Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t5Lnh0dswD0Rl69BlPnz9wbrreg.roa
File: t5Lnh0dswD0Rl69BlPnz9wbrreg.roa (raw, json)
Hash identifier: q0y1HA+EfHi2sEU3Z1LOf3HUZD6mVEbzWvlqCoRKuXI=
Subject key identifier: B7:92:E7:87:47:6C:C0:3D:11:97:AF:41:94:F9:F3:F7:06:EB:AD:E8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194F8FB8E2621A879E261961285807984F4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t5Lnh0dswD0Rl69BlPnz9wbrreg.roa
Signing time: Wed 12 Feb 2025 07:07:02 +0000
ROA not before: Wed 12 Feb 2025 07:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 05:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f8:fb:8e:26:21:a8:79:e2:61:96:12:85:80:79:84:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 12 07:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b792e787476cc03d1197af4194f9f3f706ebade8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:54:0e:17:94:81:65:c0:53:00:5d:76:71:
a3:02:00:65:ed:f9:63:f1:d6:72:97:91:a1:df:7f:
98:1e:e5:58:6b:7a:6d:80:b5:9b:d5:9b:0d:bc:8e:
d6:cf:76:c9:69:57:56:7a:0d:3c:57:73:e8:54:de:
17:9a:33:d7:b6:7c:67:6a:2e:7f:8d:1d:1e:96:06:
96:9c:bf:e0:02:a1:25:22:77:d4:d2:de:66:47:88:
1d:b4:94:4a:a2:d1:8f:a7:d0:30:51:e2:7c:9e:1b:
64:d9:3a:d0:9d:04:c2:39:f2:9b:01:10:35:fa:33:
43:a3:5a:dd:a8:0a:6f:48:3c:4f:3d:bf:19:de:08:
9d:1e:aa:a1:07:e4:e4:9a:74:5a:31:0e:69:0f:22:
92:98:4d:ce:c0:48:82:e2:1f:4d:e3:43:b1:5e:e7:
73:12:21:e3:93:f7:45:ea:04:75:b2:5b:a7:10:dd:
4a:36:63:44:15:82:4e:73:69:85:41:6d:9f:82:a8:
29:08:a4:51:e3:7b:a8:cb:d2:1d:3b:ea:65:22:c1:
4f:88:8f:4b:10:73:ab:7a:e2:7c:24:60:5e:29:36:
fc:ff:08:08:d3:29:e4:1b:fa:d0:02:f1:b8:e5:b3:
11:c4:b9:31:51:94:f6:b2:76:bc:4a:dc:54:2b:7f:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:E7:87:47:6C:C0:3D:11:97:AF:41:94:F9:F3:F7:06:EB:AD:E8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t5Lnh0dswD0Rl69BlPnz9wbrreg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.254.66.0/24
193.124.36.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0d:7c:fd:04:51:57:50:66:a0:5a:f8:09:0f:70:77:e9:67:
e2:39:db:31:e1:d3:22:66:48:1f:0b:8f:9f:e2:c1:02:cb:e2:
9f:29:9b:08:d8:98:7f:61:fd:11:82:56:be:d6:6d:db:76:4c:
0b:22:3d:86:07:4b:8d:20:b4:c6:c6:ab:8a:40:67:f4:71:d0:
8f:a0:ef:b9:b4:f0:44:26:84:85:c3:b9:f3:f7:76:b2:70:26:
10:f7:03:4c:40:0a:4c:8c:26:2f:9d:71:ca:0c:a2:31:b9:65:
af:ed:92:14:03:f4:78:d2:f5:fb:24:97:21:53:24:9c:64:f6:
d0:07:1a:53:fc:f6:3a:97:b1:1a:24:74:1a:98:f2:31:e0:17:
86:e5:0a:ff:c9:ef:6b:e9:4d:a0:6a:9d:e7:40:91:50:a0:30:
52:e9:39:ed:64:71:8e:ea:09:0e:85:f0:60:f5:a2:6b:45:cb:
4f:3e:9a:af:3e:e0:75:25:8f:be:ca:4c:0c:4e:69:7c:43:91:
85:94:2b:c6:74:40:87:b1:8b:ff:14:d8:8c:1f:66:a3:23:38:
3b:22:f7:49:4a:0b:33:53:cc:87:ba:b4:17:64:d8:0a:89:49:
e9:28:3d:8c:3c:39:1e:8a:9f:63:98:75:d1:83:06:5b:94:d1:
10:4b:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:11:50 2025 by rpki-client