Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/96jgk5HOo1rM3nTXeJbZIcUG5Ls.roa
File: 96jgk5HOo1rM3nTXeJbZIcUG5Ls.roa (raw, json)
Hash identifier: NbwAlbsbvs0DGL8F/CR1RMnDDw3iVGJKAObUFne6gBs=
Subject key identifier: F7:A8:E0:93:91:CE:A3:5A:CC:DE:74:D7:78:96:D9:21:C5:06:E4:BB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194F40DEBCC608541B6B27E4EFC6C74796B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/96jgk5HOo1rM3nTXeJbZIcUG5Ls.roa
Signing time: Tue 11 Feb 2025 08:09:00 +0000
ROA not before: Tue 11 Feb 2025 08:09:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 15:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:0d:eb:cc:60:85:41:b6:b2:7e:4e:fc:6c:74:79:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 11 08:09:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7a8e09391cea35accde74d77896d921c506e4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:88:3c:56:7d:e5:3a:e2:55:38:34:ae:3d:
a2:97:1b:eb:78:f8:df:66:e9:88:04:c6:f2:3d:4f:
47:c8:1b:64:20:fb:51:1c:e0:8a:4f:13:ff:9c:50:
9d:85:89:57:a6:25:fb:f3:dc:ef:1d:b8:9c:dc:18:
50:7f:d6:60:77:48:1e:d7:0f:3c:dd:e8:a3:82:95:
82:ad:ca:79:eb:d2:0d:ff:08:14:10:7f:0e:52:ba:
8d:cd:76:c1:0a:6d:ec:b0:1e:cc:2e:7c:ed:a5:ab:
10:0a:64:5b:9c:fc:5a:eb:0a:ee:83:e0:7a:67:65:
80:c8:2d:1b:e6:09:95:a0:3b:4d:94:6f:c9:7a:18:
97:d0:44:1a:8a:46:20:ce:0a:30:d6:b0:83:a4:4c:
4f:2d:ac:c8:1e:f8:31:ef:1f:18:d3:0f:14:fc:24:
b3:7c:ab:0a:21:a2:b4:c1:27:34:35:d3:83:de:2c:
24:b5:d2:32:9e:34:ea:48:57:22:17:a3:aa:3e:92:
34:2f:c9:6c:f5:cc:6b:91:cd:ce:68:ce:94:0b:b9:
b7:dc:63:55:8e:c2:16:0e:59:2d:d2:4d:9b:de:ef:
7f:e4:28:1f:e6:39:4f:ce:10:53:d2:ac:f2:d8:73:
38:f0:dd:76:a6:4d:b8:5a:9f:cc:47:c2:d6:c3:4a:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A8:E0:93:91:CE:A3:5A:CC:DE:74:D7:78:96:D9:21:C5:06:E4:BB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/96jgk5HOo1rM3nTXeJbZIcUG5Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.254.66.0/24
193.124.36.0/24
194.85.249.0/24
195.133.193.0/24
Signature Algorithm: sha256WithRSAEncryption
02:8b:83:6e:b6:47:19:5a:c1:4b:b8:54:b6:ab:9c:b0:68:66:
4e:ad:23:4b:6a:12:bc:c5:7e:5e:64:0a:99:b5:c2:ed:05:0e:
8f:c9:4c:c1:95:ff:a8:af:0a:92:ba:65:ef:1f:f5:46:f4:a0:
fb:15:f6:f9:a9:01:c6:b1:63:c5:d2:f4:3b:4c:f4:31:43:a1:
96:5a:17:4e:5e:89:fb:81:c9:32:03:69:39:a6:fe:f1:e2:a1:
40:6d:69:03:dd:67:a0:66:1f:4c:e7:60:f4:29:25:06:3e:a2:
53:4f:71:3c:6f:6e:7f:a7:21:47:ec:6b:6b:d4:1b:ca:55:b5:
43:da:69:67:93:4c:10:dc:d0:15:27:a4:3a:74:89:c2:22:71:
d1:e5:06:eb:ed:bc:8f:54:cf:9c:00:72:05:af:07:78:3c:4a:
fa:1b:89:f3:67:08:68:38:d1:a4:4e:2a:72:e5:e2:a0:83:40:
0a:34:55:95:a9:87:d9:ef:0b:c9:b9:f8:8f:54:47:4b:04:11:
db:b7:af:46:05:76:57:6f:95:12:59:7f:4f:28:c1:e4:d2:74:
4f:78:66:12:63:6e:01:81:f0:39:dc:9a:6a:13:31:80:33:25:
1d:1a:4d:30:b1:91:c7:c3:93:12:ab:c5:d5:8d:ef:b6:85:d8:
a5:f2:f8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:30:43 2025 by rpki-client