Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TzODvTPQFi4hCBkaQsOY31CZeVc.roa
File: TzODvTPQFi4hCBkaQsOY31CZeVc.roa (raw, json)
Hash identifier: XmkJXWfzuu70CMQifNrMg0x669uqaGp2YWjfnOHiTiA=
Subject key identifier: 4F:33:83:BD:33:D0:16:2E:21:08:19:1A:42:C3:98:DF:50:99:79:57
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0196D4436C2617874D56E088ED775803A275
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TzODvTPQFi4hCBkaQsOY31CZeVc.roa
Signing time: Thu 15 May 2025 14:05:10 +0000
ROA not before: Thu 15 May 2025 14:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 09:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:43:6c:26:17:87:4d:56:e0:88:ed:77:58:03:a2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 15 14:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f3383bd33d0162e2108191a42c398df50997957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:65:c5:78:9a:6e:bf:ee:da:07:ee:bc:d1:
e9:25:f8:9f:45:2d:81:39:d8:0f:07:29:9e:6d:4e:
74:f7:1c:39:0c:9a:f3:e7:88:86:d7:7f:95:c0:bc:
30:fd:67:11:25:5a:b6:9a:c8:e8:6f:40:22:a6:3f:
20:1c:54:23:ba:5e:17:53:0f:08:4c:6f:ee:36:4c:
7a:28:a9:e9:91:e7:7d:f8:fe:8b:26:70:ad:b3:0a:
60:40:9a:99:66:ac:bc:90:64:d9:d1:ad:d1:fc:36:
67:38:a7:ee:6f:9c:0e:7b:ee:46:26:7c:33:33:86:
a1:e9:79:36:b8:aa:d8:2c:00:2b:78:ff:f9:df:c7:
31:ce:77:c7:e2:fc:24:53:b4:77:1a:6c:cc:3e:9e:
82:ea:f4:b4:29:6f:c9:88:85:b6:1d:6e:e8:bf:7b:
41:96:29:08:d3:59:2e:d0:66:d7:d4:2c:69:0c:ca:
bd:92:4b:f2:13:16:00:ab:27:dc:a1:cf:59:3d:5f:
0e:bd:ec:f4:8f:c6:f4:fe:90:d6:7e:09:fa:05:35:
98:3a:7e:07:18:d6:e5:3b:2e:fd:8a:43:8d:f6:a1:
82:b7:aa:ad:d0:18:08:29:08:da:44:1a:ea:d0:e5:
f6:cd:fa:a2:2e:28:8c:bb:a1:03:8b:fc:82:12:c9:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:33:83:BD:33:D0:16:2E:21:08:19:1A:42:C3:98:DF:50:99:79:57
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TzODvTPQFi4hCBkaQsOY31CZeVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
46.102.237.0/24
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
93.115.203.0/24
94.177.106.0/24
188.215.31.0/24
194.85.251.0/24
202.71.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:bb:b6:ff:81:a6:00:95:dd:45:9b:b8:80:69:f6:8d:01:8a:
2f:09:76:c5:26:5d:18:25:a3:8a:b7:66:60:e8:76:d0:f2:a2:
c3:7d:11:8d:ce:f1:a1:0a:03:69:c9:44:2a:03:74:b5:d4:ea:
f9:52:32:58:98:a6:c7:6d:59:cf:cc:c8:e1:8c:68:fa:c2:f7:
76:a3:8b:f7:8d:5d:f9:39:0b:48:74:81:52:dd:5a:7b:ee:82:
c9:e2:6f:80:39:a2:1c:58:6c:10:a9:b0:15:f2:b1:67:17:07:
03:2c:77:de:75:f4:cf:d1:a6:05:82:ca:e4:97:90:a6:6c:74:
f4:1e:59:90:17:b5:6a:15:25:52:ce:ee:87:61:a7:1f:02:69:
f2:43:91:c0:0b:5f:c0:da:5b:8d:17:7c:5a:a7:44:92:3b:a8:
16:ee:b9:fa:ae:3a:18:3b:2f:6f:fe:27:20:db:ed:39:17:47:
97:3b:d9:55:85:8f:7a:59:92:a1:18:17:eb:48:7d:94:8f:34:
fb:e8:ee:00:95:55:c5:18:b6:96:38:93:b9:86:83:f1:02:e1:
4a:91:c7:e6:e6:18:f2:d9:06:0c:8a:eb:80:0c:42:bc:63:76:
60:e7:03:80:a7:d5:c7:b5:f9:32:97:6f:67:60:91:53:fc:b0:
38:76:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:09:41 2025 by rpki-client