Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6Lh-cGLoX_FLIijrID8XB3WJljM.roa
File: 6Lh-cGLoX_FLIijrID8XB3WJljM.roa (raw, json)
Hash identifier: 3Ii72patJxRhdoOuuX2rZYaTvG7OQqtdhTVraDRp9nk=
Subject key identifier: E8:B8:7E:70:62:E8:5F:F1:4B:22:28:EB:20:3F:17:07:75:89:96:33
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019408CC125B91F2D14FB1C7A5E8449BD590
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6Lh-cGLoX_FLIijrID8XB3WJljM.roa
Signing time: Fri 27 Dec 2024 15:46:19 +0000
ROA not before: Fri 27 Dec 2024 15:46:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.35.130.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 06:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:cc:12:5b:91:f2:d1:4f:b1:c7:a5:e8:44:9b:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 27 15:46:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8b87e7062e85ff14b2228eb203f170775899633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:e1:e9:bd:fd:31:59:5e:42:b5:dd:94:bb:
41:f1:4e:cf:36:d2:a5:44:7f:18:a0:af:69:07:45:
fa:b2:d7:1f:cb:d4:af:d9:b3:a8:52:67:74:96:04:
db:14:ae:2a:69:bc:91:95:70:e1:bf:d3:d4:31:f4:
d9:12:29:1e:53:59:85:5b:54:7d:dc:08:42:d9:61:
ca:23:af:f1:57:a8:c6:f2:f5:03:94:38:02:cc:a8:
86:15:35:79:17:c1:7d:aa:16:e0:20:7d:a9:78:f2:
cf:bf:d3:ae:68:27:a0:ba:f3:4a:e2:99:8c:d9:74:
8c:35:31:e4:62:68:3d:e1:7e:63:ad:d4:26:4b:bd:
bc:0d:d8:05:e5:38:38:8a:64:d0:a2:5c:21:5f:06:
3d:e5:5a:c6:9d:f2:d9:bd:24:23:b6:99:66:57:03:
65:1e:e1:43:3e:1c:3f:3f:f8:9a:4b:31:82:6c:1e:
a9:7c:d1:c9:c1:f9:b7:46:98:e1:15:46:97:9d:2a:
c8:be:b5:77:08:3f:26:0a:d5:5e:fa:81:a7:7b:a8:
70:60:2b:0b:4d:47:30:72:1c:14:d0:0b:db:23:4b:
df:e8:eb:8e:9f:1b:71:80:f9:72:83:ee:a0:ac:2b:
7e:e0:7d:f4:f8:7a:87:10:86:4e:cf:49:a0:a6:f4:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B8:7E:70:62:E8:5F:F1:4B:22:28:EB:20:3F:17:07:75:89:96:33
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6Lh-cGLoX_FLIijrID8XB3WJljM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
89.35.130.0/24
93.114.183.0/24
185.212.119.0/24
185.254.66.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2b:67:a1:f1:7a:b8:d1:d4:e8:d0:84:73:56:92:e0:fe:d0:
01:f5:be:75:7b:90:f6:28:61:f0:1f:ae:b5:e2:46:58:f4:6b:
8c:ed:86:08:c2:80:3b:5a:8e:bc:87:6b:24:d4:1d:15:78:48:
17:6c:b7:04:0a:06:89:6b:eb:d6:16:bf:96:7a:5e:50:a2:c8:
b5:0e:47:ea:02:f6:85:b1:35:1f:80:e0:47:27:a1:f0:62:a7:
ec:ce:10:73:cf:5b:b5:c2:8c:2d:ab:e9:55:54:2f:4d:8e:7a:
2d:16:79:4f:bd:d5:a2:ea:f8:f4:c5:ff:83:36:40:31:04:76:
43:96:6a:5f:ed:20:c7:b3:5c:35:1b:98:b0:0e:3a:96:46:90:
95:85:f4:2b:4c:b7:c9:ad:72:6c:ea:29:d4:27:06:d6:11:2f:
46:7a:d2:52:98:0e:df:4f:24:14:e6:aa:e3:a6:ba:4f:ed:33:
b4:dc:e2:8e:cd:ea:6f:95:c4:5c:e6:d3:77:75:f7:c3:d7:31:
2c:29:db:fd:d7:77:fd:8a:cc:7d:cd:69:44:26:a1:eb:d0:8c:
f1:a9:50:09:ec:bc:a4:ba:d9:a8:59:b7:d2:59:20:9e:6b:a6:
ea:06:7c:5d:9f:03:a2:8e:13:5a:69:96:d0:65:45:15:0b:35:
05:0b:5a:53
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQIzBJbkfLRT7HHpehEm9WQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMjI3MTU0NjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGI4N2U3MDYyZTg1ZmYxNGIyMjI4ZWIyMDNmMTcwNzc1ODk5NjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMvh6b39MVleQrXdlLtB8U7PNtKl
RH8YoK9pB0X6stcfy9Sv2bOoUmd0lgTbFK4qabyRlXDhv9PUMfTZEikeU1mFW1R9
3AhC2WHKI6/xV6jG8vUDlDgCzKiGFTV5F8F9qhbgIH2pePLPv9OuaCeguvNK4pmM
2XSMNTHkYmg94X5jrdQmS728DdgF5Tg4imTQolwhXwY95VrGnfLZvSQjtplmVwNl
HuFDPhw/P/iaSzGCbB6pfNHJwfm3RpjhFUaXnSrIvrV3CD8mCtVe+oGne6hwYCsL
TUcwchwU0AvbI0vf6OuOnxtxgPlyg+6grCt+4H30+HqHEIZOz0mgpvQ8aQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFOi4fnBi6F/xSyIo6yA/Fwd1iZYzMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNkxoLWNHTG9YX0ZMSWlqcklEOFhCM1dKbGpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBLYe2AwQA
WSJqAwQAWSOCAwQAXXK3AwQAudR3AwQAuf5CAwQAw1hZMA0GCSqGSIb3DQEBCwUA
A4IBAQAOK2eh8Xq40dTo0IRzVpLg/tAB9b51e5D2KGHwH6614kZY9GuM7YYIwoA7
Wo68h2sk1B0VeEgXbLcECgaJa+vWFr+Wel5Qosi1DkfqAvaFsTUfgOBHJ6HwYqfs
zhBzz1u1wowtq+lVVC9NjnotFnlPvdWi6vj0xf+DNkAxBHZDlmpf7SDHs1w1G5iw
DjqWRpCVhfQrTLfJrXJs6inUJwbWES9GetJSmA7fTyQU5qrjprpP7TO03OKOzepv
lcRc5tN3dffD1zEsKdv913f9isx9zWlEJqHr0IzxqVAJ7LykutmoWbfSWSCea6bq
BnxdnwOijhNaaZbQZUUVCzUFC1pT
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:25 2025 by rpki-client