Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/9Dsmzt2zNi9KdW4uTtcz6G__35Q.roa
File: 9Dsmzt2zNi9KdW4uTtcz6G__35Q.roa (raw, json)
Hash identifier: kUy653Gaol1yDxudOeGA3ueawiGEWNIX/0idIgIOzz4=
Subject key identifier: F4:3B:26:CE:DD:B3:36:2F:4A:75:6E:2E:4E:D7:33:E8:6F:FF:DF:94
Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial: 0193B1B273716147DF794915904B3CF388E8
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/9Dsmzt2zNi9KdW4uTtcz6G__35Q.roa
Signing time: Tue 10 Dec 2024 17:51:22 +0000
ROA not before: Tue 10 Dec 2024 17:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24904
IP address blocks: 45.87.180.0/22 maxlen: 24
45.128.40.0/22 maxlen: 24
94.103.120.0/22 maxlen: 24
185.97.101.0/24 maxlen: 24
185.97.102.0/24 maxlen: 24
185.97.103.0/24 maxlen: 24
185.210.108.0/22 maxlen: 24
185.212.212.0/22 maxlen: 24
194.110.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b1:b2:73:71:61:47:df:79:49:15:90:4b:3c:f3:88:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7401e0249418b357547268824f6244925d8db39
Validity
Not Before: Dec 10 17:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f43b26ceddb3362f4a756e2e4ed733e86fffdf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2b:97:02:4d:1b:5c:35:91:9c:fe:87:d1:95:
7c:69:03:5b:b4:d1:8f:d4:c1:ff:60:62:cd:0f:80:
3d:0c:e7:21:39:fb:f9:2b:d7:fc:e0:fc:26:49:62:
81:41:9e:a1:8e:b0:1b:fe:5f:2a:9a:c2:ba:09:0e:
04:86:ff:ca:c0:49:8c:29:f7:e3:96:b7:d8:88:30:
91:44:e2:b2:e6:58:1b:0b:2e:08:fa:82:48:42:64:
e7:75:90:b9:d1:e4:7d:98:7d:b6:d7:9a:cb:50:ad:
1a:1c:ae:56:53:e4:01:e8:95:ea:e8:8e:a3:6c:3e:
9b:5d:c2:63:54:d5:02:3c:af:82:be:01:4c:c6:0f:
eb:a3:18:dc:7e:c0:a1:90:56:e1:b8:47:0d:14:d3:
d1:4b:b6:8c:03:30:ff:9e:ac:90:13:af:58:12:07:
54:0b:ea:5b:3a:7e:fa:21:94:ab:c2:17:93:6a:a2:
c5:df:20:08:1f:17:7e:d8:c5:20:d0:33:32:a2:d0:
c5:5f:50:10:b6:66:ff:5b:52:48:32:a3:17:1a:f6:
10:bd:6c:9c:31:d8:b5:19:50:6a:dd:d3:ff:80:45:
98:9f:93:d9:62:ed:f1:01:49:f3:df:36:a8:96:51:
4a:4c:a0:ab:b6:bb:40:c4:8e:76:1a:70:d5:3d:20:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3B:26:CE:DD:B3:36:2F:4A:75:6E:2E:4E:D7:33:E8:6F:FF:DF:94
X509v3 Authority Key Identifier:
keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/9Dsmzt2zNi9KdW4uTtcz6G__35Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.180.0/22
45.128.40.0/22
94.103.120.0/22
185.97.101.0-185.97.103.255
185.210.108.0/22
185.212.212.0/22
194.110.120.0/22
Signature Algorithm: sha256WithRSAEncryption
20:e3:50:72:fa:ce:8a:34:a1:14:b7:7e:01:9c:e6:a2:72:02:
e1:80:b5:34:26:fc:7b:5d:96:40:37:91:61:5a:47:0a:a3:ab:
40:41:3c:8c:a9:b8:6f:c2:31:b6:13:7e:38:d1:06:e3:57:6a:
0c:3f:f1:ea:ab:1d:79:de:10:76:70:49:59:a3:aa:76:82:d4:
0d:8f:96:bb:d6:84:3f:3c:3b:1e:be:ed:29:43:91:17:4e:da:
d3:0a:80:a4:83:ca:d8:b7:df:29:6a:ee:0d:0e:48:24:9b:fc:
9a:0b:0e:f2:13:ca:94:5d:2b:5d:5c:0b:1f:27:52:02:45:ad:
a2:78:44:5b:a7:e6:7f:39:20:de:15:35:d1:74:19:18:89:e7:
f7:de:1d:07:7e:86:09:06:cf:4e:a7:8d:c4:16:56:5d:85:e1:
32:a5:f3:b6:b0:50:cc:81:36:18:65:96:48:19:0d:50:dd:e2:
5d:7f:f5:af:58:55:e6:43:5e:90:58:d5:4c:4f:1a:15:54:24:
ac:4f:ec:70:70:d6:07:c4:da:0e:fb:b9:e0:89:5b:a7:ca:e4:
5b:77:5b:4e:42:cb:49:e7:b3:e8:6f:0b:30:ba:4d:4c:93:d9:
31:07:a5:81:c3:b0:f6:f9:b7:cc:b5:e4:c7:30:1f:16:81:a2:
f8:57:97:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:23:07 2025 by rpki-client