Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/DXlbCJAC8VsKzIyLg6rFPNQQ-m8.roa
File: DXlbCJAC8VsKzIyLg6rFPNQQ-m8.roa (raw, json)
Hash identifier: Vx16YT/RZhgohT7qhtVb2C0SzwiT5UxCuv8IkUyLo1U=
Subject key identifier: 0D:79:5B:08:90:02:F1:5B:0A:CC:8C:8B:83:AA:C5:3C:D4:10:FA:6F
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194228DC037363F50142A09E5C4550466F0
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/DXlbCJAC8VsKzIyLg6rFPNQQ-m8.roa
Signing time: Wed 01 Jan 2025 15:48:22 +0000
ROA not before: Wed 01 Jan 2025 15:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 15:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c0:37:36:3f:50:14:2a:09:e5:c4:55:04:66:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 1 15:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d795b089002f15b0acc8c8b83aac53cd410fa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:68:e1:b3:35:fc:49:a8:33:ed:8c:37:dd:
98:41:c3:ac:45:6d:33:3b:d3:8b:9d:60:54:0b:1a:
ad:75:9c:96:5d:d5:90:be:85:75:cf:e1:bb:80:96:
03:b7:71:c3:d8:44:1b:4e:bc:3d:4d:02:40:d4:b4:
13:46:45:18:52:dd:a3:26:d7:9c:93:23:9f:3d:36:
d4:b8:c0:67:06:ca:1f:c6:c2:fe:e8:4d:b3:da:08:
cf:33:e7:45:ee:5c:53:08:05:27:b3:e4:e4:ad:ff:
7a:bf:c8:a5:af:17:27:e8:18:72:5e:15:93:47:d1:
5b:dc:6b:cb:5e:0e:e9:85:35:a5:73:32:6f:54:2e:
f7:1a:6f:8e:74:7c:ee:69:a9:b1:97:56:9e:1d:85:
f6:8e:5f:be:c6:3e:c6:9d:8a:62:42:5c:3d:42:aa:
81:1a:17:7f:2a:07:0f:a0:75:86:b3:8a:4b:f1:6a:
a4:78:87:ab:61:ad:2c:bf:7b:4c:48:07:9e:b3:85:
a4:4c:b9:a6:b3:3a:62:eb:e4:8e:01:c2:4d:c0:8f:
b0:ea:06:d0:8f:f8:9d:39:81:34:33:65:b3:f4:2c:
4d:33:01:1d:f0:08:e7:6e:ee:ce:34:42:2c:8e:02:
7d:fe:8c:30:44:1e:3d:89:fa:17:20:a0:e9:75:a9:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:79:5B:08:90:02:F1:5B:0A:CC:8C:8B:83:AA:C5:3C:D4:10:FA:6F
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/DXlbCJAC8VsKzIyLg6rFPNQQ-m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d7:58:db:7d:fe:00:47:6b:31:01:6b:ff:0e:36:f6:4d:39:
63:c9:7c:a2:0b:34:a6:21:1a:66:e4:2e:dd:c8:4e:ee:fa:a1:
76:16:6b:11:34:dc:74:50:d7:48:0e:5d:d2:ea:e8:19:9b:74:
ba:e3:02:ee:ee:cb:86:2b:c2:6a:f4:59:c2:aa:b8:53:bf:3f:
c3:fe:63:0e:fd:33:85:70:ea:87:b1:80:4a:d5:15:dd:88:38:
0e:5f:d6:3d:7a:c3:44:d3:1e:ac:5a:36:2a:c4:21:c0:a1:86:
dd:04:90:6f:98:b2:61:89:a0:f9:66:73:9c:d3:0a:80:55:7f:
08:91:e6:d1:89:2f:b6:9e:85:34:7f:53:54:06:c1:35:69:03:
8f:76:78:ec:6d:1d:5e:b9:95:85:16:d5:88:8c:1a:34:ac:e5:
87:80:68:43:13:60:5d:1f:d0:32:f3:a5:dc:af:b3:b4:1a:b2:
f7:71:59:28:bb:62:aa:6a:d4:7b:63:a6:18:ed:78:5f:95:0b:
14:38:93:01:d8:6e:16:f5:77:bd:eb:f6:2c:b2:af:82:d8:8b:
c5:23:0f:34:87:83:a7:b2:6e:02:f9:e6:38:74:3c:34:5d:f4:
0c:4a:31:2c:d4:9b:53:be:00:29:ac:e2:72:86:75:fc:b3:4e:
ea:2f:0f:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijcA3Nj9QFCoJ5cRVBGbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjUwMTAxMTU0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDc5NWIwODkwMDJmMTViMGFjYzhjOGI4M2FhYzUzY2Q0MTBmYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZZo4bM1/EmoM+2MN92YQcOsRW0z
O9OLnWBUCxqtdZyWXdWQvoV1z+G7gJYDt3HD2EQbTrw9TQJA1LQTRkUYUt2jJtec
kyOfPTbUuMBnBsofxsL+6E2z2gjPM+dF7lxTCAUns+Tkrf96v8ilrxcn6BhyXhWT
R9Fb3GvLXg7phTWlczJvVC73Gm+OdHzuaamxl1aeHYX2jl++xj7GnYpiQlw9QqqB
Ghd/KgcPoHWGs4pL8WqkeIerYa0sv3tMSAees4WkTLmmszpi6+SOAcJNwI+w6gbQ
j/idOYE0M2Wz9CxNMwEd8Ajnbu7ONEIsjgJ9/owwRB49ifoXIKDpdakuCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA15WwiQAvFbCsyMi4OqxTzUEPpvMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvRFhsYkNKQUM4VnNLekl5TGc2ckZQTlFRLW04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvMBMA0G
CSqGSIb3DQEBCwUAA4IBAQAp11jbff4AR2sxAWv/Djb2TTljyXyiCzSmIRpm5C7d
yE7u+qF2FmsRNNx0UNdIDl3S6ugZm3S64wLu7suGK8Jq9FnCqrhTvz/D/mMO/TOF
cOqHsYBK1RXdiDgOX9Y9esNE0x6sWjYqxCHAoYbdBJBvmLJhiaD5ZnOc0wqAVX8I
kebRiS+2noU0f1NUBsE1aQOPdnjsbR1euZWFFtWIjBo0rOWHgGhDE2BdH9Ay86Xc
r7O0GrL3cVkou2KqatR7Y6YY7XhflQsUOJMB2G4W9Xe96/Yssq+C2IvFIw80h4On
sm4C+eY4dDw0XfQMSjEs1JtTvgAprOJyhnX8s07qLw+k
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:58:59 2025 by rpki-client