Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/C9hdpRRPShlDvLqeJjNmTNXt81M.roa
File: C9hdpRRPShlDvLqeJjNmTNXt81M.roa (raw, json)
Hash identifier: 1uWX2ElJ1cwv+DrcsvgvOO5dkRuOtougjvt1dfU42vU=
Subject key identifier: 0B:D8:5D:A5:14:4F:4A:19:43:BC:BA:9E:26:33:66:4C:D5:ED:F3:53
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01943D9C93DF9AFAD5FAF452D8E76BB278AF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/C9hdpRRPShlDvLqeJjNmTNXt81M.roa
Signing time: Mon 06 Jan 2025 21:54:19 +0000
ROA not before: Mon 06 Jan 2025 21:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215181
IP address blocks: 45.138.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 11:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3d:9c:93:df:9a:fa:d5:fa:f4:52:d8:e7:6b:b2:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 6 21:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bd85da5144f4a1943bcba9e2633664cd5edf353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:6c:38:c6:1c:ca:2e:24:25:c6:9c:e6:1a:
5b:40:c8:1b:a1:04:6a:a6:81:63:6a:96:f1:e4:db:
bd:49:1f:69:04:e3:67:63:eb:77:62:b1:40:27:6d:
d6:f0:52:43:61:47:28:c0:e8:2f:df:d3:0b:10:00:
70:55:7d:06:6c:34:03:0c:ac:1c:75:7c:ef:72:7b:
29:6e:4f:d8:2e:1e:ce:b4:bc:e4:41:8b:be:1d:39:
f8:65:2a:f2:e7:b2:d5:3e:88:bb:a9:70:de:91:2b:
a8:ae:3f:4f:b0:3d:2b:34:b3:f7:33:26:6e:37:dc:
88:4e:10:b9:6c:df:73:91:e2:2c:4e:77:6c:ee:39:
cc:a8:c0:f2:24:81:2d:8c:3d:76:6a:87:e4:e1:f8:
80:c6:89:b0:4f:5c:9c:91:e6:16:7e:a3:db:8b:e5:
4e:5d:37:82:96:bc:74:60:98:20:76:eb:4a:f7:37:
94:2b:0f:c6:c6:bc:aa:23:c4:cf:94:34:7f:29:74:
f2:40:09:81:ab:7d:02:2f:40:9b:93:2c:01:30:5e:
0e:a9:8c:b3:cf:59:65:e6:61:35:c8:4a:9d:92:80:
96:f4:3b:e0:d3:2f:cc:a4:e6:7d:92:6b:e4:14:49:
dd:26:6e:bb:6d:e1:a0:69:f4:9f:f6:8a:a4:a0:e6:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D8:5D:A5:14:4F:4A:19:43:BC:BA:9E:26:33:66:4C:D5:ED:F3:53
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/C9hdpRRPShlDvLqeJjNmTNXt81M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.180.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:4d:53:38:bd:42:a6:03:a5:d3:e7:a3:98:c7:20:f0:1e:e7:
3c:fe:c1:b5:ce:6a:ca:93:7d:16:ec:ae:62:cd:1f:12:59:fc:
0b:9a:a4:d7:0e:16:8d:8b:df:0d:4f:d5:40:7d:1f:8f:8d:d8:
76:9f:ec:85:bb:fd:1f:6f:fe:81:16:a1:0b:11:66:53:9a:60:
4c:9c:e2:a1:a0:10:ca:ac:b6:51:af:d2:82:a0:b8:7e:df:e5:
0e:b7:1a:0a:79:1a:4f:18:7e:f3:9a:cb:e6:b0:e0:db:b9:55:
1f:45:d8:e4:b0:be:58:a9:46:20:8d:c1:f2:00:d6:8c:5d:e0:
62:fe:96:46:26:9c:da:03:5e:01:5e:5b:bb:5a:2b:04:24:ea:
a6:d7:ee:0d:89:6d:c9:bc:2e:33:25:68:2c:3e:ca:45:f8:55:
ac:49:20:eb:dc:a1:b3:18:95:58:7c:67:d5:65:fa:bf:2a:07:
23:cb:16:bf:1a:f8:3e:4c:c9:c6:6c:f6:b2:76:0a:5a:51:b8:
de:61:22:a6:74:fa:c7:45:44:54:6c:bf:b8:30:8e:5c:9c:2e:
47:ce:ec:97:0e:c6:bc:9a:ae:01:79:ea:bb:1d:32:9f:37:c2:
c9:70:0b:21:ff:8b:3c:0f:61:10:7e:97:6b:4d:a6:a7:bb:a0:
39:80:81:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQ9nJPfmvrV+vRS2OdrsnivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwMTA2MjE1NDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmQ4NWRhNTE0NGY0YTE5NDNiY2JhOWUyNjMzNjY0Y2Q1ZWRmMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMlsOMYcyi4kJcac5hpbQMgboQRq
poFjapbx5Nu9SR9pBONnY+t3YrFAJ23W8FJDYUcowOgv39MLEABwVX0GbDQDDKwc
dXzvcnspbk/YLh7OtLzkQYu+HTn4ZSry57LVPoi7qXDekSuorj9PsD0rNLP3MyZu
N9yIThC5bN9zkeIsTnds7jnMqMDyJIEtjD12aofk4fiAxomwT1yckeYWfqPbi+VO
XTeClrx0YJggdutK9zeUKw/GxryqI8TPlDR/KXTyQAmBq30CL0CbkywBMF4OqYyz
z1ll5mE1yEqdkoCW9Dvg0y/MpOZ9kmvkFEndJm67beGgafSf9oqkoOZU/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvYXaUUT0oZQ7y6niYzZkzV7fNTMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvQzloZHBSUlBTaGxEdkxxZUpqTm1UTlh0ODFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYq0MA0G
CSqGSIb3DQEBCwUAA4IBAQCaTVM4vUKmA6XT56OYxyDwHuc8/sG1zmrKk30W7K5i
zR8SWfwLmqTXDhaNi98NT9VAfR+Pjdh2n+yFu/0fb/6BFqELEWZTmmBMnOKhoBDK
rLZRr9KCoLh+3+UOtxoKeRpPGH7zmsvmsODbuVUfRdjksL5YqUYgjcHyANaMXeBi
/pZGJpzaA14BXlu7WisEJOqm1+4NiW3JvC4zJWgsPspF+FWsSSDr3KGzGJVYfGfV
Zfq/Kgcjyxa/Gvg+TMnGbPaydgpaUbjeYSKmdPrHRURUbL+4MI5cnC5HzuyXDsa8
mq4Beeq7HTKfN8LJcAsh/4s8D2EQfpdrTaanu6A5gIEp
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:46:04 2025 by rpki-client