Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jNrMsuy6LGOGtVFZMWl6dYZuS-Y.roa
File: jNrMsuy6LGOGtVFZMWl6dYZuS-Y.roa (raw, json)
Hash identifier: oRa3sOpw3rvl2IORWwEIqeWEy7QjUxp3XbweMs5kvMw=
Subject key identifier: 8C:DA:CC:B2:EC:BA:2C:63:86:B5:51:59:31:69:7A:75:86:6E:4B:E6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193D40D02A772DBF8AB3DF349FCC1A08CD4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jNrMsuy6LGOGtVFZMWl6dYZuS-Y.roa
Signing time: Tue 17 Dec 2024 09:57:22 +0000
ROA not before: Tue 17 Dec 2024 09:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
193.228.139.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 08:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:0d:02:a7:72:db:f8:ab:3d:f3:49:fc:c1:a0:8c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 17 09:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cdaccb2ecba2c6386b5515931697a75866e4be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:55:dd:32:bd:09:b2:a4:86:5a:76:05:87:
c0:23:4b:3d:0f:9d:7d:f9:20:56:13:55:45:cf:08:
44:3e:9a:9a:84:20:10:e9:74:32:cd:8c:ab:45:ec:
56:79:fe:0a:88:cd:ee:a5:1e:7d:a7:b6:55:88:2c:
87:5c:c0:5b:64:41:d2:fd:ff:45:e8:79:34:c4:d7:
65:2f:ad:b8:23:8b:e6:05:8d:13:af:c8:57:8c:91:
87:ad:23:1c:6e:9b:39:cb:1f:be:22:03:d2:0a:f0:
04:22:6f:0a:67:db:6d:b1:45:77:e4:5e:6f:a7:82:
61:ed:97:fd:06:6e:5f:75:27:48:27:21:87:9c:4e:
43:dd:b1:f3:83:ae:a4:d1:14:88:67:29:f5:9b:e4:
02:27:58:dc:37:44:20:85:2f:ec:d7:bb:ba:27:6d:
32:24:e2:e6:b0:a6:3c:b0:0e:3d:09:9e:4a:64:61:
d8:a9:04:44:6e:ed:dc:00:ac:4e:ba:9d:a6:f6:97:
12:bf:d0:89:a4:18:e5:dc:09:0b:34:67:40:ce:f2:
3a:1c:2b:8c:57:b7:db:4f:66:29:10:b1:7d:50:06:
63:78:d5:37:fa:57:6d:02:8b:4c:21:74:c0:6f:a2:
92:df:d7:c9:3d:3d:49:b7:f9:29:ac:6e:9c:c1:b1:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DA:CC:B2:EC:BA:2C:63:86:B5:51:59:31:69:7A:75:86:6E:4B:E6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jNrMsuy6LGOGtVFZMWl6dYZuS-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.212.119.0/24
193.228.139.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b6:71:68:76:7b:f9:1d:ef:6b:12:7f:0d:28:39:49:53:69:
b7:95:06:f0:41:01:53:4c:e3:a5:d7:43:72:61:91:b1:1a:dd:
eb:1b:1b:b3:47:90:40:fd:b2:60:19:a0:ef:c2:69:7c:4b:d7:
a8:84:9e:29:24:95:20:f3:10:af:0f:27:20:e3:22:da:7d:69:
a1:1d:c7:25:83:56:91:0d:4d:95:8e:44:4d:e5:64:ad:c6:a9:
ec:ea:8e:cc:09:26:92:d0:12:fd:e8:78:8f:b3:45:dc:ba:24:
2b:6e:2c:20:4c:d0:1b:d4:c2:48:b2:57:91:56:4f:ba:f2:3e:
03:b4:4e:8d:8f:e6:6b:aa:70:39:8f:87:2e:6b:81:eb:c3:af:
f3:a8:61:e9:55:d2:d6:32:03:ba:69:03:01:58:5d:47:f3:d9:
3e:75:d5:0a:b4:59:0e:c2:7b:18:87:00:06:f3:04:fc:41:26:
66:df:77:35:c0:66:7b:7b:3d:b0:8f:3e:69:fb:12:cd:90:11:
bf:ce:fa:d1:59:97:fa:b2:6f:8a:10:04:01:c7:c1:30:b3:dd:
fa:91:a9:93:be:0a:64:05:2d:f9:69:08:29:8b:43:12:80:ea:
0e:10:2b:58:a2:a3:b4:b8:18:e8:e0:bf:8f:b7:ba:c0:95:e1:
04:99:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:46 2025 by rpki-client