Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/f4JVwAD_zj3RC-uY6SMwQYUciq0.roa
File: f4JVwAD_zj3RC-uY6SMwQYUciq0.roa (raw, json)
Hash identifier: j6/KkvHhdzlailGshb5ybtjpcVLsQi61PGkcvq0miJw=
Subject key identifier: 7F:82:55:C0:00:FF:CE:3D:D1:0B:EB:98:E9:23:30:41:85:1C:8A:AD
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 01934DFB882900F8CF561CBC6BCF3D067BE8
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/f4JVwAD_zj3RC-uY6SMwQYUciq0.roa
Signing time: Thu 21 Nov 2024 09:09:10 +0000
ROA not before: Thu 21 Nov 2024 09:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43372
IP address blocks: 45.158.4.0/23 maxlen: 23
45.158.6.0/23 maxlen: 23
185.186.152.0/23 maxlen: 23
185.186.154.0/23 maxlen: 23
185.236.96.0/23 maxlen: 23
185.236.98.0/23 maxlen: 23
185.236.108.0/23 maxlen: 23
185.236.110.0/23 maxlen: 23
2a0b:7e80::/29 maxlen: 29
2a0b:7e80:0:100::/56 maxlen: 56
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:fb:88:29:00:f8:cf:56:1c:bc:6b:cf:3d:06:7b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Nov 21 09:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f8255c000ffce3dd10beb98e9233041851c8aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1f:74:35:03:1b:ac:af:a9:91:41:fd:78:d1:
dd:10:7b:83:25:0f:1e:ba:fd:d8:fd:ee:64:bf:33:
e0:97:29:65:68:6b:bb:12:de:a6:8d:8b:ba:f9:9d:
84:91:95:eb:cc:7d:d7:dc:19:b9:52:d0:bd:ed:b5:
b9:e3:f0:43:6a:73:cb:82:df:fd:a2:0a:cb:f5:fa:
b6:ce:70:13:56:29:ca:b1:45:90:bd:29:4f:c5:45:
e8:e5:11:94:82:82:05:71:00:91:9a:34:ba:fc:2d:
26:f5:20:2f:12:7e:44:c1:e4:35:34:1f:81:66:fe:
e0:8d:ea:97:1e:5e:da:85:11:76:20:aa:79:0b:e9:
4f:6d:09:08:91:fc:2d:98:8d:80:4c:f3:89:ef:df:
a0:ab:9d:4d:64:24:25:94:91:5f:b5:0a:29:b2:a2:
df:23:44:c0:21:61:34:02:3f:3f:18:6a:e1:df:3a:
72:28:6d:5e:10:f6:6e:90:bd:c6:e9:3a:28:49:5a:
b2:ff:ab:a6:f4:cb:94:d4:f6:67:28:c0:9f:77:e2:
30:38:b3:1f:af:40:d2:6b:ea:92:9f:8a:ee:63:69:
8c:69:bf:74:d2:12:b1:1b:9d:c3:79:bb:f4:17:be:
13:ea:89:93:e9:b4:3d:0e:2d:bc:70:f5:37:e2:ca:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:82:55:C0:00:FF:CE:3D:D1:0B:EB:98:E9:23:30:41:85:1C:8A:AD
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/f4JVwAD_zj3RC-uY6SMwQYUciq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.4.0/22
185.186.152.0/22
185.236.96.0/22
185.236.108.0/22
IPv6:
2a0b:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
6d:5c:56:e6:27:33:05:ad:ab:f6:38:c3:26:dd:3a:2a:78:d5:
1f:89:da:bf:31:d6:39:6d:bd:20:02:1e:0e:01:e0:c8:e9:bb:
68:0f:e7:3d:4f:37:0c:76:6b:7c:cc:65:a0:80:5d:5a:99:eb:
ae:60:e3:e6:4e:0c:3d:19:41:65:77:b2:89:2e:9d:3f:29:be:
2a:6b:d2:cf:6c:19:2d:fd:f1:99:cb:af:1c:3d:18:7c:78:ff:
23:08:55:40:70:a6:c2:b0:d4:11:3d:a8:83:08:cf:5b:03:0e:
45:12:70:4d:73:c9:cb:41:c9:8e:70:0f:f7:11:48:d0:e6:62:
2e:8d:2f:ef:59:00:03:e5:63:a7:24:f0:12:b7:f7:0a:43:ff:
15:79:8d:cb:d4:9b:36:8e:13:62:5c:ea:c3:49:8d:9b:b6:29:
0b:87:41:cf:df:2c:d2:1b:da:8f:31:32:01:4e:80:ec:af:2b:
8a:0b:f5:5c:cf:12:9c:44:97:ba:fc:c2:94:25:a2:3d:a8:bd:
ea:cb:ca:ab:68:c8:9f:28:d2:36:64:7f:0d:67:80:95:3f:d4:
0a:15:51:f7:c2:ab:e8:35:69:cf:88:54:28:28:8d:e9:73:84:
0b:de:0d:e4:2d:29:1b:79:60:e2:a3:87:38:48:2a:61:72:64:
f1:1a:dd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:37 2025 by rpki-client