Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cnBh3AWk0RCQB8Ef9ja5papVr38.roa
File: cnBh3AWk0RCQB8Ef9ja5papVr38.roa (raw, json)
Hash identifier: zXqa/juCbu51XfIPAZGprrriV9Lid2yEUTYSYsJezUE=
Subject key identifier: 72:70:61:DC:05:A4:D1:10:90:07:C1:1F:F6:36:B9:A5:AA:55:AF:7F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193F879B1C74ED63E02B30CC4DD6A5464F3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cnBh3AWk0RCQB8Ef9ja5papVr38.roa
Signing time: Tue 24 Dec 2024 11:42:25 +0000
ROA not before: Tue 24 Dec 2024 11:42:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.35.130.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.141.216.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
193.228.139.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 16:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:79:b1:c7:4e:d6:3e:02:b3:0c:c4:dd:6a:54:64:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 24 11:42:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=727061dc05a4d1109007c11ff636b9a5aa55af7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:33:5b:93:a7:59:b3:58:9e:2e:59:2d:6a:
91:c5:eb:ec:f2:51:43:72:39:70:da:0e:32:ed:13:
a2:dd:75:d6:40:92:56:e1:aa:78:88:1e:5a:d2:0d:
af:97:0f:66:1e:28:00:ce:50:f7:0e:1c:ae:5f:57:
14:69:3b:f7:e4:63:e2:da:23:3a:72:e5:38:3d:01:
b2:04:da:36:1b:d0:7c:4f:57:22:ee:50:53:ce:4d:
46:57:ae:37:df:2c:fc:6a:d5:47:bc:9b:86:2e:90:
64:4a:29:5e:90:c7:1b:9f:1b:2e:22:6e:bc:4a:60:
57:5e:bd:d4:a6:e7:b8:60:49:4c:4c:52:5e:78:46:
01:cb:52:b4:6a:1c:6f:91:ae:b2:ca:c2:98:76:93:
66:75:8b:0b:79:6d:ff:5a:18:0f:57:16:61:bc:bc:
36:2a:51:81:00:0d:df:26:eb:7e:f1:f1:d2:6d:a8:
4b:a1:81:b3:6d:a9:95:cc:4c:d9:cb:ea:3b:a7:79:
cf:2c:fc:bf:e4:6a:48:ef:dc:c8:31:99:62:83:b6:
80:76:9a:b7:4a:b9:3a:08:4f:79:ec:be:a0:74:b8:
2e:94:30:02:19:f8:9e:d7:ce:7c:35:9b:7a:dc:1a:
ef:4e:f1:16:86:e2:c4:94:76:57:e2:53:cd:60:1d:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:70:61:DC:05:A4:D1:10:90:07:C1:1F:F6:36:B9:A5:AA:55:AF:7F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cnBh3AWk0RCQB8Ef9ja5papVr38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
89.35.130.0/24
93.114.183.0/24
185.141.216.0/24
185.212.119.0/24
185.254.66.0/24
193.228.139.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0b:60:0b:27:a4:1c:21:8b:ca:c8:41:80:bc:f3:4f:2a:d0:
52:67:04:e1:fa:70:d9:64:9c:f8:b4:e5:8b:2b:d3:d9:8f:58:
e5:4f:51:bb:99:d0:1b:78:61:f9:d6:22:49:ae:e2:c4:cb:4b:
33:a4:de:74:18:af:96:0f:2a:62:dd:a7:bb:45:f7:20:50:dd:
be:43:23:f2:73:6a:cd:9f:3d:db:3e:c4:0c:a1:9a:51:a9:3d:
d3:a3:e6:0f:b6:83:d7:35:14:43:5b:72:d8:e3:f5:d7:84:b1:
8c:9e:e2:59:1c:35:fa:a6:f1:16:48:bc:21:74:b4:34:0b:ec:
1a:90:2b:9b:4d:27:a9:b1:96:60:2b:56:33:d7:4c:f4:d1:37:
6d:e7:99:26:2f:2f:bd:f2:c1:73:59:ac:a9:ef:cf:85:07:be:
58:49:cf:f9:fa:58:f7:96:1f:73:34:1b:9b:ae:54:b4:67:e5:
1c:6f:12:a5:2f:28:eb:ef:0b:b3:e5:bc:7b:e5:5d:5d:06:94:
ff:db:48:9c:bd:c1:70:b4:1c:37:76:84:93:b1:41:46:9c:f3:
23:f9:9f:3e:e1:bc:22:86:1a:09:f3:e9:50:19:83:be:c6:16:
51:64:23:b0:23:76:6d:9f:4a:b3:69:24:7f:d2:bb:d0:6a:d6:
41:72:26:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:23 2025 by rpki-client