Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CFRxjvHJcuXmcgL4PGR7MFbBTmc.roa
File: CFRxjvHJcuXmcgL4PGR7MFbBTmc.roa (raw, json)
Hash identifier: aP9Yr9tHjiocginLpEfyeTGJbHQzUFZGmeLrFO4apJY=
Subject key identifier: 08:54:71:8E:F1:C9:72:E5:E6:72:02:F8:3C:64:7B:30:56:C1:4E:67
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01937DB194D30000DDD819C67167890708F4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CFRxjvHJcuXmcgL4PGR7MFbBTmc.roa
Signing time: Sat 30 Nov 2024 15:30:10 +0000
ROA not before: Sat 30 Nov 2024 15:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Dec 2024 16:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7d:b1:94:d3:00:00:dd:d8:19:c6:71:67:89:07:08:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 30 15:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0854718ef1c972e5e67202f83c647b3056c14e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:34:3e:25:8e:3c:d7:97:2d:ce:a7:a4:5d:
e4:04:85:8c:c6:68:e3:17:49:28:df:aa:55:89:94:
8b:c7:8f:f7:e9:ab:8a:8f:ba:9c:e9:bb:9c:2d:ed:
0b:cc:30:18:d3:62:d7:04:c5:2b:dd:2e:64:de:36:
46:90:5b:5c:f1:c9:9f:79:bb:99:01:fd:84:c2:99:
1a:1b:fb:3f:76:e5:01:83:75:3e:d8:7f:07:f4:b6:
ed:6d:a7:8f:23:c6:d0:74:47:0e:49:d6:2c:d6:1c:
51:87:50:3f:8e:ef:0a:a4:45:cb:6e:4d:0b:64:8a:
bf:f0:a9:cb:7e:7c:39:d4:58:76:74:8a:14:63:4c:
d4:6f:c9:85:94:d6:ba:41:c4:dd:ee:f3:d4:08:95:
57:b4:15:97:88:18:a7:c1:5f:bb:06:37:a4:64:56:
89:2c:ad:1e:3d:8b:fd:2d:15:22:d7:40:7f:46:95:
10:29:a0:b3:bd:bf:14:0c:b2:b6:d4:4b:82:38:11:
ee:0e:51:7f:99:e6:2b:e2:05:63:0c:5f:7f:32:a7:
42:d5:36:a1:53:4d:07:fe:90:8e:8a:62:1d:77:ed:
55:8a:03:3d:eb:3e:84:55:56:d1:4c:40:12:e9:0a:
e2:d6:4d:c6:7b:30:4c:9a:4c:21:73:61:b1:0c:45:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:54:71:8E:F1:C9:72:E5:E6:72:02:F8:3C:64:7B:30:56:C1:4E:67
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CFRxjvHJcuXmcgL4PGR7MFbBTmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
89.34.219.0/24
93.114.183.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
10:92:68:f4:4c:d5:64:6a:3a:c5:a6:4f:23:24:78:e7:50:0d:
24:48:1c:fb:a9:68:c3:5e:94:ea:ca:eb:ce:6a:33:5b:39:6c:
5d:66:cd:d6:a5:3f:bd:fa:1a:c2:4a:e5:9b:f2:f2:a7:32:bd:
e3:12:b2:77:6f:4f:20:5d:e1:1b:63:e9:ff:39:5e:ea:9e:b5:
c6:00:c1:4a:21:26:07:2d:d8:76:81:61:e1:e9:bc:6d:2a:03:
4c:5b:37:85:69:50:b7:df:0a:fc:84:f6:0d:21:09:6e:ee:92:
95:58:6d:44:7a:1a:92:99:f7:29:1c:b0:22:52:94:88:05:e6:
c6:0a:12:b8:c8:bd:10:e5:de:44:a4:eb:e4:a3:eb:68:38:e0:
9f:e0:e8:58:d9:c3:81:45:f3:6a:f8:c4:3d:16:89:b9:39:e0:
df:fb:8f:48:7d:56:ab:ff:f5:8c:93:9b:72:00:7d:4a:80:83:
1a:39:fa:74:c7:57:b4:99:18:5a:e0:fa:09:01:51:6f:45:2f:
7d:0c:f4:c7:27:28:8d:11:e1:b4:36:5d:9c:9f:3f:18:f7:70:
db:fc:a2:b2:82:55:05:be:3b:bc:aa:0e:89:39:e5:54:fe:81:
98:6c:db:8e:3d:80:f2:29:98:90:b6:66:36:8d:18:47:8f:22:
64:ed:e3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:46 2025 by rpki-client