Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/hEGIj1UwcVltuyDohKYJyIVr6Fg.roa
File: hEGIj1UwcVltuyDohKYJyIVr6Fg.roa (raw, json)
Hash identifier: u8wotHBybHSEbWPjT+wInWjjXD30rfJS36nK01xfyts=
Subject key identifier: 84:41:88:8F:55:30:71:59:6D:BB:20:E8:84:A6:09:C8:85:6B:E8:58
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 018CC3B733463910A653C91058CD5306885F
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/hEGIj1UwcVltuyDohKYJyIVr6Fg.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198575
IP address blocks: 45.85.44.0/22 maxlen: 22
45.85.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 18:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:33:46:39:10:a6:53:c9:10:58:cd:53:06:88:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8441888f553071596dbb20e884a609c8856be858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:69:1b:80:03:85:f8:d0:ad:8c:3c:f6:cf:2d:
aa:35:fe:18:66:8e:c9:01:e1:3b:46:09:7b:be:d5:
38:6e:5a:19:04:49:61:b5:c2:ad:82:a9:af:14:11:
ee:f1:07:9b:0a:fd:cc:ad:45:1c:4f:12:8e:f0:d2:
a4:a7:57:cb:99:f5:11:84:35:03:bb:b5:e5:8c:e1:
3f:e1:3e:f4:d0:ae:ba:a6:ee:12:c7:53:c7:39:52:
c5:d5:6d:11:01:e8:52:41:d1:a7:a6:c2:4e:97:a3:
73:bb:04:2e:8b:09:12:c0:bf:3b:bd:9a:81:24:cd:
18:76:0e:27:2b:e9:6a:31:b5:09:59:22:79:20:81:
77:4f:e3:06:58:fc:91:19:05:a7:64:52:4f:e9:52:
1f:db:c8:6a:1d:01:bb:e3:84:63:51:00:d4:e0:b2:
66:c6:9a:9b:8a:c4:87:85:1b:7b:da:b1:ce:1b:5f:
88:e0:1f:4f:04:95:45:24:09:93:a9:a0:ad:d9:c3:
dd:ee:92:4a:17:c7:dc:d6:91:ae:80:e0:f7:75:46:
1d:49:51:46:bf:22:68:f8:ff:5a:56:18:1c:26:cd:
56:b4:e0:39:45:6e:44:2b:9d:81:27:20:c6:79:c0:
96:ba:bd:98:c1:4a:fa:ca:ae:64:cd:de:11:e1:de:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:41:88:8F:55:30:71:59:6D:BB:20:E8:84:A6:09:C8:85:6B:E8:58
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/hEGIj1UwcVltuyDohKYJyIVr6Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.44.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:9f:06:c6:7d:50:c9:a9:c1:81:76:17:4c:ac:ec:74:eb:a2:
e8:eb:42:44:84:db:07:87:72:68:7b:e9:3d:ec:1b:56:48:77:
d7:bf:ee:e7:a3:71:9d:2a:a9:f2:71:ba:30:30:d6:ee:4e:70:
86:32:cf:a1:3c:9f:68:c5:36:80:15:95:13:de:4a:c7:82:bc:
ee:c9:8e:fa:26:cf:49:e0:11:1f:8e:ac:52:de:d1:ad:61:2e:
1d:96:fb:ca:34:da:68:98:30:12:0f:ee:0c:ab:73:0b:1d:2b:
ae:c0:6f:3b:44:5b:05:a2:dc:43:eb:fa:bc:4a:68:c5:2d:10:
d4:7b:79:57:ec:14:42:50:c6:02:d6:fe:2f:e0:9e:bc:82:b1:
e4:d6:3b:74:21:69:f9:a1:8d:9a:a3:6f:bd:ea:f4:60:00:9f:
25:f0:08:e4:55:7b:80:9d:06:a9:f9:15:4f:52:54:54:bc:96:
a3:44:71:4d:cf:42:6f:f0:74:8b:f1:b8:89:d3:c1:2e:65:54:
65:62:bb:30:12:d6:ae:68:8a:7f:7b:66:bd:a1:25:44:2d:8d:
6f:29:07:5b:78:1b:2b:78:ef:8d:9b:57:2e:b5:59:22:96:bd:
04:1b:3b:52:44:07:25:18:0e:fc:eb:26:ee:04:d4:c4:ea:64:
eb:ce:5f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:27 2025 by rpki-client