Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c4gVBH8xNOSIEinFjvgHUCDc3M4.roa
File: c4gVBH8xNOSIEinFjvgHUCDc3M4.roa (raw, json)
Hash identifier: LZJcAumVnTwc+KXsavcbIafGaC591c+4yh8ZfGB+o5Q=
Subject key identifier: 73:88:15:04:7F:31:34:E4:88:12:29:C5:8E:F8:07:50:20:DC:DC:CE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01946E32BD5A87EC6608D3A23B1C72D5C087
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c4gVBH8xNOSIEinFjvgHUCDc3M4.roa
Signing time: Thu 16 Jan 2025 08:20:06 +0000
ROA not before: Thu 16 Jan 2025 08:20:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.34.101.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
212.192.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 19 Jan 2025 17:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:32:bd:5a:87:ec:66:08:d3:a2:3b:1c:72:d5:c0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 16 08:20:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=738815047f3134e4881229c58ef8075020dcdcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:ed:73:5b:c9:d7:14:c3:3b:dc:18:98:6b:
31:62:f0:07:45:59:b7:94:1b:86:1e:7b:91:62:8d:
4a:50:df:59:5c:5f:c6:17:3e:f1:b7:cb:35:63:7a:
80:ea:9a:8a:08:86:7d:ed:87:1b:d1:a8:08:0d:54:
82:a3:8a:38:3b:85:bc:35:bb:0c:3e:d4:db:b4:df:
03:8f:d9:9e:80:a6:bf:eb:aa:81:b1:d0:6c:b4:a1:
73:34:d2:41:fd:da:32:61:b1:67:b2:cd:5e:99:c2:
40:96:48:29:6e:00:83:ca:da:4d:64:1f:ec:d2:87:
e7:24:3b:04:d7:ef:8c:e7:c6:b1:b5:2b:21:bf:24:
a8:ed:d7:7c:f7:e4:44:50:c8:6c:49:6c:34:61:44:
43:2e:75:b6:8b:e1:aa:37:58:55:1c:19:82:42:4e:
b9:8e:ec:2f:d1:72:32:09:a8:48:79:a8:ce:87:9c:
e6:7d:94:ed:5e:3f:3a:4a:6a:01:5f:82:f9:b5:be:
91:f4:f2:de:51:46:76:58:07:5a:4a:1b:38:d5:8d:
af:ac:c4:47:d5:a8:e6:13:46:51:cd:ae:00:93:82:
9d:7f:e1:00:67:fa:e4:96:33:c4:d9:2a:b5:d9:93:
cb:b6:f7:97:7f:3b:9c:26:ec:03:51:c3:a6:50:e2:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:88:15:04:7F:31:34:E4:88:12:29:C5:8E:F8:07:50:20:DC:DC:CE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c4gVBH8xNOSIEinFjvgHUCDc3M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.34.101.0/24
185.254.66.0/24
195.88.89.0/24
212.192.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:e8:f4:53:d0:04:3a:50:99:91:ed:1b:45:e3:d7:75:3c:33:
0b:0f:41:2f:25:bf:d9:a3:fe:00:01:8e:f5:67:30:dd:54:b8:
83:e9:bd:43:f7:62:bb:22:8b:76:15:39:20:ea:93:d9:96:ee:
24:ca:c0:51:67:ba:84:3f:1e:fb:59:db:15:0c:d2:56:7d:3c:
4c:c0:a7:9a:60:f2:0e:58:51:a7:a7:12:3a:78:79:7f:eb:54:
d8:52:1a:57:ef:a1:4a:4b:fe:d7:8e:d1:40:39:fe:3f:28:b9:
5f:cb:e2:bf:e0:e8:6b:5d:3d:70:86:38:05:ca:5d:05:09:9a:
c0:14:73:f4:88:4b:64:80:cf:df:5c:c3:2f:b8:9f:d7:10:a9:
a0:a9:55:6c:10:2f:30:de:61:a0:d6:4c:8f:10:01:69:5a:19:
c8:3d:94:7d:6d:51:c9:e1:f2:4e:1e:14:62:66:78:53:f7:b7:
a6:06:5f:5d:a2:50:c6:9e:fa:b7:b1:7a:c6:3f:4a:08:d9:0d:
a8:30:b8:57:ba:6f:92:8b:c1:91:ce:c3:ef:99:a4:d7:c8:8c:
8d:17:c7:37:44:1b:1c:8d:85:c7:73:df:65:35:19:40:12:d1:
6e:01:e3:70:c6:db:4f:97:b3:a9:53:95:5d:a6:d4:b9:6f:7c:
f9:9f:76:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:50:28 2025 by rpki-client