Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q0VmDBQwK6OLCr6MtMcGODQ-_Ug.roa
File: q0VmDBQwK6OLCr6MtMcGODQ-_Ug.roa (raw, json)
Hash identifier: CI1RpLDWpdijo0qeb8mXcSvigHjwzgWv0ab0a+5lpUg=
Subject key identifier: AB:45:66:0C:14:30:2B:A3:8B:0A:BE:8C:B4:C7:06:38:34:3E:FD:48
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01941B7460D5E14F0D37A7A06E8019AD18F7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q0VmDBQwK6OLCr6MtMcGODQ-_Ug.roa
Signing time: Tue 31 Dec 2024 06:43:19 +0000
ROA not before: Tue 31 Dec 2024 06:43:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.35.130.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1b:74:60:d5:e1:4f:0d:37:a7:a0:6e:80:19:ad:18:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 31 06:43:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab45660c14302ba38b0abe8cb4c70638343efd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:c0:8c:6c:c2:ae:a3:cc:f2:09:ac:8e:2a:
fd:7d:04:bf:fc:38:2c:99:a0:21:d9:e2:f6:83:c0:
eb:f9:2c:ff:ef:a7:31:2e:f8:6c:2d:c4:d1:9b:2e:
ed:5d:8a:3e:26:21:69:bf:f5:c1:26:f0:0c:17:c8:
bc:d1:fc:22:8e:71:da:3b:e2:d9:c6:6a:ed:dd:7c:
c4:94:99:c9:9d:2c:22:b2:29:93:a8:c9:c0:55:59:
40:94:3d:c7:c3:b9:06:d6:9f:7c:de:c0:65:bf:1f:
76:2e:bf:40:b1:16:74:f2:2c:7e:2f:b3:7e:ad:4c:
e9:50:a0:4f:ee:12:d6:c1:27:53:58:18:7b:c3:2a:
d0:ea:b1:87:da:05:06:de:65:0c:85:ab:a0:22:8a:
50:82:50:06:b8:7d:55:70:68:58:b9:d5:1b:15:4d:
de:ac:a5:61:6c:79:c0:02:3f:c1:bd:1d:5f:56:04:
fc:c7:dd:ae:0b:c8:ba:0c:18:18:ad:40:62:10:23:
a6:94:ff:7e:bf:f7:85:81:74:d2:d1:6d:87:63:59:
39:d1:7c:88:6e:d5:2c:c0:ca:fc:4e:b2:ca:71:7d:
89:27:8e:27:d3:f0:b6:66:9b:e0:a7:a1:34:ec:27:
09:68:53:89:44:3d:57:45:55:55:4d:da:39:8c:04:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:66:0C:14:30:2B:A3:8B:0A:BE:8C:B4:C7:06:38:34:3E:FD:48
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q0VmDBQwK6OLCr6MtMcGODQ-_Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
89.35.130.0/24
93.114.183.0/24
185.254.66.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
22:dd:e5:57:54:ad:32:2a:f2:6c:a9:13:4f:8a:2a:3e:2f:09:
9e:ef:60:69:41:8a:28:d8:d8:bd:d0:d7:07:ca:2d:dd:d7:d1:
10:a8:a6:86:90:51:7e:e8:f4:b6:80:d6:fc:83:f6:2a:eb:25:
14:7a:d2:b7:49:e7:94:bb:c3:4a:c2:9b:94:43:07:79:08:dc:
ff:a0:86:4d:8a:70:0a:0c:f1:08:ac:9c:2c:6c:68:01:53:29:
09:16:45:61:24:f3:f9:51:53:2e:81:d9:ac:6e:6b:01:cc:2f:
6d:43:90:4b:4c:4a:ce:88:1e:b4:c5:06:7e:6a:6b:57:49:01:
2b:99:55:8e:5d:a0:c1:e3:17:18:75:52:cc:a5:d5:ba:56:7c:
e8:c0:b7:c3:72:9f:81:ce:59:cc:bf:b4:5d:d8:ca:46:1c:8f:
77:ab:fd:a3:6a:2b:e9:cb:0d:f8:37:8d:8d:73:44:5f:f1:5a:
8c:4a:ab:42:af:9e:0b:97:8f:fe:44:66:ae:15:04:dc:90:dd:
78:8b:04:e0:07:35:76:06:2f:d0:55:b1:f1:95:87:29:04:68:
f8:b4:af:cc:6a:8b:3a:ce:bb:14:88:04:54:11:d5:41:fe:51:
5e:1b:3f:96:39:a8:65:3b:6e:58:08:8f:b5:28:12:bc:18:e2:
d5:29:7e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:18 2025 by rpki-client