Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JAOaqHZVG0Qnjtm8sPdBkCUhdoc.roa
File: JAOaqHZVG0Qnjtm8sPdBkCUhdoc.roa (raw, json)
Hash identifier: 4/38KI+fsD/Uk4e59DEA0E0nLmcgngFrx3OtZR38yI8=
Subject key identifier: 24:03:9A:A8:76:55:1B:44:27:8E:D9:BC:B0:F7:41:90:25:21:76:87
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01948C857F00B66336AC51B13862A3775526
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JAOaqHZVG0Qnjtm8sPdBkCUhdoc.roa
Signing time: Wed 22 Jan 2025 05:39:06 +0000
ROA not before: Wed 22 Jan 2025 05:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.34.101.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 17:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8c:85:7f:00:b6:63:36:ac:51:b1:38:62:a3:77:55:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 22 05:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24039aa876551b44278ed9bcb0f7419025217687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:29:29:6d:1b:90:44:44:b5:59:6d:5d:86:
39:44:06:c0:50:df:36:05:82:f8:5a:95:d3:6b:7f:
00:07:1f:14:ab:52:cc:4a:29:c4:70:90:c8:2c:32:
6d:e5:c7:34:3c:a3:39:65:03:9f:c9:2f:31:b2:4b:
78:f4:3f:8b:01:39:1e:32:02:97:b7:14:3b:41:ef:
60:a9:d2:f0:25:ed:f9:87:3b:51:db:a8:68:f7:93:
e5:ba:bc:6e:fd:dd:3c:29:fd:ba:ab:d9:4f:42:68:
02:e7:89:e7:42:b6:88:04:e5:1d:f2:fd:36:70:53:
b1:a1:99:40:7a:a8:2e:02:41:72:f4:e5:c1:13:ec:
d2:56:ce:6d:ee:3c:df:8d:b7:82:69:6f:36:4c:cd:
0e:e7:9c:26:e2:dd:15:cc:ed:d8:4c:5e:14:5a:99:
d2:3d:45:9d:d0:84:8f:73:e9:47:ab:bb:24:dd:36:
96:c9:45:c9:9d:11:29:e8:7a:6d:14:b3:24:1e:ae:
6e:8b:87:52:1e:f9:1a:1d:d0:47:3a:03:24:b2:84:
4b:2e:d4:d7:77:92:cf:1a:bf:43:3f:ed:83:1c:2d:
dd:6e:cf:aa:ca:11:75:6c:a0:49:9e:1d:b3:68:fc:
31:91:f8:d0:77:4f:36:86:22:ad:8d:5d:09:7f:b1:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:03:9A:A8:76:55:1B:44:27:8E:D9:BC:B0:F7:41:90:25:21:76:87
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JAOaqHZVG0Qnjtm8sPdBkCUhdoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.34.101.0/24
185.254.66.0/24
195.88.89.0/24
212.192.11.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7c:6c:cd:2d:09:6b:1d:e6:0d:19:f2:97:88:31:e2:c5:16:
07:b5:5d:43:35:73:29:0e:cb:fc:2d:ae:b4:f3:84:64:be:d9:
2b:fb:78:5b:03:19:e7:7b:af:65:eb:7d:07:93:3c:a6:0c:3e:
36:82:71:c6:de:a0:39:81:d1:d0:32:9a:0f:c3:65:cd:57:30:
eb:df:74:4e:87:0a:cd:87:ae:14:f7:8c:30:5d:31:51:10:c5:
bb:ed:09:52:6d:f5:05:b0:f5:b8:4d:6b:d0:85:f6:36:00:ec:
0d:be:db:13:8a:9e:ea:64:22:19:fe:e9:c0:40:4d:12:db:db:
ab:bc:92:61:6d:c1:cd:90:04:69:e2:e3:73:29:93:eb:c4:20:
c0:00:f3:1c:6d:40:a2:c9:6a:45:54:c1:e6:28:ff:cb:b5:63:
8f:b9:21:3b:ac:90:f7:12:d5:c2:7e:13:00:73:59:5b:56:6b:
49:13:da:20:46:83:95:ec:1e:14:0c:31:91:ad:fb:e2:13:a0:
1a:50:9d:3a:05:e1:0d:69:00:b3:c3:23:8b:4e:26:bc:2f:f7:
2b:33:61:0c:99:a1:77:33:e7:80:b4:a4:30:6a:1e:1b:28:cd:
b0:d2:21:ea:fe:51:5a:51:9a:14:10:1c:81:7c:9c:50:81:ae:
13:8a:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:23 2025 by rpki-client