Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7-90yI6rZ07gmpjDvcaB4ra98O4.roa
File: 7-90yI6rZ07gmpjDvcaB4ra98O4.roa (raw, json)
Hash identifier: NAqbRdbyI7rfKMQl1PsAj7sDN1SX+N84XHxEkZQxy4A=
Subject key identifier: EF:EF:74:C8:8E:AB:67:4E:E0:9A:98:C3:BD:C6:81:E2:B6:BD:F0:EE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194B2E7DA6670A851F54163369E45546D13
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7-90yI6rZ07gmpjDvcaB4ra98O4.roa
Signing time: Wed 29 Jan 2025 16:32:06 +0000
ROA not before: Wed 29 Jan 2025 16:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 13:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:e7:da:66:70:a8:51:f5:41:63:36:9e:45:54:6d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 29 16:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efef74c88eab674ee09a98c3bdc681e2b6bdf0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:83:7f:82:2a:83:eb:3e:58:8a:9a:34:bf:
99:4e:bc:92:a4:d7:4f:fc:d7:a9:3b:1b:1e:4e:84:
31:8b:8d:50:d9:f0:8c:ff:00:a9:f8:f0:bf:10:d2:
9e:3e:33:bc:c8:e5:0b:99:ec:3b:a5:5f:c7:23:d3:
b6:dd:9e:6f:6d:e3:22:1f:8a:40:2e:f4:e3:36:b4:
2c:41:1e:ff:c7:e9:b4:3b:80:dd:cc:2d:1b:fd:0d:
eb:e9:45:5d:d0:e3:c9:20:b3:0f:7c:35:e6:33:bd:
7c:ae:13:59:9a:6e:d8:cb:20:a6:bc:da:c1:2c:de:
6a:59:5c:28:c3:db:e2:30:7b:ca:ae:0c:68:ae:bc:
69:d4:c8:20:69:21:45:9e:61:d3:a0:9d:97:44:9e:
4c:8d:15:73:da:93:cb:c5:76:3c:c5:07:b0:71:c0:
8b:b5:66:f5:44:e8:b9:da:30:61:93:e1:f5:9f:70:
41:49:68:d0:b5:f1:74:79:78:e8:2b:8f:4e:7d:4a:
8f:d7:4a:14:0e:bf:05:fe:68:47:53:51:d6:70:de:
b0:07:c4:ee:c4:2d:14:6f:75:f1:62:b9:c7:2d:9a:
2e:d8:7e:52:cc:6f:88:a3:f8:6c:21:88:6f:52:f5:
74:44:8d:aa:2a:98:4c:19:14:af:f6:f3:24:5c:e4:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EF:74:C8:8E:AB:67:4E:E0:9A:98:C3:BD:C6:81:E2:B6:BD:F0:EE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7-90yI6rZ07gmpjDvcaB4ra98O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.254.66.0/24
193.124.36.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
27:fd:d4:58:3f:49:ab:95:64:df:5e:c0:5b:bf:bb:a5:32:76:
e7:17:3c:70:8a:75:5d:07:93:bf:f2:5f:08:f5:9f:95:66:77:
7c:a8:82:12:20:06:8a:fd:55:c7:14:dc:c2:e9:e8:ce:68:b0:
d9:95:e7:6b:9b:cc:9f:7f:95:f8:e3:50:e6:21:d2:18:43:ef:
f1:90:72:60:95:b4:d6:d5:50:ff:69:b5:8c:12:75:81:e6:40:
88:87:a0:6c:01:b6:01:18:1e:9d:6d:98:b7:64:be:5d:d3:12:
a5:47:0d:31:33:60:ce:1d:80:51:0e:06:13:d4:4d:87:d5:af:
a6:87:e5:cc:42:43:c1:70:d8:da:41:26:ad:ba:fc:fe:a6:66:
1f:07:4d:71:3e:a5:42:31:30:fb:65:56:40:94:54:cc:9a:86:
04:e7:06:01:92:c9:e7:2b:37:c6:04:52:51:48:b1:08:bb:74:
01:51:b1:1d:05:92:3b:5c:3f:dd:bd:79:96:81:39:e5:1b:87:
36:f9:8d:93:48:ac:92:36:b5:58:e6:af:5c:57:ef:bd:2b:1e:
cd:c8:01:ca:6c:d0:90:a6:7d:85:69:b4:ae:82:86:0c:57:85:
a9:61:88:ff:a4:4d:1e:18:47:46:04:58:6e:e5:d6:02:d7:55:
8c:04:80:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:46 2025 by rpki-client