Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rO8Gm1_XbhMVo43Ivu4m8psdbzE.roa
File: rO8Gm1_XbhMVo43Ivu4m8psdbzE.roa (raw, json)
Hash identifier: 6l6exJs7ob6LqYnnMBUUzV35NI22wAwF8RSVu+DljDc=
Subject key identifier: AC:EF:06:9B:5F:D7:6E:13:15:A3:8D:C8:BE:EE:26:F2:9B:1D:6F:31
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018EEE2B1BB07E3C24DEF5C1145EE3BE63BD
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rO8Gm1_XbhMVo43Ivu4m8psdbzE.roa
Signing time: Wed 17 Apr 2024 22:26:26 +0000
ROA not before: Wed 17 Apr 2024 22:26:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215761
IP address blocks: 45.138.183.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ee:2b:1b:b0:7e:3c:24:de:f5:c1:14:5e:e3:be:63:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 17 22:26:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acef069b5fd76e1315a38dc8beee26f29b1d6f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a0:c3:51:da:65:a3:62:12:36:ad:26:d8:f7:
32:16:2b:b9:e4:34:4b:0c:f3:b3:96:c4:6f:71:a6:
51:c6:72:9d:aa:9c:8f:ab:d9:ec:8c:de:22:f7:11:
89:4c:d9:96:6b:d1:6c:8f:d4:cc:2e:08:ab:72:85:
37:66:2c:46:45:9d:f9:dc:b9:f4:4a:b1:cc:82:f4:
3a:b2:bf:d3:30:50:7d:c4:51:90:90:8c:f8:1c:eb:
18:e8:2d:2a:b3:f7:73:a4:57:d4:b2:91:e9:c3:98:
55:4c:ba:c4:7a:66:90:48:54:9f:44:04:3b:48:30:
82:bc:2e:ad:a3:75:93:b2:7d:a7:54:4c:94:e9:05:
3b:ea:99:b4:c1:a4:bc:7f:a6:af:a6:55:ed:92:3f:
9f:7a:d9:08:cb:27:bc:e6:e1:74:c0:ed:93:a5:52:
90:0a:db:de:cb:f8:79:4a:45:68:9f:a9:14:ac:dc:
6f:da:04:c6:70:77:a5:d1:93:f1:27:c5:76:7b:c7:
0b:d6:97:10:3f:77:3d:6b:32:fd:c0:3c:a5:91:88:
3a:5d:df:ff:86:71:cb:38:b5:ca:f1:9d:6f:17:20:
4f:f0:40:49:b3:76:b9:c3:a7:04:89:58:a2:84:17:
26:84:21:48:69:80:65:11:42:4e:b4:e0:09:7f:c0:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EF:06:9B:5F:D7:6E:13:15:A3:8D:C8:BE:EE:26:F2:9B:1D:6F:31
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rO8Gm1_XbhMVo43Ivu4m8psdbzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.183.0/24
45.144.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fc:81:36:8d:5b:98:b0:ea:23:ba:77:61:43:6e:3d:b0:3b:
18:dc:fb:37:64:24:cf:34:55:3f:81:06:ed:c3:88:e9:ff:4f:
88:8e:d9:5e:6f:57:af:4c:8e:0e:1d:22:0f:32:0c:93:df:42:
3c:e9:d9:16:52:be:e0:73:6c:5c:de:c8:f9:fc:70:7d:bc:80:
c5:5a:a6:31:7d:5a:9e:bf:9b:50:77:31:6e:33:5d:69:a2:2c:
ae:84:79:05:a2:e1:f2:b0:74:8a:9a:a2:93:a9:b2:b3:f6:7c:
c4:2a:03:10:d9:b3:bf:ac:2d:52:a5:78:6e:66:3a:3d:22:b6:
68:40:af:16:4f:fd:89:d1:3b:c3:91:0b:87:d5:30:b5:f4:b9:
74:34:ca:f0:e6:e3:de:ca:2d:3e:aa:46:e1:d4:71:4a:73:29:
66:8d:2f:05:34:59:a1:d7:b4:56:b7:e9:53:64:8d:75:3f:b6:
ba:90:e0:b5:e6:b1:68:f5:01:1d:53:fa:4d:25:59:01:9e:45:
26:34:1c:5e:e6:6b:6d:7f:12:2c:ee:d5:f0:03:78:26:4a:86:
d7:c1:74:09:c3:e1:85:03:89:87:0d:c8:98:67:cb:df:20:bc:
46:44:c9:6b:91:b3:ba:d6:a3:63:5c:21:b2:56:e8:dc:da:33:
b1:28:43:49
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY7uKxuwfjwk3vXBFF7jvmO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwNDE3MjIyNjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2VmMDY5YjVmZDc2ZTEzMTVhMzhkYzhiZWVlMjZmMjliMWQ2ZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6DDUdplo2ISNq0m2PcyFiu55DRL
DPOzlsRvcaZRxnKdqpyPq9nsjN4i9xGJTNmWa9Fsj9TMLgircoU3ZixGRZ353Ln0
SrHMgvQ6sr/TMFB9xFGQkIz4HOsY6C0qs/dzpFfUspHpw5hVTLrEemaQSFSfRAQ7
SDCCvC6to3WTsn2nVEyU6QU76pm0waS8f6avplXtkj+fetkIyye85uF0wO2TpVKQ
Ctvey/h5SkVon6kUrNxv2gTGcHel0ZPxJ8V2e8cL1pcQP3c9azL9wDylkYg6Xd//
hnHLOLXK8Z1vFyBP8EBJs3a5w6cEiViihBcmhCFIaYBlEUJOtOAJf8COvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKzvBptf124TFaONyL7uJvKbHW8xMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvck84R20xX1hiaE1WbzQzSXZ1NG04cHNkYnpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYq3AwQA
LZDWMA0GCSqGSIb3DQEBCwUAA4IBAQBv/IE2jVuYsOojundhQ249sDsY3Ps3ZCTP
NFU/gQbtw4jp/0+Ijtleb1evTI4OHSIPMgyT30I86dkWUr7gc2xc3sj5/HB9vIDF
WqYxfVqev5tQdzFuM11poiyuhHkFouHysHSKmqKTqbKz9nzEKgMQ2bO/rC1SpXhu
Zjo9IrZoQK8WT/2J0TvDkQuH1TC19Ll0NMrw5uPeyi0+qkbh1HFKcylmjS8FNFmh
17RWt+lTZI11P7a6kOC15rFo9QEdU/pNJVkBnkUmNBxe5mttfxIs7tXwA3gmSobX
wXQJw+GFA4mHDciYZ8vfILxGRMlrkbO61qNjXCGyVujc2jOxKENJ
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:49 2025 by rpki-client