Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Z7IS993xG24e-cuger-fjazwpQs.roa
File: Z7IS993xG24e-cuger-fjazwpQs.roa (raw, json)
Hash identifier: sl0JUMV+4KNnHKgIeLxxSB6yfZYOfcw1VDDcoG5w+kQ=
Subject key identifier: 67:B2:12:F7:DD:F1:1B:6E:1E:F9:CB:A0:7A:BF:9F:8D:AC:F0:A5:0B
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0195DC946EA2DEBB2A6CC67BEF393CDA027C
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Z7IS993xG24e-cuger-fjazwpQs.roa
Signing time: Fri 28 Mar 2025 11:47:49 +0000
ROA not before: Fri 28 Mar 2025 11:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Mar 2025 20:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:94:6e:a2:de:bb:2a:6c:c6:7b:ef:39:3c:da:02:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Mar 28 11:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67b212f7ddf11b6e1ef9cba07abf9f8dacf0a50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:a8:da:c9:8d:73:35:99:a4:e0:83:cd:3b:
dc:9c:3d:af:73:7c:e7:ea:1f:13:06:27:ca:23:11:
ed:3c:fe:59:a8:69:e2:6c:3d:8c:2d:62:c9:cb:22:
a3:75:4e:ab:0f:0c:c5:a5:ee:e1:9b:28:77:35:4d:
cd:2d:f2:ae:dc:cb:1f:34:91:3c:fe:76:3e:08:45:
74:45:9f:49:13:37:70:93:f2:45:28:2e:e4:20:95:
20:8d:1d:67:81:0a:98:c0:12:af:bb:67:e7:1b:ff:
b1:37:95:3e:7e:2e:3d:ca:97:44:28:6e:b3:ea:eb:
ed:e9:fc:fa:54:bc:af:cb:01:88:05:c2:65:fd:e0:
ab:b7:cf:07:3b:c6:31:a2:a1:76:cc:fb:fd:ba:52:
8e:c7:c2:31:c9:b4:af:49:d4:22:64:c9:19:41:2e:
d3:40:73:05:a6:53:95:87:ac:d1:3b:ce:dc:c4:7d:
26:94:82:3a:e1:95:f0:cf:eb:a9:5a:77:03:87:99:
de:46:33:c3:9a:f6:8d:66:33:fe:d0:9a:f3:c8:5c:
c4:d6:86:e1:cc:3e:1f:a1:e2:26:41:49:0f:39:cf:
51:60:bd:e9:86:78:fd:0b:16:53:2e:55:3b:ae:65:
e7:f9:5b:f2:88:21:19:09:08:16:d0:55:38:f2:ef:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:12:F7:DD:F1:1B:6E:1E:F9:CB:A0:7A:BF:9F:8D:AC:F0:A5:0B
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Z7IS993xG24e-cuger-fjazwpQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
Signature Algorithm: sha256WithRSAEncryption
69:d1:27:a6:19:2d:28:b4:ee:02:e4:23:f7:be:aa:99:1a:c8:
38:e0:42:27:be:8e:41:e7:b7:0d:f3:c3:d8:7b:1a:f2:70:d7:
03:84:3c:ae:da:28:c4:13:2a:46:63:01:5a:9f:9d:58:31:d3:
9a:9a:ef:a4:34:cf:59:bf:d5:8b:fb:87:07:1a:10:41:cd:d1:
9b:75:f0:e1:3d:92:66:bb:c5:81:1f:61:e5:a6:eb:58:a6:a9:
21:2b:ac:fb:34:f3:ad:e2:21:3c:bd:0a:8c:f9:84:49:14:3f:
34:d4:91:13:0a:f8:d4:5d:e8:90:80:6f:f5:59:e6:bc:d9:10:
3b:fc:ef:b7:15:46:a6:7a:41:b6:b2:e9:24:72:98:0c:09:ca:
a8:04:31:1e:5b:ab:93:cd:fb:9e:7a:af:5f:23:2d:91:31:8b:
49:c1:7e:9a:df:fd:dc:be:70:82:b6:70:f4:45:52:0d:b2:b9:
3e:6f:53:02:a9:ee:92:5f:b3:62:fd:ca:29:b7:f5:20:7a:a7:
97:3b:28:80:d5:5b:c5:b9:31:35:7f:b9:96:74:27:3c:56:0c:
8f:c8:c9:59:d6:5e:1f:f5:e8:c0:62:55:04:2b:ee:50:a8:de:
6f:7a:ab:b1:4c:5f:09:ba:6d:fb:4f:a5:a9:f1:63:54:d4:8d:
c7:b5:e1:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXclG6i3rsqbMZ77zk82gJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjUwMzI4MTE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2IyMTJmN2RkZjExYjZlMWVmOWNiYTA3YWJmOWY4ZGFjZjBhNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF+o2smNczWZpOCDzTvcnD2vc3zn
6h8TBifKIxHtPP5ZqGnibD2MLWLJyyKjdU6rDwzFpe7hmyh3NU3NLfKu3MsfNJE8
/nY+CEV0RZ9JEzdwk/JFKC7kIJUgjR1ngQqYwBKvu2fnG/+xN5U+fi49ypdEKG6z
6uvt6fz6VLyvywGIBcJl/eCrt88HO8YxoqF2zPv9ulKOx8IxybSvSdQiZMkZQS7T
QHMFplOVh6zRO87cxH0mlII64ZXwz+upWncDh5neRjPDmvaNZjP+0JrzyFzE1obh
zD4foeImQUkPOc9RYL3phnj9CxZTLlU7rmXn+VvyiCEZCQgW0FU48u/zsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGeyEvfd8RtuHvnLoHq/n42s8KULMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvWjdJUzk5M3hHMjRlLWN1Z2VyLWZqYXp3cFFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVO0MA0G
CSqGSIb3DQEBCwUAA4IBAQBp0SemGS0otO4C5CP3vqqZGsg44EInvo5B57cN88PY
exrycNcDhDyu2ijEEypGYwFan51YMdOamu+kNM9Zv9WL+4cHGhBBzdGbdfDhPZJm
u8WBH2HlputYpqkhK6z7NPOt4iE8vQqM+YRJFD801JETCvjUXeiQgG/1Wea82RA7
/O+3FUamekG2sukkcpgMCcqoBDEeW6uTzfueeq9fIy2RMYtJwX6a3/3cvnCCtnD0
RVINsrk+b1MCqe6SX7Ni/copt/UgeqeXOyiA1VvFuTE1f7mWdCc8VgyPyMlZ1l4f
9ejAYlUEK+5QqN5vequxTF8Jum37T6Wp8WNU1I3HteH8
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:31:47 2025 by rpki-client