Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6F_bosikrRwO3Pt36PEiA9_kCQw.roa
File: 6F_bosikrRwO3Pt36PEiA9_kCQw.roa (raw, json)
Hash identifier: GJBncS4Zh+EtUL5onsV1/1g3B5iWBeNLnZ8EJQzYUhY=
Subject key identifier: E8:5F:DB:A2:C8:A4:AD:1C:0E:DC:FB:77:E8:F1:22:03:DF:E4:09:0C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01945B5911B9007975C633C51B9DFAB1EA3B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6F_bosikrRwO3Pt36PEiA9_kCQw.roa
Signing time: Sun 12 Jan 2025 16:29:11 +0000
ROA not before: Sun 12 Jan 2025 16:29:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.34.101.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
212.192.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 15 Jan 2025 12:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5b:59:11:b9:00:79:75:c6:33:c5:1b:9d:fa:b1:ea:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 12 16:29:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e85fdba2c8a4ad1c0edcfb77e8f12203dfe4090c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:cf:62:41:d9:b0:49:b9:75:f2:89:9a:5e:
a9:1d:0a:08:b1:9f:fe:40:f4:c0:1a:1d:5e:ab:ff:
74:f5:14:b4:d1:4d:41:d2:49:0a:4e:44:06:86:08:
c8:bf:2b:55:91:31:15:c7:77:a8:53:0f:55:03:9c:
09:0f:fe:c2:8c:2c:76:f9:00:b3:a5:04:78:42:28:
f3:c7:ec:84:f4:08:bb:b5:67:ae:ee:f4:75:18:cb:
bc:00:0a:92:16:87:4c:e2:52:21:c9:73:53:af:b6:
fa:81:4e:eb:96:21:23:1d:4e:b0:5a:cb:42:a3:fa:
3d:c4:fd:1b:94:84:fc:c5:40:f4:9f:8b:b6:c4:31:
a5:48:af:46:67:86:92:11:16:a5:0f:8e:50:b9:6b:
45:ff:ef:31:05:e8:7b:0c:12:8e:fb:e1:0c:f1:af:
ca:c9:f3:a1:15:8f:e5:7c:f1:d4:63:fd:71:68:5b:
3a:b6:7a:1b:ed:21:2a:6c:3b:1a:ec:fe:25:a3:74:
aa:f5:8a:b9:00:18:ce:8b:f9:60:68:26:7a:16:a2:
28:5b:04:f2:1a:ea:f1:96:f0:1e:17:ae:23:ad:43:
58:4a:db:b8:e3:eb:28:b3:c8:bf:62:1b:60:87:d9:
22:81:09:ca:90:50:b3:84:ab:7b:34:54:47:c4:fd:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5F:DB:A2:C8:A4:AD:1C:0E:DC:FB:77:E8:F1:22:03:DF:E4:09:0C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6F_bosikrRwO3Pt36PEiA9_kCQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.34.101.0/24
185.254.66.0/24
195.88.89.0/24
212.192.16.0/22
Signature Algorithm: sha256WithRSAEncryption
63:34:2d:88:91:aa:d4:dc:5b:4f:e1:fd:3f:de:0d:33:a4:f2:
e7:6a:26:06:10:50:7b:60:e9:a1:d5:de:ee:d4:57:e9:43:2e:
9d:c5:a1:a8:1c:f8:8c:94:62:ed:fe:0c:cc:51:99:7b:bf:b7:
3d:71:ca:2f:be:c6:cd:22:01:c9:eb:a9:d4:e3:88:04:3d:c1:
5d:c7:ad:43:ea:f9:62:ed:5d:a1:37:7c:5c:20:98:50:95:7f:
0d:03:29:96:8a:85:84:8a:23:4f:e3:99:e3:c5:1b:4b:a1:b5:
3c:72:bb:5c:61:10:7b:84:aa:e2:f8:bf:f3:f9:1e:46:66:71:
a9:9f:55:51:2d:8f:77:64:f0:e9:a7:1c:20:b6:cf:c3:5a:3f:
91:34:cd:c0:b9:dc:87:19:06:6a:c8:89:26:94:23:cf:ef:69:
c4:74:ac:25:bb:16:2d:89:47:0a:56:8d:e1:52:c4:ad:bc:ed:
2f:cb:0e:f2:7a:01:63:06:f9:5b:26:d4:74:91:79:81:96:c9:
0d:22:92:98:f0:27:bd:00:75:c6:6e:d8:a8:ae:43:8a:79:35:
1e:69:40:39:a4:45:17:5d:21:f2:f9:c5:14:1d:3b:7f:c8:1c:
8d:a2:46:44:09:30:41:c3:e0:00:68:df:61:0d:bd:6a:11:ab:
ea:a7:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:43 2025 by rpki-client