Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/2GJdm46J9qT5cr0PRp13kr1kSXU.roa
File: 2GJdm46J9qT5cr0PRp13kr1kSXU.roa (raw, json)
Hash identifier: JX6pJIQ8NqYlhC76vv1ZdkifKDyBtrDq/fChVp+I5PA=
Subject key identifier: D8:62:5D:9B:8E:89:F6:A4:F9:72:BD:0F:46:9D:77:92:BD:64:49:75
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 01942445540366F485B676CDFD7A306BFEB1
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/2GJdm46J9qT5cr0PRp13kr1kSXU.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 45.81.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 07:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:54:03:66:f4:85:b6:76:cd:fd:7a:30:6b:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8625d9b8e89f6a4f972bd0f469d7792bd644975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:6f:14:ea:65:cb:76:80:3a:1a:12:87:8b:
cf:b7:af:3a:29:98:3e:c0:7f:3d:3d:5c:36:f3:e9:
bc:16:9e:75:39:a7:26:67:82:03:e1:22:09:2a:13:
04:cf:5c:01:b1:20:08:bf:64:40:94:00:fb:86:5c:
f7:10:15:36:42:e8:84:e7:37:b6:22:fc:22:e9:31:
fe:cb:fe:63:5d:42:3b:bb:5a:0d:a4:41:95:66:1d:
4e:f6:f0:2c:55:84:04:d9:16:dc:cd:91:57:43:d7:
98:de:fd:ee:87:27:09:f1:18:10:27:78:f9:2e:77:
27:f6:d4:e2:bd:e9:8e:e2:9e:c0:0c:52:2e:31:da:
3a:d5:3e:b5:78:c2:03:cd:5e:0c:f2:5c:87:35:66:
1b:41:a2:2f:9b:5f:51:21:1e:7f:2f:e8:4b:30:a8:
1f:58:11:c0:b3:c3:a7:37:3a:83:ba:31:93:07:74:
65:d1:51:17:e0:7c:92:38:3c:14:a3:b8:02:fa:6a:
36:e5:cf:b3:35:73:17:9e:2f:27:39:d8:01:a8:a4:
f7:86:d1:ae:23:6b:bb:de:33:a1:bf:eb:60:37:b7:
f8:39:97:5d:0d:c0:c7:a1:45:0d:93:c1:4e:61:1f:
e3:63:4e:b5:90:7f:d5:03:20:22:33:c9:6e:89:9f:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:62:5D:9B:8E:89:F6:A4:F9:72:BD:0F:46:9D:77:92:BD:64:49:75
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/2GJdm46J9qT5cr0PRp13kr1kSXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.255.0/24
Signature Algorithm: sha256WithRSAEncryption
19:87:b2:b5:5b:53:d3:30:b2:4f:58:fc:06:ef:ba:9a:3a:10:
0c:3f:e4:59:f5:34:a9:49:8e:39:20:35:10:82:83:68:cf:cc:
0e:88:ad:9b:00:23:af:5e:96:9c:3b:5d:22:3c:ad:54:27:4b:
00:c0:bd:71:5a:79:53:a2:05:3f:29:25:73:38:15:e9:c8:12:
7b:41:bd:2a:c5:07:9d:eb:80:88:71:a6:3c:98:47:45:6c:0e:
cb:95:ff:8f:2a:0c:14:6f:fa:80:90:bc:bb:6c:53:25:a7:a9:
3f:d1:23:30:87:08:a1:dd:cf:6f:84:c6:4a:de:36:47:f9:f5:
00:b7:29:3d:d5:1d:41:47:d9:35:43:53:ae:ec:1f:fe:ee:cc:
1c:9f:b6:83:11:a6:05:c6:85:6a:d2:5b:8e:20:31:d2:c3:c8:
9f:a7:52:a4:b6:4f:58:50:a0:50:ed:12:ab:5c:5c:f7:a7:0d:
ff:7b:c4:cf:66:6a:87:e1:cd:d7:55:01:50:bc:91:c3:af:35:
1a:a0:c6:c9:68:8b:d1:0c:2b:e9:4d:24:64:b7:ee:a1:63:fb:
ca:42:1b:e8:56:7a:9e:74:5e:02:cf:02:af:50:ff:47:98:6b:
09:db:67:1e:0e:dc:28:af:f7:8e:73:74:b7:a1:b2:ee:14:0e:
3c:e0:28:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRVQDZvSFtnbN/Xowa/6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTY3MzNmYTIzOWM1ZmIwYzQzOGM4MmY3YzIzMGY1NWQ0
NzhjYjEwHhcNMjUwMTAxMjM0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODYyNWQ5YjhlODlmNmE0Zjk3MmJkMGY0NjlkNzc5MmJkNjQ0OTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybJvFOply3aAOhoSh4vPt686KZg+
wH89PVw28+m8Fp51OacmZ4ID4SIJKhMEz1wBsSAIv2RAlAD7hlz3EBU2QuiE5ze2
Ivwi6TH+y/5jXUI7u1oNpEGVZh1O9vAsVYQE2RbczZFXQ9eY3v3uhycJ8RgQJ3j5
Lncn9tTivemO4p7ADFIuMdo61T61eMIDzV4M8lyHNWYbQaIvm19RIR5/L+hLMKgf
WBHAs8OnNzqDujGTB3Rl0VEX4HySODwUo7gC+mo25c+zNXMXni8nOdgBqKT3htGu
I2u73jOhv+tgN7f4OZddDcDHoUUNk8FOYR/jY061kH/VAyAiM8luiZ9dJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNhiXZuOifak+XK9D0add5K9ZEl1MB8GA1UdIwQY
MBaAFNXmcz+iOcX7DEOMgvfCMPVdR4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQt
YTM4YjY3OTVmYjI0LzEvMkdKZG00Nko5cVQ1Y3IwUFJwMTNrcjFrU1hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQtYTM4YjY3OTVmYjI0
LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVH/MA0G
CSqGSIb3DQEBCwUAA4IBAQAZh7K1W1PTMLJPWPwG77qaOhAMP+RZ9TSpSY45IDUQ
goNoz8wOiK2bACOvXpacO10iPK1UJ0sAwL1xWnlTogU/KSVzOBXpyBJ7Qb0qxQed
64CIcaY8mEdFbA7Llf+PKgwUb/qAkLy7bFMlp6k/0SMwhwih3c9vhMZK3jZH+fUA
tyk91R1BR9k1Q1Ou7B/+7swcn7aDEaYFxoVq0luOIDHSw8ifp1Kktk9YUKBQ7RKr
XFz3pw3/e8TPZmqH4c3XVQFQvJHDrzUaoMbJaIvRDCvpTSRkt+6hY/vKQhvoVnqe
dF4CzwKvUP9HmGsJ22ceDtwor/eOc3S3obLuFA484Cim
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:03:28 2025 by rpki-client