Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yggtS8NRRBonkwNfSpsGh_A-xW4.roa
File: yggtS8NRRBonkwNfSpsGh_A-xW4.roa (raw, json)
Hash identifier: VcdjREOv8Mj3J2KR8tZnLGkKA38PBoaWbYQn2AgKJ8Y=
Subject key identifier: CA:08:2D:4B:C3:51:44:1A:27:93:03:5F:4A:9B:06:87:F0:3E:C5:6E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019504CF32F91CD75105B565053218D40E93
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yggtS8NRRBonkwNfSpsGh_A-xW4.roa
Signing time: Fri 14 Feb 2025 14:14:02 +0000
ROA not before: Fri 14 Feb 2025 14:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 13:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:cf:32:f9:1c:d7:51:05:b5:65:05:32:18:d4:0e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 14 14:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca082d4bc351441a2793035f4a9b0687f03ec56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:b7:69:21:ee:8f:32:7e:cd:a4:e4:a1:89:
a9:bd:36:10:3f:49:03:00:ab:b8:1a:c7:4e:ed:c4:
60:ba:f6:3c:ff:d3:dc:54:f3:9e:05:12:75:a6:1c:
41:3b:f9:a2:4a:d6:b2:b6:9a:14:fd:e6:ab:4d:06:
83:0b:4c:36:79:6d:ab:04:0b:d0:76:cb:92:aa:a8:
43:cc:cf:1c:37:3f:f0:be:67:f9:61:b8:0b:b4:fd:
be:2f:13:c8:1b:32:cd:d2:c5:0b:49:3c:c6:d1:2d:
ae:df:b4:a3:51:99:90:7b:32:c1:9f:12:07:55:10:
ac:7d:07:e4:82:26:03:76:fb:4e:26:55:54:04:02:
a2:63:ac:70:b5:0e:14:a9:03:34:c9:b2:dd:3f:66:
b1:f6:eb:54:cf:b9:02:5f:67:6e:ab:4a:a1:46:bc:
25:7d:7d:d5:6b:0e:03:e3:93:79:92:02:b8:81:69:
73:c0:95:6c:c2:95:6d:d2:35:d3:99:0a:6b:a2:a3:
97:99:a0:0b:55:6c:04:38:ae:31:e9:ad:40:5b:fd:
db:11:34:bd:33:18:99:4c:c0:4b:30:95:27:3f:d7:
44:5d:fd:76:5d:a9:04:3a:76:7b:ee:5f:7d:26:ec:
00:cb:54:3a:66:28:48:c5:89:a3:68:b1:7b:81:3e:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:08:2D:4B:C3:51:44:1A:27:93:03:5F:4A:9B:06:87:F0:3E:C5:6E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yggtS8NRRBonkwNfSpsGh_A-xW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
188.212.121.0/24
212.192.21.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8c:50:32:0e:e4:cb:39:50:c2:4f:fe:47:70:df:42:89:82:
cd:a2:b8:07:c1:b6:83:0e:08:07:c0:ff:5e:ee:75:1e:28:cb:
36:0d:1e:2e:9e:60:c0:16:23:38:da:e9:2a:ad:12:64:e1:31:
47:f5:62:b8:44:cc:be:db:0c:4f:13:9e:8e:2e:31:0a:3f:49:
df:04:5d:7e:3f:14:39:da:84:f8:9e:7c:2e:70:21:14:70:48:
0b:89:23:d2:8d:8f:4f:1a:5b:b4:bc:17:62:d7:e7:fd:1e:bc:
6b:07:1c:86:73:a5:5c:1a:7f:3e:d8:e7:1b:ad:7a:0a:06:63:
44:6e:19:8a:41:f9:c4:91:70:fe:08:57:e6:3f:84:03:af:1b:
2d:cf:a5:37:04:a9:48:b2:c0:ee:f5:45:f7:ee:25:ce:9c:60:
26:b5:05:45:a3:02:27:dd:15:36:5e:5c:69:b3:9c:eb:66:4c:
31:54:e8:77:d5:7a:6f:fe:89:f7:fb:cf:f7:15:83:74:26:2d:
4f:af:c2:63:ac:cb:3f:0d:8e:6c:52:4c:f9:7b:ee:57:9b:c1:
ba:2f:ad:4f:45:4a:76:af:0f:e1:c2:aa:3f:32:c1:34:df:1e:
51:dd:84:de:c4:aa:cf:3f:ca:ac:17:9d:01:cc:80:b0:22:07:
ea:2c:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:11 2025 by rpki-client