Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Sqs4LbveIswNahss02r9ws_1-Cc.roa
File: Sqs4LbveIswNahss02r9ws_1-Cc.roa (raw, json)
Hash identifier: A46UCWjrt08pmFwQ6y+JRqArJ09iwWn+JM4UDu3LOx8=
Subject key identifier: 4A:AB:38:2D:BB:DE:22:CC:0D:6A:1B:2C:D3:6A:FD:C2:CF:F5:F8:27
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01953839BCC4D6640415DB489B0A87160443
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Sqs4LbveIswNahss02r9ws_1-Cc.roa
Signing time: Mon 24 Feb 2025 13:51:02 +0000
ROA not before: Mon 24 Feb 2025 13:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 15:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:39:bc:c4:d6:64:04:15:db:48:9b:0a:87:16:04:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 24 13:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4aab382dbbde22cc0d6a1b2cd36afdc2cff5f827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:f8:cd:6a:d6:12:3e:a7:42:28:ce:e8:0b:
78:76:ae:d0:ea:50:c4:c5:f9:bb:b1:fd:66:db:b8:
90:d4:b6:d3:a9:85:18:9e:ed:50:50:1a:fb:60:8a:
94:f4:55:b0:f3:3c:46:dd:85:43:d6:f1:ff:20:b8:
ab:bd:22:98:eb:af:25:d7:e1:d3:c4:1d:23:4b:c5:
fa:87:5b:b4:8b:54:45:b6:c6:4e:c5:65:68:df:93:
00:c7:da:66:df:6d:52:de:bc:a8:6b:93:fb:d6:60:
20:8f:a4:40:cf:53:63:67:e5:42:98:67:5f:7c:cd:
c3:d8:f1:ec:a0:e0:17:38:0d:6e:51:d8:e0:27:ec:
1a:80:d1:5b:9d:03:e4:ae:cd:53:2c:65:5a:6c:23:
05:a4:b7:0c:80:df:89:9a:c4:1e:0f:15:bf:60:78:
2d:98:bf:19:af:6d:f3:c4:61:d9:3a:45:c5:a1:25:
4b:4f:88:00:78:eb:d3:b5:7c:b1:95:34:86:a1:5f:
29:f1:a4:c3:ea:e9:92:04:41:bc:40:c1:f3:1c:fe:
a7:ba:1f:47:1f:c7:49:24:26:71:2b:ca:f4:f3:86:
c7:87:ab:00:00:a4:7a:ed:dc:bd:ef:ee:9a:e6:f4:
8d:6a:6a:40:8c:6e:e9:f9:64:55:2a:23:ef:26:9e:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AB:38:2D:BB:DE:22:CC:0D:6A:1B:2C:D3:6A:FD:C2:CF:F5:F8:27
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Sqs4LbveIswNahss02r9ws_1-Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
188.212.121.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fd:2b:1e:16:81:c6:7c:f5:f5:0e:2e:ae:b8:1c:86:2b:60:
c3:4c:53:59:2a:ec:b1:6e:e7:31:86:26:e7:e9:45:57:39:fd:
5c:da:b3:cb:62:64:ca:17:d6:fe:d7:62:06:dd:46:d1:1e:24:
65:1a:e5:1e:a0:9b:e8:0a:ef:d4:09:9e:9a:6f:df:21:b2:22:
2d:4d:88:3a:e7:a1:23:ef:22:00:a1:a1:43:d2:ee:c8:5b:bf:
7c:4d:55:4f:09:00:e3:8e:68:f2:ce:f3:64:cf:f7:32:31:f5:
d0:ec:c7:4b:f7:3e:a9:c6:3d:9e:41:50:9c:b4:3e:6c:a2:05:
1e:63:13:87:8b:d0:f4:ba:60:6b:96:6d:e8:4d:e7:2a:8a:ba:
2d:1c:cc:b4:b1:e9:1b:cb:fe:04:42:cd:74:29:0a:c2:bd:ac:
42:b5:b4:3e:50:51:b5:36:a5:d7:15:70:0d:1e:76:ac:e3:f4:
5c:bf:1e:03:57:61:b5:a8:29:88:f5:f2:d6:85:5f:2b:fb:34:
43:a3:42:18:c8:a2:3b:35:e6:ca:25:3f:06:9d:85:cb:c6:41:
0e:67:d1:5f:8e:76:e8:94:db:28:d2:7c:ed:7c:e3:e0:c3:1a:
c7:40:37:27:94:94:24:4e:3a:09:b0:c1:26:8d:31:af:cf:30:
51:96:d0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:47:57 2025 by rpki-client