Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bC1nUlUttykTDQrlGaduwB0D120.roa
File: bC1nUlUttykTDQrlGaduwB0D120.roa (raw, json)
Hash identifier: O20PfJ9WWDOgnYxhjQ7ZPdMuuUNCUdsIDI810m9wMiA=
Subject key identifier: 6C:2D:67:52:55:2D:B7:29:13:0D:0A:E5:19:A7:6E:C0:1D:03:D7:6D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428275206BDD72EF1E1A7E42FB4F6E00A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bC1nUlUttykTDQrlGaduwB0D120.roa
Signing time: Thu 02 Jan 2025 17:54:13 +0000
ROA not before: Thu 02 Jan 2025 17:54:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.34.101.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 21:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:52:06:bd:d7:2e:f1:e1:a7:e4:2f:b4:f6:e0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c2d6752552db729130d0ae519a76ec01d03d76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:da:f8:32:20:50:93:9b:38:44:7f:c4:33:
b2:2b:4a:88:d7:0a:9e:7b:68:49:75:b8:cf:ba:8a:
ea:b0:fb:c9:4b:66:6a:80:62:55:5e:05:da:24:e3:
70:83:b7:ae:02:21:01:d4:b8:8f:39:0a:f2:74:e6:
d5:2f:c0:81:7b:35:63:f5:3b:a1:f6:2d:40:65:1a:
d1:92:7c:e4:08:b0:92:55:fb:77:a9:05:bc:e9:d9:
b4:c7:7b:e4:bc:36:e8:6f:b9:81:92:a1:df:9f:f8:
c9:1a:7d:50:79:ab:08:0e:02:f7:8c:8f:1e:ca:84:
f7:e1:6b:4f:b8:62:69:41:82:7c:ac:a4:86:39:e8:
5e:9b:3f:9a:0c:b1:c4:ba:15:91:da:1b:c7:e7:e1:
7b:39:0b:db:31:68:a7:3c:13:a4:b0:ca:9d:7d:44:
ef:96:a2:fe:6a:1b:a4:c2:ab:0b:14:06:2b:ef:e0:
43:13:4e:b2:3d:c2:42:88:39:cf:11:3b:23:b0:cb:
09:7b:b5:e5:8d:e6:ec:f8:dd:fe:96:b8:af:9b:b0:
bf:72:e9:ac:92:d8:28:dd:49:d2:bb:bb:fd:46:6f:
24:43:66:49:ca:c2:d7:7f:c2:fc:20:b6:b5:f2:b6:
fa:8a:d5:2b:10:b2:a7:9b:d1:76:f8:41:2b:8f:87:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2D:67:52:55:2D:B7:29:13:0D:0A:E5:19:A7:6E:C0:1D:03:D7:6D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bC1nUlUttykTDQrlGaduwB0D120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.34.101.0/24
185.254.66.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:15:25:28:aa:b1:b6:b3:7e:42:87:3f:45:f8:5e:39:56:b4:
1f:41:52:7e:de:16:86:56:a4:27:53:ab:b8:6a:ad:df:5d:20:
07:09:20:53:1a:9c:9f:51:09:22:66:09:f4:66:e6:53:6b:a7:
bd:ae:ef:ca:f0:1c:49:eb:77:a2:2f:46:38:4c:e2:52:d9:de:
4e:4c:d3:d8:58:d2:0f:f2:a5:cf:7d:da:4f:79:d5:57:d0:b0:
3b:e9:7c:24:06:54:65:5e:72:ad:05:36:02:b1:67:c1:81:07:
3c:64:10:c2:c5:d9:64:d9:07:d9:eb:9e:4b:ba:73:a0:87:e6:
6d:de:ee:0f:21:a8:46:83:86:f2:68:63:c4:5b:af:75:3a:49:
ae:df:5b:47:55:c2:47:23:b3:bc:bf:3d:0b:e1:a5:f0:fb:d0:
05:09:46:ba:52:c2:62:d9:08:72:3a:d8:20:06:33:5e:d7:16:
5b:aa:1f:bb:8a:5e:2c:ee:9c:d5:f2:d3:6a:74:81:e1:de:c5:
83:3b:45:50:2e:96:52:52:95:1b:7c:25:7a:24:07:bb:27:ab:
89:69:32:e7:5a:32:ea:fc:50:63:6f:ab:f4:c4:77:a3:6b:4e:
0b:ec:6a:31:d2:af:9f:27:3e:5b:7c:84:5d:09:5d:75:7c:8c:
81:1c:13:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:41 2025 by rpki-client