Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/oRqkjkKH5Kctm_X_LctQRsCqaBM.roa
File: oRqkjkKH5Kctm_X_LctQRsCqaBM.roa (raw, json)
Hash identifier: sSLW8UrM8FBAyJAu5AsNYd8WRTsG6w3+I712/clkrks=
Subject key identifier: A1:1A:A4:8E:42:87:E4:A7:2D:9B:F5:FF:2D:CB:50:46:C0:AA:68:13
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 0194221F9B1CC32F9D95A9098C40BCBE4885
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/oRqkjkKH5Kctm_X_LctQRsCqaBM.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5398
IP address blocks: 45.90.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 14 Jan 2025 09:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9b:1c:c3:2f:9d:95:a9:09:8c:40:bc:be:48:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a11aa48e4287e4a72d9bf5ff2dcb5046c0aa6813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:f2:8d:16:5a:b5:44:2d:dc:1e:ed:10:19:
84:71:0c:8d:f5:41:b5:6b:65:a8:b5:a3:11:d4:06:
eb:36:a3:53:5a:7f:26:a6:72:93:3d:4d:06:23:07:
06:45:31:bb:12:66:f4:49:8d:77:57:1a:86:6d:2b:
f2:94:88:36:42:d5:34:bb:81:68:e2:1c:2c:79:3c:
f8:0c:37:17:27:87:d6:ee:3b:43:35:bf:64:a7:ee:
7b:9a:59:67:6e:e6:e2:a6:75:99:7f:73:91:7b:0a:
35:09:2c:d2:01:ce:0b:ab:3f:4e:5b:61:57:f9:92:
84:f5:75:1e:6d:14:68:8a:d1:d4:00:fa:6c:36:a0:
47:f4:e9:42:02:e0:cc:3f:15:79:e0:4b:fc:01:fe:
fc:da:3e:5b:ba:77:8b:df:ab:19:47:f3:50:19:34:
cb:1d:28:30:b4:9f:3c:b5:7d:16:bf:dd:39:f6:3a:
91:ff:36:42:26:d2:33:8d:9f:b7:13:30:62:27:d9:
d5:67:70:b0:2c:3d:26:16:f6:e8:7c:7f:94:e8:58:
95:ca:db:2d:54:b5:a5:60:15:cd:cf:2c:18:dd:1f:
54:39:54:07:81:b9:f2:c1:0c:b2:6c:e3:04:45:cd:
7e:19:52:db:d6:66:0a:cf:95:e6:c1:59:b5:a8:33:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1A:A4:8E:42:87:E4:A7:2D:9B:F5:FF:2D:CB:50:46:C0:AA:68:13
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/oRqkjkKH5Kctm_X_LctQRsCqaBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:f9:36:1f:4b:89:80:58:0f:46:51:ba:aa:a8:80:b1:77:88:
da:22:41:3f:25:45:85:b9:7f:bd:1d:c0:69:81:e6:cc:6c:49:
ae:f2:1f:70:58:2d:a7:88:61:d4:6e:01:fa:7e:f1:2c:56:68:
6a:b2:0d:6d:cd:93:ef:70:af:17:be:4c:98:fc:73:5b:e7:0f:
94:25:d7:33:d8:97:cd:34:76:e9:be:ec:f2:67:d2:00:f9:86:
eb:cc:1b:21:d5:87:ff:ef:36:a5:fd:2b:56:0c:15:2c:71:81:
fc:71:30:c9:7e:c0:fe:89:41:79:15:f1:8f:b3:ed:01:1c:f3:
43:1c:10:9d:d4:b4:36:1b:36:16:30:fc:57:e7:b0:15:92:73:
25:5c:8a:54:bd:48:73:98:cb:de:76:2f:e7:bc:30:d3:39:da:
9c:a3:08:07:4f:4e:52:f6:bd:fd:ca:4c:dd:90:c0:13:81:56:
e8:45:20:d1:9b:a0:e9:f3:e3:bb:53:f5:16:ba:df:d2:43:93:
ff:68:85:33:df:97:32:8c:45:27:ae:ae:1b:2d:bf:8e:a7:4a:
43:95:47:8e:45:42:73:47:92:7a:5e:2d:91:f5:7f:26:3e:5a:
03:47:7b:0e:e0:cc:d0:40:bd:98:b9:d7:f9:b4:68:34:f3:c5:
df:ae:d8:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH5scwy+dlakJjEC8vkiFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2Y2ZhOTRmNjEzNGUzOTYwZWE1ZjMxODg0NmEzMGNmM2U5
MjJkZDcwHhcNMjUwMTAxMTM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTFhYTQ4ZTQyODdlNGE3MmQ5YmY1ZmYyZGNiNTA0NmMwYWE2ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKnyjRZatUQt3B7tEBmEcQyN9UG1
a2WotaMR1AbrNqNTWn8mpnKTPU0GIwcGRTG7Emb0SY13VxqGbSvylIg2QtU0u4Fo
4hwseTz4DDcXJ4fW7jtDNb9kp+57mllnbubipnWZf3ORewo1CSzSAc4Lqz9OW2FX
+ZKE9XUebRRoitHUAPpsNqBH9OlCAuDMPxV54Ev8Af782j5buneL36sZR/NQGTTL
HSgwtJ88tX0Wv9059jqR/zZCJtIzjZ+3EzBiJ9nVZ3CwLD0mFvbofH+U6FiVytst
VLWlYBXNzywY3R9UOVQHgbnywQyybOMERc1+GVLb1mYKz5XmwVm1qDM7WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKEapI5Ch+SnLZv1/y3LUEbAqmgTMB8GA1UdIwQY
MBaAFMbPqU9hNOOWDqXzGIRqMM8+ki3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUt
ZjlhNDM3MDlkMDBiLzEvb1Jxa2prS0g1S2N0bV9YX0xjdFFSc0NxYUJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUtZjlhNDM3MDlkMDBi
LzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVqcMA0G
CSqGSIb3DQEBCwUAA4IBAQBd+TYfS4mAWA9GUbqqqICxd4jaIkE/JUWFuX+9HcBp
gebMbEmu8h9wWC2niGHUbgH6fvEsVmhqsg1tzZPvcK8XvkyY/HNb5w+UJdcz2JfN
NHbpvuzyZ9IA+YbrzBsh1Yf/7zal/StWDBUscYH8cTDJfsD+iUF5FfGPs+0BHPND
HBCd1LQ2GzYWMPxX57AVknMlXIpUvUhzmMvedi/nvDDTOdqcowgHT05S9r39ykzd
kMATgVboRSDRm6Dp8+O7U/UWut/SQ5P/aIUz35cyjEUnrq4bLb+Op0pDlUeORUJz
R5J6Xi2R9X8mPloDR3sO4MzQQL2Yudf5tGg088Xfrtgw
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:50:02 2025 by rpki-client