Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TCdTPrCDjIqtlUF_I-dyWOiOFWs.roa
File: TCdTPrCDjIqtlUF_I-dyWOiOFWs.roa (raw, json)
Hash identifier: Z7EjNQzDJKCDJPsuO4jtgPZ+iHeImyG5UJ4MJWsNVF8=
Subject key identifier: 4C:27:53:3E:B0:83:8C:8A:AD:95:41:7F:23:E7:72:58:E8:8E:15:6B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194277D1FA43345D9F5C6874A8A9B7575C4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TCdTPrCDjIqtlUF_I-dyWOiOFWs.roa
Signing time: Thu 02 Jan 2025 14:48:19 +0000
ROA not before: Thu 02 Jan 2025 14:48:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.34.101.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:7d:1f:a4:33:45:d9:f5:c6:87:4a:8a:9b:75:75:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 14:48:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c27533eb0838c8aad95417f23e77258e88e156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:31:5a:64:c5:59:6d:f4:87:ae:43:40:97:
10:7a:8a:0d:00:1a:66:36:2b:9f:ee:44:57:fc:d3:
9b:f8:b8:40:ca:84:85:a9:dd:c2:e5:4d:42:b2:5f:
fb:b2:11:4c:37:53:d8:eb:21:17:ba:37:d4:f2:3c:
9c:f5:de:8c:19:e0:1d:5b:06:5f:78:6c:59:45:a4:
47:68:6a:08:e6:e0:c5:86:ff:f3:24:02:fb:67:55:
88:25:e4:88:c0:ff:68:f2:d0:83:c9:6e:42:3c:30:
9b:93:b6:89:c1:ac:84:f2:9d:2b:2c:b4:6e:02:80:
d6:74:40:c6:88:12:2b:9c:07:7a:9f:5d:1a:ea:1d:
6f:ab:33:47:c7:60:06:7d:b8:36:b7:79:8d:83:e5:
a3:42:c4:2e:4c:d0:5c:03:c5:4f:e5:4d:83:87:0d:
bc:cd:37:54:cf:55:c8:54:fe:fe:6d:7a:67:99:e2:
eb:37:dc:ff:73:91:09:19:47:5b:13:c4:15:0d:76:
ae:17:18:68:64:87:a3:11:f1:c7:78:39:c6:0a:5a:
d5:ee:66:69:d3:8e:84:0a:2a:7c:e1:18:73:65:da:
fc:2d:a4:3c:d5:8f:8c:0b:a0:dc:e2:89:0b:7f:8a:
41:b9:61:f8:bc:ea:85:8c:a0:4c:03:4f:e5:e4:d7:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:27:53:3E:B0:83:8C:8A:AD:95:41:7F:23:E7:72:58:E8:8E:15:6B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TCdTPrCDjIqtlUF_I-dyWOiOFWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.34.101.0/24
185.254.66.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:1f:8d:23:8f:57:c6:32:ed:6a:cd:fb:c5:e9:09:53:a0:b6:
4d:e7:e5:dc:00:af:47:0b:30:20:c6:00:c5:d8:10:eb:e4:b6:
97:0d:77:0c:0b:d7:5a:e8:8a:ef:eb:9f:62:5e:73:e1:0a:80:
a0:7f:ed:31:9f:32:86:82:ca:57:7d:65:3f:a4:31:8f:54:9a:
e9:8d:e3:ea:56:7a:55:69:5f:46:b8:ca:ec:11:55:68:c3:1a:
8d:22:7f:4a:e8:f9:20:aa:2d:7c:aa:9b:c0:44:2b:3c:a2:ac:
e4:7a:17:0d:f1:b9:42:61:4b:24:cb:be:dd:91:0a:32:ba:38:
78:72:ca:c6:1d:57:72:b5:9a:bc:52:6f:98:31:51:fd:38:b5:
31:97:82:cc:a4:5d:c3:7f:ef:a8:42:3b:2f:ce:8f:bb:cf:a8:
4b:83:a8:59:b3:98:0c:ac:c2:4d:5d:ec:c3:50:30:83:a3:51:
ed:10:b0:42:12:2a:83:e3:ac:fb:b6:b2:04:f8:3a:e6:95:32:
e5:85:70:93:da:bd:46:b4:27:b9:0b:08:74:87:00:72:3c:41:
2d:7a:d5:e4:76:1f:a3:d4:6e:43:77:45:00:fb:8e:a7:58:3f:
60:b7:38:16:a9:47:8e:71:c5:08:10:63:ec:fc:dc:90:2f:6d:
45:14:1e:d6
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQnfR+kM0XZ9caHSoqbdXXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMTQ0ODE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzI3NTMzZWIwODM4YzhhYWQ5NTQxN2YyM2U3NzI1OGU4OGUxNTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8YxWmTFWW30h65DQJcQeooNABpm
Niuf7kRX/NOb+LhAyoSFqd3C5U1Csl/7shFMN1PY6yEXujfU8jyc9d6MGeAdWwZf
eGxZRaRHaGoI5uDFhv/zJAL7Z1WIJeSIwP9o8tCDyW5CPDCbk7aJwayE8p0rLLRu
AoDWdEDGiBIrnAd6n10a6h1vqzNHx2AGfbg2t3mNg+WjQsQuTNBcA8VP5U2Dhw28
zTdUz1XIVP7+bXpnmeLrN9z/c5EJGUdbE8QVDXauFxhoZIejEfHHeDnGClrV7mZp
046ECip84RhzZdr8LaQ81Y+MC6Dc4okLf4pBuWH4vOqFjKBMA0/l5NcvIwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFEwnUz6wg4yKrZVBfyPncljojhVrMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVENkVFByQ0RqSXF0bFVGX0ktZHlXT2lPRldzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBLYe2AwQA
WSJqAwQAXXK3AwQAuSJlAwQAuf5CAwQAw1hZMA0GCSqGSIb3DQEBCwUAA4IBAQB6
H40jj1fGMu1qzfvF6QlToLZN5+XcAK9HCzAgxgDF2BDr5LaXDXcMC9da6Irv659i
XnPhCoCgf+0xnzKGgspXfWU/pDGPVJrpjePqVnpVaV9GuMrsEVVowxqNIn9K6Pkg
qi18qpvARCs8oqzkehcN8blCYUsky77dkQoyujh4csrGHVdytZq8Um+YMVH9OLUx
l4LMpF3Df++oQjsvzo+7z6hLg6hZs5gMrMJNXezDUDCDo1HtELBCEiqD46z7trIE
+DrmlTLlhXCT2r1GtCe5Cwh0hwByPEEtetXkdh+j1G5Dd0UA+46nWD9gtzgWqUeO
ccUIEGPs/NyQL21FFB7W
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:19 2025 by rpki-client