Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WA9OffRKU6-hf4dktT5OWkIG9js.roa
File: WA9OffRKU6-hf4dktT5OWkIG9js.roa (raw, json)
Hash identifier: jUNoJNPtpdOcBProCnmAxg4fieY7uuyVSDYlixRZQRU=
Subject key identifier: 58:0F:4E:7D:F4:4A:53:AF:A1:7F:87:64:B5:3E:4E:5A:42:06:F6:3B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01944C0BA61F35C37C0D4958587504895A20
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WA9OffRKU6-hf4dktT5OWkIG9js.roa
Signing time: Thu 09 Jan 2025 17:10:19 +0000
ROA not before: Thu 09 Jan 2025 17:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.34.101.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 16:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4c:0b:a6:1f:35:c3:7c:0d:49:58:58:75:04:89:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 9 17:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=580f4e7df44a53afa17f8764b53e4e5a4206f63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:0a:be:a9:9c:b7:ea:1d:2c:d9:be:eb:78:
6f:56:4f:95:4e:b4:c9:d9:62:cc:c7:61:3b:e1:16:
5e:85:52:9b:c9:c3:6b:0b:86:5b:a7:03:3e:72:58:
cf:e0:7d:14:07:0d:96:35:87:50:2f:20:4e:cc:64:
10:3b:f8:83:78:24:70:81:ed:43:23:e5:6e:48:87:
45:fd:98:a3:88:c9:bf:59:85:0e:d1:68:5b:76:32:
a3:4d:35:3a:3d:81:40:99:83:9b:b6:8a:de:7c:45:
97:a1:e0:33:f2:81:b1:e4:74:2a:78:ed:1b:7b:b4:
41:1b:08:9e:89:86:11:1f:97:fb:93:3a:e8:46:c2:
7e:e4:47:0d:7b:b1:88:50:92:5d:af:04:f5:59:b1:
c2:35:e7:98:de:96:76:be:6a:60:8a:91:70:3a:5c:
5e:cb:dd:66:59:dd:04:27:7f:46:70:1f:e0:61:cb:
01:a5:43:85:85:87:88:11:2d:e7:65:bc:25:81:88:
37:57:64:9d:23:1e:9f:e8:08:80:73:66:d7:e5:3c:
6f:44:54:4a:6b:13:bc:bf:64:55:ef:03:aa:e1:96:
c7:0f:e6:09:eb:a7:d3:82:f0:32:7e:79:da:7d:d0:
f2:f9:0d:88:1e:9d:8a:58:be:6c:d3:29:f3:41:4f:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0F:4E:7D:F4:4A:53:AF:A1:7F:87:64:B5:3E:4E:5A:42:06:F6:3B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WA9OffRKU6-hf4dktT5OWkIG9js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.34.101.0/24
185.254.66.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:63:2b:2b:09:7c:75:48:f7:22:de:61:a0:ba:00:02:08:59:
e2:a3:40:08:4d:e5:09:3d:65:4d:64:e1:c3:7a:01:45:23:11:
f7:41:72:00:69:59:fb:80:8b:b9:45:d4:e9:a0:5e:20:66:e7:
57:d7:df:14:04:37:d4:d5:82:0c:0f:ba:3d:2b:6d:60:d8:8b:
2b:7e:6a:42:91:96:46:be:dc:6b:02:c6:87:ba:b0:a4:f0:cf:
4a:81:f5:cf:da:ed:33:6c:ad:70:98:a4:c7:d7:aa:54:4a:87:
9c:71:f7:45:36:2f:fd:8c:50:bc:18:85:25:f6:33:1c:e5:4d:
61:92:e3:ae:ee:a6:f7:93:b2:d8:71:50:e5:33:af:eb:13:cc:
eb:72:d8:fc:2b:81:9e:26:4c:3f:e4:cd:3e:8c:cb:57:ae:ca:
e9:5f:1e:08:c6:aa:cd:ae:87:8f:f2:d6:ff:93:08:7a:97:5f:
22:19:a0:47:90:3d:39:a4:c0:04:be:16:d4:ef:b4:75:7f:6f:
97:07:2a:8a:2b:c0:9a:81:c1:28:14:3c:fa:f1:b9:9f:73:a0:
79:5a:48:c6:b2:c4:1a:10:24:4e:9d:54:fa:bd:a3:4c:08:18:
1a:fa:7f:6c:14:10:0e:da:d9:42:d3:b1:41:9f:fc:d7:1c:0d:
7d:24:7e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:21 2025 by rpki-client