Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l6SjicI1Um6nmu9RjEf9bH2chQ8.roa
File: l6SjicI1Um6nmu9RjEf9bH2chQ8.roa (raw, json)
Hash identifier: YnLSUbiVQSnOES7nBuVhNXpVx8dpc9ozvqJS5r3TjUU=
Subject key identifier: 97:A4:A3:89:C2:35:52:6E:A7:9A:EF:51:8C:47:FD:6C:7D:9C:85:0F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01957F71D0433A7848E40B6E8C61E91F5A63
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l6SjicI1Um6nmu9RjEf9bH2chQ8.roa
Signing time: Mon 10 Mar 2025 09:45:20 +0000
ROA not before: Mon 10 Mar 2025 09:45:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:71:d0:43:3a:78:48:e4:0b:6e:8c:61:e9:1f:5a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 10 09:45:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97a4a389c235526ea79aef518c47fd6c7d9c850f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:8e:4f:f4:fd:53:22:2c:48:ea:19:64:73:
f3:9e:fb:b2:fa:eb:92:b3:d9:54:21:cc:8d:14:b5:
8d:f8:52:40:7a:16:80:20:db:a8:3b:9b:9f:b7:42:
e0:6c:b9:3a:25:0d:39:1e:3d:ea:00:93:8d:c5:17:
91:9b:ab:f1:91:ad:9b:d3:01:bc:b2:2e:7b:66:f4:
aa:81:75:e5:8f:d4:d1:5b:7c:3e:c3:04:c8:45:43:
63:ec:c6:ee:7a:4f:f2:96:58:b3:f8:f3:3c:7a:5a:
86:1a:70:64:1a:b4:b4:ff:8c:94:61:57:0a:6a:5d:
96:13:ff:29:3e:40:11:12:5b:6c:c3:ac:de:55:76:
4e:53:53:d1:d8:d5:7f:90:4a:af:a8:22:36:a7:92:
25:3c:98:13:c5:dd:65:7c:88:cb:23:cd:22:2b:4a:
ef:8a:cc:1d:a1:68:7c:96:b1:98:7c:e9:b1:56:63:
86:ff:ea:cb:76:2d:f7:39:8c:15:1f:e9:d9:42:42:
e9:53:fd:3d:4d:c4:6f:a9:14:c2:ff:d8:68:68:82:
45:6d:90:b1:6b:16:8a:80:29:53:c8:bf:a8:a1:e5:
a0:a5:b1:9f:f9:69:48:fb:a1:47:9f:46:37:93:eb:
a4:fa:46:f3:25:57:d4:63:c9:4e:25:b7:0e:c7:e9:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A4:A3:89:C2:35:52:6E:A7:9A:EF:51:8C:47:FD:6C:7D:9C:85:0F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l6SjicI1Um6nmu9RjEf9bH2chQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
94.177.106.0/24
194.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f1:a8:33:7e:02:94:5d:f4:f6:ac:1f:61:59:fb:0d:9f:32:
d6:be:a0:1f:10:5d:22:28:da:47:9a:3d:8e:4a:87:29:ae:04:
05:26:95:59:b5:41:4b:00:28:3d:ae:d3:75:b2:6e:de:bb:e6:
1b:11:ae:78:8f:58:f0:b2:ac:04:9c:1b:2f:fd:ea:1a:ca:e7:
df:41:d6:dc:d1:55:c0:7b:40:4e:82:1e:77:02:f4:08:7d:b0:
0d:76:3c:63:a1:41:e7:95:2c:b6:32:ef:4d:4e:2b:5a:27:c3:
f1:10:f6:1c:ba:fa:a9:2f:97:c5:79:32:1f:03:32:15:f3:31:
ff:c5:44:1d:2a:35:00:f7:67:84:12:e1:2e:eb:4d:75:e4:bd:
5c:11:41:7e:62:a7:fe:5b:c6:80:22:be:5b:e0:23:2b:a9:63:
e9:d9:5b:b9:33:b8:cb:a3:84:58:77:e3:bd:17:a2:1d:85:30:
18:02:1e:b0:d5:76:84:8c:e6:75:d1:56:e8:df:98:19:db:bc:
3e:7a:e9:84:a2:2f:51:d7:70:6f:39:9b:c1:be:06:b0:01:de:
de:bc:21:a2:c7:e0:e7:66:4a:b4:0e:97:4b:2f:9d:ec:0c:36:
5b:4c:b0:fc:f0:88:f4:9b:40:b3:e6:7c:db:be:d9:c0:40:0d:
96:e7:c2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:49:43 2025 by rpki-client