Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/sWqATRqVddvN0b21YUcHOFt7YRQ.roa
File: sWqATRqVddvN0b21YUcHOFt7YRQ.roa (raw, json)
Hash identifier: 95U6koD/LFa4qJuQ7FBUcXAZDndEKm5ZxX+KweZLfXk=
Subject key identifier: B1:6A:80:4D:1A:95:75:DB:CD:D1:BD:B5:61:47:07:38:5B:7B:61:14
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0194258F93B1E041129BA91217C2963F8297
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/sWqATRqVddvN0b21YUcHOFt7YRQ.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49042
IP address blocks: 45.14.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 13:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:93:b1:e0:41:12:9b:a9:12:17:c2:96:3f:82:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b16a804d1a9575dbcdd1bdb5614707385b7b6114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:35:a3:51:a7:8e:5e:78:08:2b:1d:06:91:
97:fc:dd:a9:9c:a5:ff:c7:02:69:a0:02:1f:ca:8f:
5a:b4:ea:12:61:f1:83:32:47:2f:3e:63:9b:76:ca:
5b:33:91:14:d6:6a:a8:49:31:59:c7:7b:d9:34:58:
ce:7e:8c:ba:13:fc:9e:0f:18:ea:bd:5b:3e:5f:8a:
1a:68:64:64:57:d6:e3:81:67:a8:86:24:0b:e6:3f:
6a:ed:04:60:93:c3:d3:66:b6:ae:19:44:14:4d:07:
4f:01:00:06:12:a8:d3:e0:79:c4:74:6d:ff:da:5a:
5d:de:89:be:00:de:1d:d5:d6:45:82:30:22:0a:18:
86:7d:ba:73:25:b3:f5:1a:8b:38:c0:e5:79:f3:ed:
43:65:20:94:06:c1:00:5b:1b:d8:fd:a7:e6:97:e2:
6e:24:b2:48:3f:bf:d1:f9:86:89:59:9e:81:92:b0:
6b:b6:d4:8b:e4:39:19:e8:36:a3:db:ca:62:82:3b:
ff:aa:6e:af:fa:d7:d8:43:a2:8b:f5:15:7a:b2:9b:
bd:4a:dd:e9:99:fc:f8:b3:10:f4:1a:5f:2c:ba:20:
63:92:32:aa:ec:f9:d2:34:51:32:2d:86:0c:11:bb:
db:99:b3:19:ca:35:de:45:c1:70:b7:b2:a2:1a:67:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6A:80:4D:1A:95:75:DB:CD:D1:BD:B5:61:47:07:38:5B:7B:61:14
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/sWqATRqVddvN0b21YUcHOFt7YRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.226.0/24
Signature Algorithm: sha256WithRSAEncryption
73:db:38:fc:e2:39:a2:57:88:73:9c:bf:13:69:ff:a7:7b:69:
56:3f:cd:b3:31:56:1c:e4:df:c9:cc:01:58:ce:c3:af:d1:9e:
93:23:b1:cd:a9:f7:7d:e5:9d:13:50:13:61:9a:d4:bd:b2:51:
ae:ba:e5:e6:02:d3:7b:c4:f5:b2:3a:6c:47:5b:de:3f:d6:38:
10:11:f2:e6:14:d2:17:bb:00:9f:9c:ec:5a:d1:c5:31:66:0d:
16:9c:41:db:69:36:df:32:d7:8a:cd:e8:83:1e:0e:dd:95:85:
6d:c3:7b:a9:ab:d0:d2:a2:e4:bf:e3:3d:29:70:b4:d2:42:6c:
64:36:67:6b:26:6c:6f:78:8f:bf:2c:4a:70:d3:68:5f:f0:6a:
90:9d:b5:79:aa:75:f2:44:75:22:48:21:32:bc:f0:8a:fd:85:
ab:47:7f:70:87:a6:c9:31:cb:b1:26:a6:ac:1e:05:19:ce:47:
2d:8b:a0:34:de:41:39:93:11:e5:d2:6d:dd:4c:72:23:b4:72:
4a:27:be:5f:50:86:a8:b2:ad:20:c7:87:92:8e:3f:99:ef:c0:
68:f9:1c:20:8d:cb:41:1b:25:aa:04:91:49:4d:a6:7e:0e:27:
a0:5e:69:51:4e:cc:5b:84:a0:4a:b0:aa:81:c2:f0:ef:c1:a2:
c2:82:ec:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj5Ox4EESm6kSF8KWP4KXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1
OGE0YzAwHhcNMjUwMTAyMDU0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTZhODA0ZDFhOTU3NWRiY2RkMWJkYjU2MTQ3MDczODViN2I2MTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyc1o1Gnjl54CCsdBpGX/N2pnKX/
xwJpoAIfyo9atOoSYfGDMkcvPmObdspbM5EU1mqoSTFZx3vZNFjOfoy6E/yeDxjq
vVs+X4oaaGRkV9bjgWeohiQL5j9q7QRgk8PTZrauGUQUTQdPAQAGEqjT4HnEdG3/
2lpd3om+AN4d1dZFgjAiChiGfbpzJbP1Gos4wOV58+1DZSCUBsEAWxvY/afml+Ju
JLJIP7/R+YaJWZ6BkrBrttSL5DkZ6Daj28pigjv/qm6v+tfYQ6KL9RV6spu9St3p
mfz4sxD0Gl8suiBjkjKq7PnSNFEyLYYMEbvbmbMZyjXeRcFwt7KiGmcMFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLFqgE0alXXbzdG9tWFHBzhbe2EUMB8GA1UdIwQY
MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt
Y2U1NzE1MDY5NWE5LzEvc1dxQVRScVZkZHZOMGIyMVlVY0hPRnQ3WVJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5
LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ7iMA0G
CSqGSIb3DQEBCwUAA4IBAQBz2zj84jmiV4hznL8Taf+ne2lWP82zMVYc5N/JzAFY
zsOv0Z6TI7HNqfd95Z0TUBNhmtS9slGuuuXmAtN7xPWyOmxHW94/1jgQEfLmFNIX
uwCfnOxa0cUxZg0WnEHbaTbfMteKzeiDHg7dlYVtw3upq9DSouS/4z0pcLTSQmxk
NmdrJmxveI+/LEpw02hf8GqQnbV5qnXyRHUiSCEyvPCK/YWrR39wh6bJMcuxJqas
HgUZzkcti6A03kE5kxHl0m3dTHIjtHJKJ75fUIaosq0gx4eSjj+Z78Bo+RwgjctB
GyWqBJFJTaZ+DiegXmlRTsxbhKBKsKqBwvDvwaLCguwD
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:08 2025 by rpki-client