Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/whp8DZaoCFoF2quxRIqKlaYhaOs.roa
File: whp8DZaoCFoF2quxRIqKlaYhaOs.roa (raw, json)
Hash identifier: mKojznG8ybamV+6oPFJrcDMjeXQ3Yy9sXYBBSfsypGM=
Subject key identifier: C2:1A:7C:0D:96:A8:08:5A:05:DA:AB:B1:44:8A:8A:95:A6:21:68:EB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193979F2734110D53C26A65A9A7BC2BCA10
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/whp8DZaoCFoF2quxRIqKlaYhaOs.roa
Signing time: Thu 05 Dec 2024 16:20:10 +0000
ROA not before: Thu 05 Dec 2024 16:20:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Dec 2024 09:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:9f:27:34:11:0d:53:c2:6a:65:a9:a7:bc:2b:ca:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 5 16:20:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c21a7c0d96a8085a05daabb1448a8a95a62168eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:00:64:ec:67:38:d8:e7:40:e8:a2:75:de:
24:5e:c0:70:b7:ed:fc:1a:03:cb:1d:22:1b:e5:51:
61:ed:68:12:e8:e4:1d:42:fb:32:3b:c4:dc:5b:00:
7d:ad:30:4f:b1:9e:10:2b:77:c9:f3:8c:f4:c4:2a:
3c:3f:7f:c9:bd:aa:31:21:22:87:d4:59:ae:a2:62:
36:b2:e6:61:3e:0c:e0:73:94:82:d5:5a:db:bd:c9:
5d:e5:4c:35:41:32:73:f4:63:f7:3d:df:c0:47:d2:
7c:68:4e:0c:cc:58:46:78:75:9f:ce:02:1d:81:69:
50:e0:f8:85:7d:a6:a6:03:9c:27:e9:73:e6:f1:88:
e2:b8:ce:fb:70:e1:1b:df:0d:3c:a4:1a:9e:e9:64:
81:b0:f2:19:02:15:bc:e7:52:4b:29:d2:95:db:c7:
04:b5:90:42:c7:b0:14:e0:b2:35:88:3c:9b:e4:a0:
82:e1:3a:71:7b:1a:f7:b4:60:29:04:39:63:fd:e4:
b4:a7:b4:a5:fd:85:49:34:aa:e9:42:49:3c:ca:57:
b5:8b:4c:79:cf:2e:07:af:8e:a1:0a:c1:52:89:be:
bf:f6:1d:dc:f5:7b:c0:e3:79:cd:b0:58:3d:84:c6:
23:9f:fa:d6:12:41:82:52:20:2a:31:4f:75:c9:04:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:7C:0D:96:A8:08:5A:05:DA:AB:B1:44:8A:8A:95:A6:21:68:EB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/whp8DZaoCFoF2quxRIqKlaYhaOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
188.213.0.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f2:c1:ce:9d:2a:ec:40:6c:6d:66:43:93:07:8e:67:53:05:
3c:a3:46:65:11:af:43:c3:03:51:2e:b0:46:07:a0:11:39:e9:
de:26:a2:cc:16:57:18:98:aa:23:46:44:8f:99:2a:a1:d9:04:
46:73:3e:24:e5:d3:b2:92:75:fb:cc:b4:8c:b1:ac:77:48:6b:
ac:00:d8:d4:52:c3:dd:c3:7d:e0:3a:3b:41:89:9c:5d:53:f1:
ba:c2:df:ce:15:d7:c0:11:c6:93:9d:3e:1e:36:99:72:d0:e7:
f7:f4:09:b7:3d:9a:aa:c1:3d:74:60:ac:bb:2a:3d:69:ce:9e:
af:5d:6a:d4:9d:01:bc:53:06:99:24:68:98:7a:3b:d1:12:22:
d3:23:15:44:69:62:3a:31:fb:16:73:fb:f9:96:84:08:3c:87:
e6:d3:85:58:f8:cb:d6:41:76:69:56:f3:fd:9c:47:f9:76:c8:
c7:0f:03:88:19:68:4d:21:87:0b:cd:df:64:39:9d:e7:1d:10:
53:72:fe:a9:47:be:15:ec:e3:dc:0b:93:0e:b7:38:30:d1:21:
cb:e4:56:f0:50:22:6a:22:a7:5b:fd:e9:32:db:46:b3:49:d0:
9c:f7:ef:f7:78:1e:05:e1:30:ac:7d:52:3a:55:8e:49:24:d0:
8d:4b:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:43 2025 by rpki-client