Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VaG2mccAZfNF7s6tJiXbBJ2vjzw.roa
File: VaG2mccAZfNF7s6tJiXbBJ2vjzw.roa (raw, json)
Hash identifier: QXcVARkO8uVgoWYZGi1LIjWWsa0B3227+xkWlmxxa0w=
Subject key identifier: 55:A1:B6:99:C7:00:65:F3:45:EE:CE:AD:26:25:DB:04:9D:AF:8F:3C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0195474689E71423B7E33E19CB3A27BF9EB3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VaG2mccAZfNF7s6tJiXbBJ2vjzw.roa
Signing time: Thu 27 Feb 2025 11:59:19 +0000
ROA not before: Thu 27 Feb 2025 11:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 09:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:46:89:e7:14:23:b7:e3:3e:19:cb:3a:27:bf:9e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 27 11:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55a1b699c70065f345eecead2625db049daf8f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:27:24:39:3e:e0:16:0f:a1:7a:f5:7a:df:
de:df:b8:3d:36:77:95:6c:c6:db:0b:46:7e:72:24:
0d:53:66:28:4f:3c:e0:e4:22:87:9e:81:b8:92:42:
9f:3d:2f:13:d8:1c:31:ed:da:cf:64:e7:6a:8b:54:
d8:ee:3d:03:bd:91:91:92:7f:24:23:34:8b:5b:da:
7a:cb:67:63:a0:fd:5a:6a:3c:98:57:26:d3:5c:1d:
3e:5d:04:f5:56:d6:3a:b4:ba:ab:27:8a:04:06:4c:
c1:9f:1e:a9:77:32:a8:2e:d0:ba:3a:72:5c:f3:b2:
b6:b6:9c:bf:b4:37:4a:4e:3b:6f:76:fa:87:28:3e:
6c:ba:a1:42:b5:78:a2:63:2a:f6:7f:5e:17:a9:b4:
41:d5:63:40:97:fe:f1:a7:82:2a:33:0e:7a:9e:04:
4b:96:da:07:c0:e3:a7:3b:ab:36:2d:4b:9a:34:65:
4f:fb:77:2c:b0:7a:73:a5:fb:9d:21:f2:f1:43:58:
ff:52:c7:78:25:85:f5:2a:8e:77:ff:3b:8f:12:82:
38:e2:10:b4:ac:1f:ba:76:2a:cc:34:9a:0f:5e:b9:
d2:07:bb:f0:d8:53:35:bf:90:bd:18:01:23:39:6b:
31:77:21:9a:27:47:db:61:a4:2b:b8:0c:7a:59:79:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A1:B6:99:C7:00:65:F3:45:EE:CE:AD:26:25:DB:04:9D:AF:8F:3C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VaG2mccAZfNF7s6tJiXbBJ2vjzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
194.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cb:da:20:1c:a9:31:45:66:96:ff:9c:10:e7:8d:48:0d:3a:
56:ca:b5:17:52:e2:41:6a:fa:c4:57:1d:c1:96:c2:4a:35:3d:
77:ca:a8:2e:38:83:e0:22:78:40:aa:24:83:29:43:93:b3:3d:
83:a2:c9:6d:b1:d9:29:2e:e8:78:9a:ee:57:de:d4:02:38:cb:
49:e3:84:d6:2d:5d:5f:47:60:5b:b2:f0:f6:99:15:a0:1f:7c:
4e:f1:6c:16:92:64:ff:a1:c7:77:d3:0d:cb:42:e3:6a:a3:71:
69:98:75:d1:65:3c:9e:3e:4d:52:75:bb:d2:b3:d1:eb:6e:fe:
bf:36:1d:0c:8f:f9:f6:ad:ac:44:20:aa:28:3a:0e:f1:3a:3b:
1c:cc:04:4c:1c:8d:27:a0:70:eb:14:71:ff:56:53:1a:13:bc:
1c:21:08:d2:f7:e5:20:6d:cb:18:e8:02:2d:8c:97:df:20:83:
00:80:03:e3:e8:2b:64:13:ff:7f:41:b5:12:81:e9:ff:63:90:
05:f3:55:b9:36:7c:bc:42:13:01:56:9b:e1:b1:3c:88:b6:40:
07:19:25:4f:1c:54:1b:fc:8c:1a:c4:d0:9e:bf:3e:fb:aa:bc:
fd:f6:d5:8f:d9:e7:3c:94:e0:5c:17:c1:69:b2:8a:59:85:90:
f3:42:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:44:55 2025 by rpki-client