Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/tuHr99S0mGv4fZbphkUk80XuRMU.roa
File: tuHr99S0mGv4fZbphkUk80XuRMU.roa (raw, json)
Hash identifier: 4EzPDemloRjt6OcAO93E5BxjS3DkXnzxh42jK7cJI3Y=
Subject key identifier: B6:E1:EB:F7:D4:B4:98:6B:F8:7D:96:E9:86:45:24:F3:45:EE:44:C5
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019406F492686CD9F6BCA90849A7B5F13427
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/tuHr99S0mGv4fZbphkUk80XuRMU.roa
Signing time: Fri 27 Dec 2024 07:11:19 +0000
ROA not before: Fri 27 Dec 2024 07:11:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.84.216.0/24 maxlen: 24
45.85.90.0/24 maxlen: 24
45.91.23.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
45.130.143.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
45.148.25.0/24 maxlen: 24
45.157.98.0/24 maxlen: 24
45.157.99.0/24 maxlen: 24
136.144.26.0/24 maxlen: 24
136.144.27.0/24 maxlen: 24
185.227.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:f4:92:68:6c:d9:f6:bc:a9:08:49:a7:b5:f1:34:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Dec 27 07:11:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6e1ebf7d4b4986bf87d96e9864524f345ee44c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:8b:7b:9d:b9:38:a7:ba:3d:59:49:96:d6:
10:6a:9c:1e:86:bd:cc:12:5f:63:fc:38:96:74:a3:
78:31:04:9f:6a:1f:a1:e4:75:41:8d:44:4a:c0:58:
7e:f4:e0:a3:b0:2f:f9:f6:c1:c6:50:42:2e:eb:a0:
4a:b7:3f:c4:59:6c:30:ff:87:0d:a0:af:bd:4a:82:
f9:9a:b7:07:cc:91:c1:ef:9b:e8:7a:32:88:15:b1:
6e:b1:48:66:68:f3:bc:62:1e:c6:81:bd:b4:dd:73:
d7:31:06:e3:ce:44:31:fe:1f:a1:ec:4a:c2:af:49:
51:f6:c4:37:97:ce:ce:9d:6e:84:84:14:2c:c8:1e:
5a:45:de:6f:53:ba:f1:87:a4:b7:be:66:7a:be:e8:
ae:60:7e:7d:b8:25:fd:7c:f3:f8:40:1b:1a:d8:14:
bb:0d:8f:b0:cf:42:45:6f:7e:83:19:e4:6a:71:fe:
58:41:cb:9b:fc:13:f7:39:5b:f0:e4:65:a3:9b:58:
06:95:eb:b9:b3:f2:fa:3e:92:bd:73:9d:20:3c:20:
5a:2b:bf:2d:73:0d:cf:17:08:0d:e1:81:c8:f2:0c:
4e:d3:75:d6:51:e4:7a:b5:24:5e:5b:01:83:d9:e2:
45:eb:c4:14:7b:36:e0:b9:3e:e9:e0:d1:a0:17:5a:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E1:EB:F7:D4:B4:98:6B:F8:7D:96:E9:86:45:24:F3:45:EE:44:C5
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/tuHr99S0mGv4fZbphkUk80XuRMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.85.90.0/24
45.91.23.0/24
45.95.243.0/24
45.130.143.0/24
45.146.53.0/24
45.148.25.0/24
45.157.98.0/23
136.144.26.0/23
185.227.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c6:fb:56:64:14:48:74:26:6f:56:9a:f5:83:71:fd:76:99:
65:1c:56:32:87:04:b1:87:be:b4:d2:28:42:fe:c4:1f:c7:fa:
0e:05:4a:b5:2d:db:b2:3b:71:a4:13:42:e4:61:95:b7:f5:aa:
79:50:a4:4e:9b:bc:19:3c:32:27:90:8f:55:20:5b:a6:f9:1d:
d4:f7:9a:0d:83:b8:3d:5c:d4:d2:09:0e:c3:ec:3e:f3:1f:c6:
92:73:79:d6:12:24:84:ac:2a:69:67:1c:b1:01:da:3a:f0:ce:
e5:d0:39:60:b5:a3:74:f9:00:9d:78:34:bc:94:5c:58:f9:78:
64:00:96:f2:35:4f:41:10:e3:25:75:82:ff:7c:81:a6:44:28:
f5:66:60:e5:30:1e:81:ac:5c:52:fe:c0:de:6d:92:6b:f8:bf:
40:b9:aa:3b:0a:13:9d:a2:4c:3b:f0:2f:bc:69:ec:49:40:65:
c7:fa:4c:37:2d:b0:1c:f9:40:86:c2:18:2d:cc:a5:02:91:9b:
30:36:c9:6f:ef:c7:bd:f7:00:47:4c:81:89:3f:c0:e0:17:df:
25:bf:61:96:76:8c:20:62:46:54:f5:f3:52:e9:5e:b8:89:9e:
10:bd:17:42:33:69:c0:92:23:f9:a7:bb:fd:f6:ef:dc:b2:e4:
0f:f1:60:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:04:29 2025 by rpki-client