e4:38:85:6e:d4:
12:e2:ff:98:05:08:0f:63:e6:00:ae:fe:7b:b5:18:d3:97:19:
44:36:04:31:8c:5b:35:cc:78:de:92:f3:36:f0:72:5b:fd:ce:
1a:1f:ec:b0:9c:ba:48:3a:0c:d9:23:cc:ca:45:51:ac:90:ce:
75:3a:de:11:79:15:e4:83:7f:57:ee:2d:01:d3:e5:56:d3:8b:
04:93:85:b3:44:9e:ff:3c:3e:2f:6d:a4:43:fd:ce:93:4c:57:
b6:8e:73:9e:ea:75:2a:0d:2e:de:1a:ce:c9:ef:d6:14:77:2c:
77:80:be:89:92:35:f4:15:6b:1d:cd:1b:de:65:f5:23:12:5c:
1c:91:61:03:78:76:fb:c0:58:02:85:06:85:7c:29:92:f2:4f:
f5:08:e4:94:97:c4:18:ed:55:a2:1f:84:b3:b1:d1:07:15:31:
82:24:5d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:34 2025 by rpki-client