Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XWP06mUyBmmJVNNpBM9doBmCFeM.roa
File: XWP06mUyBmmJVNNpBM9doBmCFeM.roa (raw, json)
Hash identifier: 5PeLo4ZG3NpH/K5o1zDgBfx0JJBaOFeUa4uYj6qVNQ8=
Subject key identifier: 5D:63:F4:EA:65:32:06:69:89:54:D3:69:04:CF:5D:A0:19:82:15:E3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01957B00BB2E1B553ACB79EC25488E7D3498
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XWP06mUyBmmJVNNpBM9doBmCFeM.roa
Signing time: Sun 09 Mar 2025 13:03:20 +0000
ROA not before: Sun 09 Mar 2025 13:03:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
45.144.173.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 09:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7b:00:bb:2e:1b:55:3a:cb:79:ec:25:48:8e:7d:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 9 13:03:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d63f4ea653206698954d36904cf5da0198215e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:7d:49:d2:01:7b:52:ab:7d:1d:e1:64:f2:
97:7b:51:94:85:79:e7:b2:1f:f2:1e:13:7d:86:7b:
57:5e:fc:79:dd:33:ae:08:b3:18:3c:2a:c7:53:2c:
8b:c8:4e:88:64:a8:b9:fb:0f:db:ee:f3:bd:85:46:
23:e1:5f:5e:3b:e4:8f:98:03:23:2b:fb:ee:c6:8e:
39:de:fb:6c:e4:02:04:9b:e8:37:6f:27:7d:d7:d9:
cd:2f:42:52:68:06:f8:02:e3:35:a5:0f:15:23:f9:
be:52:d3:dc:2a:51:99:d6:10:f7:3a:72:f8:d9:d9:
20:82:81:d3:87:a3:07:5b:8a:97:78:30:b1:d1:1d:
7b:36:b3:1c:2a:24:e7:b2:ec:52:b6:e0:77:d6:f0:
44:b8:6a:8e:31:94:a9:7e:c1:af:5b:36:61:6f:6a:
c9:48:af:45:8b:93:58:f6:02:85:74:50:52:f9:a9:
66:c1:0a:be:01:21:0f:01:40:15:ff:7f:10:de:ab:
95:c3:38:d4:c4:f4:c5:7b:7e:aa:75:66:d1:15:8d:
2c:c8:26:84:b7:c9:9e:ec:dd:c8:b0:df:39:15:62:
e7:2c:a8:60:50:11:71:f1:02:2d:84:20:e7:55:36:
35:a3:00:d2:e9:62:05:98:2b:26:ba:ca:49:ac:10:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:F4:EA:65:32:06:69:89:54:D3:69:04:CF:5D:A0:19:82:15:E3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XWP06mUyBmmJVNNpBM9doBmCFeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
45.144.173.0/24
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
94.177.106.0/24
194.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
21:64:c0:da:89:e9:be:2f:b0:22:33:ba:87:e4:04:6f:b7:79:
ba:0d:b2:d2:fb:84:cd:d6:b3:ab:bb:b1:9d:78:e1:75:af:83:
fe:4d:33:5b:91:f9:af:d7:d5:25:98:9e:d9:c5:0a:fe:45:23:
10:2f:08:3f:de:9f:60:9e:b8:19:a3:ed:f8:c9:9a:4f:7f:1a:
9a:09:87:41:d4:e9:ca:78:2a:21:8e:eb:da:01:3e:cb:f6:84:
8b:55:ff:31:bb:22:ba:ef:4f:ec:89:0d:d2:72:8b:31:8a:65:
d8:e2:8b:8e:a2:8d:58:8a:eb:b1:3e:e0:0c:92:52:51:03:5a:
89:6b:58:6d:f7:98:ea:5c:75:b6:a0:86:b6:43:18:16:f4:08:
2a:a4:66:51:bb:1f:0e:2d:ee:10:2f:bc:79:63:76:ff:15:b9:
7f:b7:e2:49:c0:57:d3:91:15:0c:93:27:bf:9d:a1:6a:5b:50:
1c:f7:c6:41:1c:da:59:fb:fb:c4:28:19:d1:5e:d9:c1:57:da:
1d:6a:27:ac:03:9c:1c:0c:c7:43:a6:d0:df:d5:48:96:03:b4:
0a:88:24:73:8f:f3:d8:a2:0c:1c:dc:a4:1c:24:f8:15:bc:22:
31:e7:92:b6:9a:35:b7:7e:7c:b2:8c:3a:a1:24:e6:49:56:4b:
9b:90:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:29:37 2025 by rpki-client