Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FvuBHN4NM2Jq2QirSlEHADkJQfg.roa
File: FvuBHN4NM2Jq2QirSlEHADkJQfg.roa (raw, json)
Hash identifier: keBFdq4bER3HHygmCzbAJdaqAxHSXQp0/eMfDMHLMCo=
Subject key identifier: 16:FB:81:1C:DE:0D:33:62:6A:D9:08:AB:4A:51:07:00:39:09:41:F8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01954BCEB66DF7F74E0EE840D2CE96FA5795
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FvuBHN4NM2Jq2QirSlEHADkJQfg.roa
Signing time: Fri 28 Feb 2025 09:06:32 +0000
ROA not before: Fri 28 Feb 2025 09:06:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 16:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:ce:b6:6d:f7:f7:4e:0e:e8:40:d2:ce:96:fa:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 28 09:06:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16fb811cde0d33626ad908ab4a510700390941f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:d3:64:23:96:4f:22:d8:e8:cd:ab:14:cc:
14:c2:c5:6e:fa:85:be:eb:fd:30:65:2e:ec:c2:9f:
a3:34:58:a4:12:78:72:3c:40:3d:51:bc:18:89:f7:
7a:15:c4:35:ca:94:39:8c:bc:2e:52:33:90:f6:43:
50:b0:f7:d1:e5:58:a7:e6:63:b6:6e:3a:e9:1b:35:
d0:ac:e5:cf:4c:54:93:77:5e:64:5b:b2:cc:64:5c:
fb:66:12:ce:15:22:87:63:bd:df:b3:95:67:4a:20:
fa:d1:24:76:42:b8:63:f7:bf:f2:64:ab:39:6a:6f:
b0:68:4d:e8:0b:68:91:e4:59:89:52:c1:79:a4:9c:
d1:2e:9d:32:78:c3:a2:21:1b:81:c6:45:d0:e0:f1:
69:88:ca:f4:11:8d:72:7f:1c:d7:aa:a6:b9:af:ff:
c1:62:85:8a:aa:e2:f7:c3:7e:3e:6f:f9:d1:a0:25:
1b:97:fd:00:7e:c2:0e:d6:66:a6:0c:c9:c5:3d:16:
2e:a5:02:66:7c:43:58:9b:f4:43:8d:e0:c9:1a:3f:
27:dd:b1:81:93:a0:8f:67:05:de:7a:cf:53:37:d2:
45:4f:a4:82:07:f4:df:e3:cb:50:90:3c:dc:cf:9f:
85:f4:25:50:99:54:d5:eb:11:64:09:66:21:bc:3b:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:81:1C:DE:0D:33:62:6A:D9:08:AB:4A:51:07:00:39:09:41:F8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FvuBHN4NM2Jq2QirSlEHADkJQfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3e:a0:f2:6b:da:41:5a:7d:d3:47:6d:63:f9:06:4b:a9:d3:
24:80:ac:e1:42:3b:c3:00:4c:c7:62:a0:04:2c:f3:00:42:c1:
83:26:3b:b7:dd:61:22:3e:c0:67:ad:46:8a:3e:24:7a:59:ed:
88:77:f8:56:0d:50:01:f4:75:84:2f:84:c2:1c:33:11:24:28:
9d:4c:7e:9c:28:08:65:c1:d0:32:31:cd:ac:b2:53:cf:10:66:
69:c5:62:b7:75:5c:0d:dc:2d:52:6b:2a:fc:ad:d7:1c:31:30:
7a:71:f8:8f:39:b9:6c:c4:37:86:7a:90:05:93:04:cb:6a:4f:
7f:4e:80:c4:85:65:bc:6a:35:4b:b4:9a:99:5f:91:67:49:0c:
f2:b3:72:e5:86:e8:0b:56:b9:82:91:60:6a:7d:b6:99:a0:73:
57:a6:48:6d:74:fe:d1:1f:5e:68:f7:44:e0:f9:d4:cc:6f:a8:
3f:46:83:28:27:33:2c:87:ad:15:df:c7:0f:28:47:e3:06:51:
41:51:dc:d3:73:d7:72:2d:8e:29:93:b7:5a:f8:4e:2c:65:b8:
9d:58:a2:13:d2:67:d9:73:a1:d5:be:77:dc:a1:fc:66:55:1a:
00:f2:7a:a7:e8:09:b8:b9:fd:7a:83:d3:b1:1f:28:bc:81:ae:
df:c9:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:29 2025 by rpki-client