Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/1-n1IkUMV-nerkhqZCgwc7ZdRp0U.roa
File: 1-n1IkUMV-nerkhqZCgwc7ZdRp0U.roa (raw, json)
Hash identifier: bDZkMl+hmPgpHIHqOqNS3hQtnBi2HpyF2jWTnPh7J+o=
Subject key identifier: FA:7D:48:91:43:15:FA:77:AB:92:1A:99:0A:0C:1C:ED:97:51:A7:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0193F43DB5C51AED67EF85715512ADE29143
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/1-n1IkUMV-nerkhqZCgwc7ZdRp0U.roa
Signing time: Mon 23 Dec 2024 15:58:25 +0000
ROA not before: Mon 23 Dec 2024 15:58:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212193
IP address blocks: 45.94.6.0/24 maxlen: 24
45.156.28.0/24 maxlen: 24
45.156.29.0/24 maxlen: 24
194.29.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:3d:b5:c5:1a:ed:67:ef:85:71:55:12:ad:e2:91:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Dec 23 15:58:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa7d48914315fa77ab921a990a0c1ced9751a745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:79:42:66:14:8b:54:f4:18:39:e9:51:b3:3a:
4c:7a:b6:1d:6d:4f:dc:ea:b6:e3:3c:9d:80:cc:c6:
b9:41:ad:a4:37:05:d5:5e:5f:00:a1:4a:df:90:37:
7c:71:20:87:a8:fd:b4:2c:c2:b5:f4:91:a1:cf:9a:
15:bb:3d:a5:75:29:ab:13:68:fd:bc:11:1f:91:47:
22:44:87:6d:25:43:57:eb:09:7d:cb:a8:42:b6:03:
14:d1:6c:53:59:7a:88:09:1f:40:12:b9:37:23:4c:
67:19:01:b4:1d:f6:e9:3d:3a:1b:95:c0:33:4b:a5:
29:53:81:db:85:0a:66:0c:c5:0b:ea:48:a1:11:e7:
8f:0c:ac:1a:df:90:f3:fe:c5:26:8d:b2:49:93:6f:
ba:87:38:54:01:1c:3a:fe:c8:74:d0:d2:35:b1:88:
95:5f:af:8d:08:e7:34:88:31:60:ab:3f:02:8b:03:
85:7a:f8:6a:51:74:39:d8:45:4b:93:2f:7d:ab:42:
22:ab:da:d0:65:17:61:58:de:b0:cd:4f:37:a2:71:
cb:2e:db:cb:3c:53:25:6c:25:4f:98:e8:48:48:5f:
01:f7:1d:ea:c7:34:28:aa:63:46:31:96:d6:2f:7b:
d4:c1:9d:00:d6:41:69:79:96:8a:cb:c4:cb:d2:48:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:48:91:43:15:FA:77:AB:92:1A:99:0A:0C:1C:ED:97:51:A7:45
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/1-n1IkUMV-nerkhqZCgwc7ZdRp0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.6.0/24
45.156.28.0/23
194.29.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:45:d3:3d:01:82:44:e7:48:15:37:56:4b:e5:fe:bf:0f:9c:
de:63:ee:18:8e:3d:f8:24:88:1d:9c:89:25:72:82:04:23:0e:
e6:24:c9:c5:50:ab:a5:72:9e:6d:19:4c:e3:7c:be:23:2b:ee:
63:94:6c:77:ff:58:63:20:c6:d2:81:9c:b1:aa:12:5a:b2:b8:
3f:00:4a:51:53:5c:24:a6:f9:9b:a8:9d:23:80:f0:86:ad:65:
f1:37:6b:a4:1a:f5:71:48:bc:54:ed:19:b7:db:6f:34:95:f0:
2e:a5:9e:d8:15:20:7d:57:ec:43:69:66:87:4d:34:39:a5:00:
79:2e:10:bd:8a:12:84:38:29:89:a1:fc:0f:a2:a7:2c:4b:b5:
bc:06:d7:59:29:d7:53:62:27:8d:8f:1e:9d:06:5f:84:5e:35:
1e:99:6d:a7:14:4c:ae:51:56:00:26:ec:85:fb:a2:27:5a:cc:
a3:8d:91:e9:06:d6:12:28:85:5c:94:0c:49:ec:5a:79:26:90:
4b:77:52:a5:03:3f:18:fa:f3:81:10:dc:34:73:e0:fe:90:2f:
18:a8:bd:65:97:9a:14:63:a4:6f:72:69:23:56:fa:05:a3:20:
4f:bf:3f:0c:44:bb:0d:ff:08:b7:e0:f8:c0:69:17:68:cd:f9:
09:93:02:26
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZP0PbXFGu1n74VxVRKt4pFDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj
NGY2NDUwHhcNMjQxMjIzMTU1ODI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTdkNDg5MTQzMTVmYTc3YWI5MjFhOTkwYTBjMWNlZDk3NTFhNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HlCZhSLVPQYOelRszpMerYdbU/c
6rbjPJ2AzMa5Qa2kNwXVXl8AoUrfkDd8cSCHqP20LMK19JGhz5oVuz2ldSmrE2j9
vBEfkUciRIdtJUNX6wl9y6hCtgMU0WxTWXqICR9AErk3I0xnGQG0HfbpPToblcAz
S6UpU4HbhQpmDMUL6kihEeePDKwa35Dz/sUmjbJJk2+6hzhUARw6/sh00NI1sYiV
X6+NCOc0iDFgqz8CiwOFevhqUXQ52EVLky99q0Iiq9rQZRdhWN6wzU83onHLLtvL
PFMlbCVPmOhISF8B9x3qxzQoqmNGMZbWL3vUwZ0A1kFpeZaKy8TL0kiR2wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPp9SJFDFfp3q5IamQoMHO2XUadFMB8GA1UdIwQY
MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt
ZmNjMzM2ZWVkOGQ3LzEvMS1uMUlrVU1WLW5lcmtocVpDZ3djN1pkUnAwVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDgvMWYzNzEyLWNmMmMtNDg2ZS05NWIzLWZjYzMzNmVlZDhk
Ny8xL3NzQzlyNjNxZU56akV2aGkzZlFyRzlURTlrVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC1eBgME
AS2cHAMEAMIdNzANBgkqhkiG9w0BAQsFAAOCAQEAD0XTPQGCROdIFTdWS+X+vw+c
3mPuGI49+CSIHZyJJXKCBCMO5iTJxVCrpXKebRlM43y+IyvuY5Rsd/9YYyDG0oGc
saoSWrK4PwBKUVNcJKb5m6idI4Dwhq1l8TdrpBr1cUi8VO0Zt9tvNJXwLqWe2BUg
fVfsQ2lmh000OaUAeS4QvYoShDgpiaH8D6KnLEu1vAbXWSnXU2InjY8enQZfhF41
HpltpxRMrlFWACbshfuiJ1rMo42R6QbWEiiFXJQMSexaeSaQS3dSpQM/GPrzgRDc
NHPg/pAvGKi9ZZeaFGOkb3JpI1b6BaMgT78/DES7Df8It+D4wGkXaM35CZMCJg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 11:02:15 2025 by rpki-client