Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ce3Jc0GbauDe_Hd1b6CWwXERDPg.roa
File: Ce3Jc0GbauDe_Hd1b6CWwXERDPg.roa (raw, json)
Hash identifier: 2YdmWGBJu6qaHdLan2eALuyje7ylqSgCLosV8Mfk6vU=
Subject key identifier: 09:ED:C9:73:41:9B:6A:E0:DE:FC:77:75:6F:A0:96:C1:71:11:0C:F8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194E5CBB83CB3F122717A937CB4DD82A75E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ce3Jc0GbauDe_Hd1b6CWwXERDPg.roa
Signing time: Sat 08 Feb 2025 13:42:00 +0000
ROA not before: Sat 08 Feb 2025 13:42:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 08:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e5:cb:b8:3c:b3:f1:22:71:7a:93:7c:b4:dd:82:a7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 8 13:42:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09edc973419b6ae0defc77756fa096c171110cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:b7:ee:f5:19:e7:c4:2d:5f:66:90:8f:c1:
c6:78:03:84:5d:8c:ab:9e:81:79:3e:5d:52:9e:14:
b9:29:f6:31:36:f2:a1:43:70:d3:dd:16:31:c7:32:
ef:1a:99:66:05:5c:62:bd:a4:26:96:25:06:f9:2f:
ff:1d:bd:7e:db:b0:e5:f1:31:67:7d:4d:f2:de:29:
da:f1:28:35:c3:8d:82:f2:08:a5:e9:9c:11:f3:22:
ab:e5:9f:c1:8f:d8:13:13:67:ab:6a:a1:c7:40:db:
8c:64:c8:aa:3c:cb:b8:6f:a4:8e:3a:fc:2c:73:df:
28:07:d5:35:17:99:58:fa:bf:aa:95:50:2c:73:ae:
de:e0:0f:eb:db:30:ac:a9:cd:6f:07:63:94:b7:6b:
d6:c3:ec:25:0d:5f:e5:f4:4f:11:7d:59:a3:a4:98:
a9:e7:99:c9:0a:cd:d5:bd:ce:2e:32:69:51:b4:b2:
6b:7a:8e:15:30:1a:1a:ed:df:2d:42:42:ac:15:d9:
cf:ac:78:c5:df:60:8f:a8:b0:62:b0:e9:75:52:c7:
dc:20:ed:3d:05:c1:99:9e:6f:e7:4a:02:35:1b:29:
89:e5:3e:f3:cf:cc:47:dc:4b:b7:27:cf:72:d3:78:
48:8d:0c:65:b8:88:42:ee:a4:ee:a0:c7:91:41:e6:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:ED:C9:73:41:9B:6A:E0:DE:FC:77:75:6F:A0:96:C1:71:11:0C:F8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ce3Jc0GbauDe_Hd1b6CWwXERDPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.254.66.0/24
193.124.36.0/24
195.133.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c4:2c:bc:44:6b:77:8a:3e:92:a2:78:65:ad:1c:52:74:c6:
b2:4f:e9:49:19:a1:28:69:7b:84:64:df:77:08:5e:55:74:e6:
06:d6:7e:7c:21:a8:ea:44:50:9b:fc:97:8b:21:b0:cf:04:b0:
3b:12:d6:d5:e8:c8:67:f6:ef:b4:e9:70:95:bc:d5:e1:85:99:
79:30:50:e0:51:da:42:a6:32:10:cf:d9:cd:89:fe:9e:8a:47:
18:37:34:53:90:90:3a:12:6d:d5:7a:c8:f0:6d:ec:5d:cb:17:
ca:30:78:e6:d7:b3:f4:eb:08:cf:b6:1f:14:15:48:7b:45:c7:
c1:8a:24:9e:b2:e2:c2:89:56:af:ce:1d:6b:f2:86:20:2d:7f:
27:41:2a:02:60:dc:f1:4b:a2:6d:5a:ee:f1:47:3a:42:f4:01:
22:b5:a2:ef:87:19:90:b9:c3:b8:e8:ec:c6:77:49:06:5d:40:
6d:01:a3:6a:3f:5b:2d:b8:75:b6:17:7d:a4:3b:a8:30:2c:65:
f0:f6:ac:92:92:0e:d9:05:12:f8:f5:74:5c:ac:73:2b:a1:f2:
f8:67:0a:ce:13:71:80:a1:d2:99:fd:a5:7a:38:a9:7b:83:d0:
7a:9b:98:d0:9d:cb:00:f5:81:b3:39:e1:ec:e9:1c:be:ff:cd:
0a:46:be:93
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZTly7g8s/EicXqTfLTdgqdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMjA4MTM0MjAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWVkYzk3MzQxOWI2YWUwZGVmYzc3NzU2ZmEwOTZjMTcxMTEwY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm637vUZ58QtX2aQj8HGeAOEXYyr
noF5Pl1SnhS5KfYxNvKhQ3DT3RYxxzLvGplmBVxivaQmliUG+S//Hb1+27Dl8TFn
fU3y3ina8Sg1w42C8gil6ZwR8yKr5Z/Bj9gTE2eraqHHQNuMZMiqPMu4b6SOOvws
c98oB9U1F5lY+r+qlVAsc67e4A/r2zCsqc1vB2OUt2vWw+wlDV/l9E8RfVmjpJip
55nJCs3Vvc4uMmlRtLJreo4VMBoa7d8tQkKsFdnPrHjF32CPqLBisOl1UsfcIO09
BcGZnm/nSgI1GymJ5T7zz8xH3Eu3J89y03hIjQxluIhC7qTuoMeRQea1oQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFAntyXNBm2rg3vx3dW+glsFxEQz4MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvQ2UzSmMwR2JhdURlX0hkMWI2Q1d3WEVSRFBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBLYe2AwQA
WSJqAwQAXXK3AwQAuf5CAwQAwXwkAwQAw4XBMA0GCSqGSIb3DQEBCwUAA4IBAQBq
xCy8RGt3ij6SonhlrRxSdMayT+lJGaEoaXuEZN93CF5VdOYG1n58IajqRFCb/JeL
IbDPBLA7EtbV6Mhn9u+06XCVvNXhhZl5MFDgUdpCpjIQz9nNif6eikcYNzRTkJA6
Em3VesjwbexdyxfKMHjm17P06wjPth8UFUh7RcfBiiSesuLCiVavzh1r8oYgLX8n
QSoCYNzxS6JtWu7xRzpC9AEitaLvhxmQucO46OzGd0kGXUBtAaNqP1stuHW2F32k
O6gwLGXw9qySkg7ZBRL49XRcrHMrofL4ZwrOE3GAodKZ/aV6OKl7g9B6m5jQncsA
9YGzOeHs6Ry+/80KRr6T
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:49 2025 by rpki-client