Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RdxkYXhGTqQInGSNtF8fNdjeFv4.roa
File: RdxkYXhGTqQInGSNtF8fNdjeFv4.roa (raw, json)
Hash identifier: 3YVOcJH/ZluUCTkMypahl/4dFZ8U6yzuwc/tyKmpdtI=
Subject key identifier: 45:DC:64:61:78:46:4E:A4:08:9C:64:8D:B4:5F:1F:35:D8:DE:16:FE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194BC8A48AAE7CD50401598ECA9CAAF2860
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RdxkYXhGTqQInGSNtF8fNdjeFv4.roa
Signing time: Fri 31 Jan 2025 13:26:06 +0000
ROA not before: Fri 31 Jan 2025 13:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 08:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:8a:48:aa:e7:cd:50:40:15:98:ec:a9:ca:af:28:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 31 13:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45dc646178464ea4089c648db45f1f35d8de16fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:dd:66:31:6d:2d:aa:77:a4:73:de:b2:e0:
44:37:78:3f:2f:41:68:e6:69:af:d2:66:0a:a0:e7:
09:26:80:51:12:3d:d9:cd:e7:a1:8f:f9:57:c5:f6:
1a:56:83:8f:94:f2:1f:71:e1:32:60:82:2b:b7:6a:
ea:e9:f3:53:65:73:d6:25:de:87:c9:20:5c:d6:77:
cc:20:1f:d9:1c:2e:39:76:01:0a:3b:92:e5:b6:37:
4e:8f:11:7a:a8:be:78:8e:0e:9b:8f:36:f1:0a:f8:
7c:12:b8:50:fe:fe:9f:11:94:be:03:d9:53:9c:c6:
54:8c:58:39:71:ea:e4:ea:6c:0a:74:4d:ff:18:e1:
ea:c9:83:51:23:30:da:87:ab:2f:aa:3c:08:2c:4d:
ac:3b:91:33:3c:17:e2:b0:7c:dd:af:85:69:4a:42:
82:d9:95:64:87:7c:d7:fd:ca:64:ce:24:ea:00:86:
98:67:07:0c:10:ee:4b:dd:9f:f3:69:ac:91:a0:9e:
1a:4e:57:ad:91:e6:10:20:81:dc:4a:45:b8:ee:3d:
1e:d0:6d:4c:f2:d1:32:1c:32:7c:cf:b9:60:a9:2f:
0a:ec:1d:73:0a:11:e5:fa:e9:92:4b:01:2c:7a:37:
c8:74:b7:9c:77:85:9d:b5:df:9c:d0:a7:d3:d8:da:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DC:64:61:78:46:4E:A4:08:9C:64:8D:B4:5F:1F:35:D8:DE:16:FE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RdxkYXhGTqQInGSNtF8fNdjeFv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.254.66.0/24
193.124.36.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a3:3a:fa:1f:4d:5a:38:c3:09:dd:c4:27:25:fd:b2:64:b0:
16:87:a4:03:55:10:58:6f:e3:47:15:b6:68:0b:48:7f:bd:e5:
81:a3:d3:5a:9f:91:0c:ed:0b:dd:91:9c:a8:e5:6b:86:f8:bb:
23:a5:fa:1a:54:be:6b:48:c1:aa:19:57:e8:38:5c:0b:5c:7b:
46:9a:eb:65:3d:3f:92:7a:c8:ad:bd:84:55:4d:14:03:f4:dc:
91:7b:e0:88:74:72:73:54:14:ce:eb:f9:60:c2:d9:55:79:4a:
7f:cb:a5:a2:66:a6:95:ad:25:53:fb:19:b2:f0:c4:68:79:77:
fa:65:5b:23:31:51:03:bb:26:d1:13:1d:99:71:28:c4:45:e2:
5d:c1:7d:2a:60:19:32:81:b2:1c:d1:e7:6f:8e:b2:17:ec:f2:
ef:b0:dc:84:5d:01:9d:a2:89:63:61:85:4d:0b:09:06:15:f7:
2b:62:79:16:7e:c3:9e:9e:29:16:4c:04:c0:a1:98:10:0b:a2:
1a:5e:ed:10:46:ad:25:8a:53:e7:cf:ee:b5:21:6a:aa:a3:89:
c9:8b:e4:f9:3a:c4:33:a2:86:25:f7:32:57:7f:7f:25:f7:36:
8d:47:19:88:bb:a3:1d:ab:be:a6:43:f7:5a:25:10:e5:ce:73:
ef:c3:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:16 2025 by rpki-client