Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8S2rCjjX-0Kaw9zrK3_tUIcNBdM.roa
File: 8S2rCjjX-0Kaw9zrK3_tUIcNBdM.roa (raw, json)
Hash identifier: iejjeO07YuTbHi8prq9IA+QdKCZ895lCvnBqfurA1Vk=
Subject key identifier: F1:2D:AB:0A:38:D7:FB:42:9A:C3:DC:EB:2B:7F:ED:50:87:0D:05:D3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01954C00DE5DF8D55FD6F49E02003FAF6297
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8S2rCjjX-0Kaw9zrK3_tUIcNBdM.roa
Signing time: Fri 28 Feb 2025 10:01:20 +0000
ROA not before: Fri 28 Feb 2025 10:01:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207957
IP address blocks: 45.149.235.0/24 maxlen: 24
94.156.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 20:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:00:de:5d:f8:d5:5f:d6:f4:9e:02:00:3f:af:62:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 28 10:01:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f12dab0a38d7fb429ac3dceb2b7fed50870d05d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:68:88:4e:49:3f:c4:7e:8f:97:4f:0d:88:
7a:14:ec:30:43:da:fa:c2:fd:57:aa:7e:e7:4d:7c:
76:e6:ac:30:a5:28:de:c0:73:9b:6d:6a:84:c2:6b:
7e:cc:73:f0:3d:a9:71:cc:5f:33:fd:3c:d3:20:1a:
ba:2a:4c:36:0a:bf:b3:be:12:bb:54:4d:66:22:ab:
69:97:66:dc:09:24:50:11:43:0c:21:fc:2e:83:24:
6a:7f:50:25:df:12:28:35:0c:b7:2a:f1:52:8b:e5:
a6:55:37:23:ff:e6:b6:c0:cc:d7:6b:91:70:ee:3b:
f2:2f:8c:30:9b:cf:fd:eb:40:cc:c3:a6:1b:d5:46:
2c:48:69:00:ae:fd:d2:1d:8f:5e:88:1c:b1:42:24:
55:63:1f:1b:27:6a:b9:99:2c:5d:bf:9e:82:fa:62:
f3:3d:16:55:61:6a:43:f8:8b:b5:3e:e5:08:dc:8c:
74:9a:60:ff:bb:ee:9d:a0:c9:6e:3a:ee:54:58:7e:
28:b5:5c:26:9b:c1:97:97:33:3f:a7:eb:ce:f1:65:
20:99:73:fb:c9:c2:2c:6f:0a:af:9b:57:9e:28:bf:
93:26:ff:20:45:81:39:97:a6:c2:e2:8e:97:91:d8:
2b:4a:6a:6d:58:6c:02:f2:da:82:ef:92:93:af:56:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:AB:0A:38:D7:FB:42:9A:C3:DC:EB:2B:7F:ED:50:87:0D:05:D3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8S2rCjjX-0Kaw9zrK3_tUIcNBdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.235.0/24
94.156.154.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2b:8b:a7:ca:21:8c:e0:23:c9:28:9f:33:4a:68:26:41:a5:
57:ed:ab:3c:f2:ba:ec:a3:19:f1:dd:39:82:9e:ad:f2:83:c2:
fd:48:41:c1:49:5d:4d:de:a6:1f:6a:b1:14:e6:14:4e:60:b9:
60:5e:fd:a3:43:ca:d8:fd:24:87:7a:55:c5:57:81:54:c4:ce:
92:46:f7:72:98:21:06:be:76:8e:3e:01:0d:2f:7d:a6:e8:ad:
d8:08:32:8b:ad:07:fd:7c:72:39:4f:b3:7e:bd:0c:fd:7e:ba:
e8:52:27:52:de:00:23:21:8b:26:b3:20:f6:bb:cd:ab:2b:4f:
e7:35:76:8c:c5:ed:ad:8c:26:de:c5:7b:94:1b:67:bf:94:48:
d2:65:de:e7:be:37:7e:77:6f:fc:f9:ae:20:bd:36:ec:4e:9a:
5b:47:97:43:d2:84:30:91:c7:7d:51:db:45:49:ab:a5:8b:0b:
a8:e1:73:d7:63:2c:a5:3f:f6:bc:e7:30:36:85:49:c1:a7:32:
ac:ba:9f:29:0e:68:c7:a0:9f:31:c6:96:05:a0:48:2e:3e:a2:
5d:ad:3e:fb:d1:85:1d:e4:1d:f6:a3:3e:9b:6e:17:e3:0e:59:
c2:8a:ed:02:f1:cf:39:03:3a:53:33:f6:1c:51:15:f3:e0:0b:
f4:4f:29:b3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZVMAN5d+NVf1vSeAgA/r2KXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMjI4MTAwMTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTJkYWIwYTM4ZDdmYjQyOWFjM2RjZWIyYjdmZWQ1MDg3MGQwNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqFoiE5JP8R+j5dPDYh6FOwwQ9r6
wv1Xqn7nTXx25qwwpSjewHObbWqEwmt+zHPwPalxzF8z/TzTIBq6Kkw2Cr+zvhK7
VE1mIqtpl2bcCSRQEUMMIfwugyRqf1Al3xIoNQy3KvFSi+WmVTcj/+a2wMzXa5Fw
7jvyL4wwm8/960DMw6Yb1UYsSGkArv3SHY9eiByxQiRVYx8bJ2q5mSxdv56C+mLz
PRZVYWpD+Iu1PuUI3Ix0mmD/u+6doMluOu5UWH4otVwmm8GXlzM/p+vO8WUgmXP7
ycIsbwqvm1eeKL+TJv8gRYE5l6bC4o6XkdgrSmptWGwC8tqC75KTr1acHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPEtqwo41/tCmsPc6yt/7VCHDQXTMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvOFMyckNqalgtMEthdzl6ckszX3RVSWNOQmRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZXrAwQA
XpyaMA0GCSqGSIb3DQEBCwUAA4IBAQBVK4unyiGM4CPJKJ8zSmgmQaVX7as88rrs
oxnx3TmCnq3yg8L9SEHBSV1N3qYfarEU5hROYLlgXv2jQ8rY/SSHelXFV4FUxM6S
RvdymCEGvnaOPgENL32m6K3YCDKLrQf9fHI5T7N+vQz9frroUidS3gAjIYsmsyD2
u82rK0/nNXaMxe2tjCbexXuUG2e/lEjSZd7nvjd+d2/8+a4gvTbsTppbR5dD0oQw
kcd9UdtFSauliwuo4XPXYyylP/a85zA2hUnBpzKsup8pDmjHoJ8xxpYFoEguPqJd
rT770YUd5B32oz6bbhfjDlnCiu0C8c85AzpTM/YcURXz4Av0Tymz
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:24:12 2025 by rpki-client