Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6IbTyzOZESyjRwkp_6T6By-VYMk.roa
File: 6IbTyzOZESyjRwkp_6T6By-VYMk.roa (raw, json)
Hash identifier: qJUgMKja3uBVTst2QtWUHZk432sJtNnm8txyKxNmU9g=
Subject key identifier: E8:86:D3:CB:33:99:11:2C:A3:47:09:29:FF:A4:FA:07:2F:95:60:C9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01948F048A47173DFAFACB463392CE57C737
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6IbTyzOZESyjRwkp_6T6By-VYMk.roa
Signing time: Wed 22 Jan 2025 17:17:06 +0000
ROA not before: Wed 22 Jan 2025 17:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.34.101.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 15:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:04:8a:47:17:3d:fa:fa:cb:46:33:92:ce:57:c7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 22 17:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e886d3cb3399112ca3470929ffa4fa072f9560c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:a1:cf:3a:99:1a:85:5e:dc:af:84:aa:1d:
28:8e:79:16:f1:93:e6:6e:2e:0c:a9:95:59:f0:3f:
b6:a8:3b:8b:60:bb:f7:73:c3:a6:99:f4:68:0b:10:
96:9b:2d:93:d6:dc:69:81:7a:f2:71:4d:02:ab:1d:
14:2d:b2:dc:eb:70:fa:c7:fa:66:c9:7f:46:e2:bf:
4b:12:b5:cc:5b:04:f7:7a:80:4a:1c:24:25:a4:a6:
f2:6f:5a:d5:9c:b6:d4:2e:99:02:25:7c:72:1a:91:
df:8c:87:0f:05:54:25:c2:54:2c:90:e4:79:43:78:
56:9e:76:08:86:b3:d2:f0:de:11:69:f9:45:cb:9d:
fe:6e:c0:a9:9c:09:14:dc:d0:be:a0:a9:9b:8b:36:
3b:88:61:f7:4f:14:ed:17:01:65:b7:77:30:66:c6:
3c:9d:12:e4:4b:67:3e:4e:9d:73:86:f1:17:22:1c:
fe:de:15:3f:de:e0:cf:b7:33:6f:8b:e5:fd:30:75:
c6:7a:6c:22:c1:dc:52:f2:cd:b5:89:0a:b0:75:8e:
29:91:b7:2e:3b:40:5d:a7:53:b9:a9:c9:07:ce:5c:
da:a0:39:98:f6:7f:28:4c:56:31:1f:94:f2:3a:eb:
f3:05:f9:90:36:3b:f2:1f:ba:3b:83:b8:59:08:53:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:86:D3:CB:33:99:11:2C:A3:47:09:29:FF:A4:FA:07:2F:95:60:C9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6IbTyzOZESyjRwkp_6T6By-VYMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.34.101.0/24
185.254.66.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4e:1f:03:f8:58:f1:a5:32:5f:89:5d:57:7c:98:da:c7:1a:
f8:fd:38:a8:12:81:f4:fc:2a:90:e6:da:89:12:d5:da:07:fa:
0b:f1:d2:bd:f2:c8:4f:18:0f:e3:01:db:90:3a:db:e9:88:68:
28:81:da:0a:df:61:62:fd:4b:51:a3:dc:92:84:c3:b7:a5:44:
15:9e:89:12:dc:60:c9:8f:fc:60:a0:bb:21:99:3d:6c:b4:18:
a4:44:13:83:63:72:f5:01:2d:8d:8c:4d:9b:d3:cc:65:e2:a1:
61:a3:7c:39:9a:0c:69:fa:c7:a1:58:6d:57:a2:09:96:99:ca:
8e:e1:bd:ff:db:0b:e2:ad:fa:1e:f4:63:24:d2:a2:39:c5:5b:
5e:1f:78:46:44:c8:0e:a8:1e:16:31:d0:59:88:49:0a:03:c8:
5a:75:45:89:7e:40:d4:f5:84:5f:22:c8:fd:e5:aa:c1:e5:0a:
13:9a:68:e6:f1:eb:76:25:36:2c:04:4f:51:99:95:9b:bd:f5:
f3:21:0a:73:1b:14:53:ab:f5:23:fc:9e:33:ee:a4:53:9c:6b:
66:b8:b9:bc:86:0f:50:62:ad:a8:68:d2:4e:ca:d0:9a:4e:91:
d6:8b:8b:be:0d:4d:03:58:c6:ea:24:31:00:09:4c:8b:d8:c2:
d3:02:6b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:46 2025 by rpki-client