Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P95P2AOr0VvRxNdBq7fin6RCKMQ.roa
File: P95P2AOr0VvRxNdBq7fin6RCKMQ.roa (raw, json)
Hash identifier: FCzJ8IwjO2E5n+jqrbnsfbfaproW4H7YYjRLVnaBnOo=
Subject key identifier: 3F:DE:4F:D8:03:AB:D1:5B:D1:C4:D7:41:AB:B7:E2:9F:A4:42:28:C4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194334E071942567C257581D2ECA2762AC3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P95P2AOr0VvRxNdBq7fin6RCKMQ.roa
Signing time: Sat 04 Jan 2025 21:52:19 +0000
ROA not before: Sat 04 Jan 2025 21:52:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
185.34.101.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 08:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:33:4e:07:19:42:56:7c:25:75:81:d2:ec:a2:76:2a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 4 21:52:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fde4fd803abd15bd1c4d741abb7e29fa44228c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:5b:04:75:ec:0d:ef:75:94:0f:ad:70:08:
5c:11:04:6d:74:9b:8a:4b:8f:13:2d:84:76:57:0d:
df:de:f1:2f:8a:24:e8:68:c3:89:1b:4b:f9:e4:ab:
d0:21:09:8a:c8:ed:5b:42:5c:d9:4b:a7:d6:f2:22:
55:ff:a5:26:b3:51:74:f5:63:7a:5c:c7:7f:ee:3f:
71:49:ce:e9:cb:c8:41:34:05:89:43:28:3c:e4:9a:
be:8e:74:9d:0f:4a:1f:24:65:9e:87:2e:41:56:24:
9c:33:5a:60:c4:ea:70:3a:3a:7a:bb:1c:39:4b:6d:
5d:de:5e:b7:7f:28:4e:0c:3f:b7:2a:12:f9:cb:c4:
df:d3:f1:fe:26:29:7a:e2:10:00:24:2c:94:79:22:
53:15:15:15:4e:53:be:9c:32:f5:29:bf:a6:29:f5:
87:f7:14:0f:9f:28:d0:be:8b:b0:d0:7d:45:f7:85:
94:80:77:2d:21:e4:f6:97:b4:38:05:d6:7b:6a:52:
cf:cd:28:f4:34:e1:af:32:75:4e:83:c7:ec:83:2d:
f2:59:c9:59:2e:38:80:1a:30:ec:f3:d7:fe:0a:0e:
60:40:7b:c4:fa:8e:0c:75:37:83:74:44:00:28:af:
8c:84:2d:0a:f7:96:7c:1e:d7:22:a8:92:6a:78:de:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:4F:D8:03:AB:D1:5B:D1:C4:D7:41:AB:B7:E2:9F:A4:42:28:C4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P95P2AOr0VvRxNdBq7fin6RCKMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
103.245.228.0/24
185.34.101.0/24
185.254.66.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
36:46:bf:c2:fc:24:af:e5:37:b8:5d:03:c9:9f:a6:95:31:0e:
aa:06:0e:5d:da:23:51:a0:a8:ff:63:8d:ff:cb:05:07:44:fa:
54:e3:3a:93:77:1d:d4:82:89:a3:c7:c4:6a:43:55:6f:04:3c:
dd:51:e9:63:54:85:a6:ce:8f:06:67:ed:37:6e:46:1e:29:f8:
f0:9e:34:48:cf:3c:f1:c2:af:5b:04:9a:f5:12:6e:89:d3:f4:
d3:47:92:3c:99:8a:a4:e5:67:96:cc:41:cd:19:84:cb:dc:73:
c5:b7:9e:bb:84:d3:2f:a3:51:34:e6:9c:2d:c7:bc:29:8a:3a:
c8:b1:5d:4d:f9:9f:5c:19:7b:ff:d0:b6:32:e4:e0:ff:77:9a:
e2:da:f0:66:b1:68:8a:25:d9:08:bb:8b:2d:7e:6a:1d:72:b7:
3a:47:d5:91:b0:d4:ea:c7:7e:df:ef:8a:d8:cc:e7:ca:cb:47:
63:a5:e7:39:c0:37:71:0e:ff:42:1c:7f:42:a8:5f:5b:8a:f3:
3f:e5:4f:63:01:19:95:d6:67:f0:c8:b7:42:ef:b4:ae:f4:29:
83:7e:f3:d5:8d:45:9d:94:b4:fe:82:07:80:95:37:b2:c3:d0:
7d:c3:90:b2:23:70:ff:4f:56:4b:a7:af:30:28:1e:59:96:de:
25:f9:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:40 2025 by rpki-client