Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tg-Cx5DK8emR2J13wRaaebt8XyM.roa
File: tg-Cx5DK8emR2J13wRaaebt8XyM.roa (raw, json)
Hash identifier: 7Ju2mC/rO+FlK+yRAP68cBYzcpe27wEZ2+oG7F/BS5g=
Subject key identifier: B6:0F:82:C7:90:CA:F1:E9:91:D8:9D:77:C1:16:9A:79:BB:7C:5F:23
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01935E077FD3E1D2CCA306A92C02E5131A61
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tg-Cx5DK8emR2J13wRaaebt8XyM.roa
Signing time: Sun 24 Nov 2024 11:56:10 +0000
ROA not before: Sun 24 Nov 2024 11:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.87.121.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Nov 2024 20:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5e:07:7f:d3:e1:d2:cc:a3:06:a9:2c:02:e5:13:1a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 24 11:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b60f82c790caf1e991d89d77c1169a79bb7c5f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:27:28:7d:67:9d:d3:95:f5:39:57:98:ef:
6e:52:50:42:96:b3:2a:5f:60:18:73:6c:0f:73:d4:
2c:5f:87:20:88:71:d2:3c:60:50:6f:71:67:22:d7:
dc:94:23:28:af:6c:e7:e0:1f:52:97:1e:3a:f8:08:
06:57:20:69:a7:9b:f9:e5:c3:f2:85:b3:a3:85:78:
01:9c:10:08:41:55:cd:85:c5:35:a1:ae:ab:93:84:
09:75:95:aa:dd:e0:c6:48:43:57:2e:04:97:67:53:
18:7f:49:60:81:b1:4f:de:f7:e0:10:4d:bd:c2:2d:
aa:1d:5c:f9:03:02:b5:1a:5f:8e:ed:a3:d6:1c:74:
fe:28:83:7a:cf:85:d0:e6:58:8f:6a:bd:43:b6:67:
ae:c3:32:4e:87:e6:26:73:b9:86:5a:a9:37:a7:be:
98:18:89:20:3c:a8:17:0a:22:5d:38:83:0e:04:31:
31:8d:3a:36:a5:24:b5:f5:c8:b0:ca:af:28:4a:4e:
2d:2f:b3:85:e8:50:52:ed:bb:d1:36:67:45:23:15:
01:76:fa:97:1f:ed:8d:6c:21:89:5a:19:ee:52:dd:
71:26:6e:cd:15:7f:bb:79:5f:56:fd:25:bd:cb:20:
d0:00:f9:f1:aa:96:64:8b:ef:81:53:13:aa:f8:96:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0F:82:C7:90:CA:F1:E9:91:D8:9D:77:C1:16:9A:79:BB:7C:5F:23
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tg-Cx5DK8emR2J13wRaaebt8XyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.121.0/24
45.135.182.0/23
89.34.106.0/24
89.34.219.0/24
93.114.183.0/24
185.198.235.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:12:61:71:c1:37:66:e7:92:75:7c:34:8d:1d:0d:17:b0:e7:
d7:2e:57:a7:3b:7f:10:2a:aa:f8:fb:ec:61:a2:4e:8e:ee:2b:
93:3c:d5:78:fb:56:81:69:90:76:ba:64:61:f9:52:e3:99:f5:
1b:2a:15:e9:b3:74:5f:37:e5:96:89:0d:48:fa:20:dc:47:2b:
c0:e6:48:d8:2d:d4:1b:96:ca:f0:e0:77:db:d5:72:e0:d9:b9:
5d:09:79:c9:3b:83:96:83:da:8b:9c:d3:56:ee:a3:e8:e7:76:
b8:9f:18:87:24:38:04:c4:70:3d:c6:9e:4b:7d:ec:4b:0c:d4:
0f:a1:7f:57:66:9f:6a:77:45:bf:7d:20:fc:b6:60:ac:49:40:
06:f4:d9:a1:1a:48:35:4d:0e:77:e2:37:dc:1e:9f:f6:35:01:
66:c9:cc:61:c7:eb:cf:e9:88:aa:d4:49:9e:70:ab:98:9b:3e:
01:29:30:a3:d4:e9:28:bd:3a:06:70:58:ff:3b:79:d9:ab:15:
5d:53:55:ff:90:c1:53:a6:9d:98:b6:65:de:dd:a1:73:57:1c:
ab:e7:f7:b6:2f:c8:02:9f:4e:a3:de:a8:48:ca:88:2c:78:e3:
91:f8:1f:7c:dd:7a:33:27:15:41:54:ff:29:a8:74:3f:cf:41:
bc:88:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:46 2025 by rpki-client