Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fq8wBB02R-HMDvsSHQDCnMUvMWk.roa
File: fq8wBB02R-HMDvsSHQDCnMUvMWk.roa (raw, json)
Hash identifier: zaIBAQsU8Rign1Ki3QVRkLpBtQGPkHNz7FAkAW8M7Dg=
Subject key identifier: 7E:AF:30:04:1D:36:47:E1:CC:0E:FB:12:1D:00:C2:9C:C5:2F:31:69
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01939299C10B46E5FC7CB5A7B24A28AE9A95
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fq8wBB02R-HMDvsSHQDCnMUvMWk.roa
Signing time: Wed 04 Dec 2024 16:56:10 +0000
ROA not before: Wed 04 Dec 2024 16:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Dec 2024 16:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:99:c1:0b:46:e5:fc:7c:b5:a7:b2:4a:28:ae:9a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 4 16:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eaf30041d3647e1cc0efb121d00c29cc52f3169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:c8:c3:6e:8a:53:5a:80:ae:f6:ed:1c:8f:
b5:9f:fe:85:b0:fa:00:6e:0c:98:57:f9:9a:3c:3c:
ad:57:79:b2:79:f5:a8:d6:0f:c7:91:93:6f:fc:f5:
a1:c9:d2:e4:52:36:da:06:00:40:ac:58:05:86:fa:
57:d5:02:b4:cc:57:c3:5c:19:11:b1:c1:2a:7b:88:
30:05:df:cd:d6:5e:27:e7:6b:05:cf:4b:40:db:e3:
68:e9:06:fe:8f:9d:b9:53:45:9f:60:2e:09:4d:63:
c0:84:26:71:07:c2:d3:74:78:cf:31:92:11:e5:11:
75:4e:91:23:0d:69:2e:f5:ba:d2:c2:17:ac:50:f0:
e4:91:b4:78:98:1c:c8:4c:29:8d:6d:0d:45:2b:ce:
db:1d:c6:bc:68:ff:86:51:b2:d8:13:f5:37:bb:62:
97:19:98:89:6c:db:70:fc:35:7e:69:90:c1:87:e9:
88:85:c2:11:10:4a:2e:38:3f:a2:35:d5:c0:5e:79:
01:1b:fa:38:1f:0f:51:3e:a3:30:62:14:48:01:59:
61:78:bd:27:fb:b1:dc:b8:f1:2d:7d:54:83:0d:76:
4a:61:1b:d0:ac:7b:49:62:c5:ac:19:a4:cc:65:e0:
e3:9a:66:57:f8:b2:f9:3a:cb:d4:cd:b9:98:2f:51:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AF:30:04:1D:36:47:E1:CC:0E:FB:12:1D:00:C2:9C:C5:2F:31:69
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fq8wBB02R-HMDvsSHQDCnMUvMWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fa:3b:a4:99:2d:31:6a:f5:3c:ab:be:50:82:ca:80:69:1c:
d9:d6:c8:d4:9a:36:14:df:b1:b4:c9:8c:fb:da:dd:16:51:ac:
a2:f4:34:25:ea:1a:d7:2a:99:e3:21:64:46:e3:01:03:21:29:
1d:72:d2:aa:0f:4d:5f:33:7d:e0:18:13:f2:47:81:01:64:f9:
61:50:56:cf:e0:a1:04:3f:3b:da:48:bf:ce:f2:d6:3a:d2:2d:
62:19:69:af:e4:f3:d4:09:1a:b0:94:9c:90:62:6f:9b:16:22:
49:aa:9d:c9:c7:e6:b0:1f:7b:0a:ef:58:cb:7c:69:6c:1d:69:
e2:1c:05:13:cc:39:6f:fb:a8:06:41:b3:62:bc:d6:ae:77:cd:
d6:e7:e0:69:c0:1a:f0:30:ea:dc:dc:9d:c9:5b:d4:ad:6a:d4:
d4:c7:93:ed:1a:d4:b1:70:f1:47:bc:10:18:5e:4b:74:a6:59:
a1:5c:ae:21:8f:17:60:f1:0c:de:e6:09:64:61:3b:74:8f:d3:
3a:77:95:d0:f0:7a:e5:86:02:f9:c7:f4:22:07:5a:ac:62:f4:
c7:12:3a:f6:68:75:88:3b:13:b3:c6:9c:1b:17:07:f6:48:5f:
7d:4d:72:ed:69:2e:07:ab:31:98:cf:29:6b:6b:c4:79:7a:85:
a4:6b:b9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:22 2025 by rpki-client