Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/TWdB6zTVF3fEJuoh1Vd-hzyfEv8.roa
File: TWdB6zTVF3fEJuoh1Vd-hzyfEv8.roa (raw, json)
Hash identifier: ytIxMYdGcv3iqYgNaMpIR96fqV+YyOJQIrySdutTZeI=
Subject key identifier: 4D:67:41:EB:34:D5:17:77:C4:26:EA:21:D5:57:7E:87:3C:9F:12:FF
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 0195328A0B936F244DD9DED2C5683B8AC76F
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/TWdB6zTVF3fEJuoh1Vd-hzyfEv8.roa
Signing time: Sun 23 Feb 2025 11:21:02 +0000
ROA not before: Sun 23 Feb 2025 11:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 45.89.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 16:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:8a:0b:93:6f:24:4d:d9:de:d2:c5:68:3b:8a:c7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Feb 23 11:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d6741eb34d51777c426ea21d5577e873c9f12ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:72:54:7d:20:1a:f7:25:7c:1c:c1:53:1e:
35:a1:17:5b:14:13:c9:1a:8e:d8:7f:2a:0e:a0:b5:
6d:ea:dd:08:69:97:0d:fb:9b:54:9c:c9:b4:c0:55:
4d:c9:4b:c0:ca:bb:fc:ca:31:8e:27:5a:56:9c:13:
9d:21:ba:7b:60:7c:fc:25:d0:e5:01:a1:d7:8a:54:
35:a6:03:f0:e8:ec:68:8b:55:79:f6:1a:97:3f:eb:
40:1b:70:90:ea:b9:16:52:4f:26:dc:3d:c5:11:b5:
d8:b7:22:07:d3:3e:e4:56:86:14:df:3f:c3:01:9b:
3c:ee:d4:a6:69:5b:b5:1d:db:d3:c8:cb:18:89:a1:
c7:a2:dc:18:f3:b4:2f:7a:2a:e8:e0:88:0c:08:3d:
fd:6a:da:d0:96:f8:c1:8a:db:3f:31:26:74:64:ef:
30:f6:cd:a8:09:56:8d:d7:95:b4:c7:82:bc:2f:c1:
0b:50:2c:66:a6:7b:c5:fb:66:bf:a9:e2:3e:54:4a:
bd:23:35:0c:75:12:f2:0a:ab:87:17:4d:86:8a:66:
40:20:95:54:f9:8b:d5:27:88:65:3f:e7:50:a6:ed:
ad:71:5d:51:ff:64:19:6b:e2:00:d0:60:4f:3c:11:
38:ad:83:6a:8e:97:ac:ea:72:46:17:6e:b0:e3:af:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:67:41:EB:34:D5:17:77:C4:26:EA:21:D5:57:7E:87:3C:9F:12:FF
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/TWdB6zTVF3fEJuoh1Vd-hzyfEv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:5d:bd:1d:b5:cd:72:b3:0a:01:e3:c4:79:60:ff:f5:1e:5d:
46:29:c5:1e:7d:d1:6c:41:82:27:89:fc:b9:e1:a4:cf:57:4c:
05:ee:62:8b:c6:bf:67:4b:be:b9:e0:5d:0b:ef:1b:75:63:51:
ea:f3:9c:b7:7a:e9:49:e5:e4:7b:88:82:fe:2f:4c:71:a7:2f:
71:21:95:fd:4a:df:bd:56:51:3c:07:25:3b:05:8c:05:f8:eb:
57:1c:d3:5b:2d:fd:a7:86:04:dc:c1:24:9c:e6:42:99:24:ac:
c7:8c:8c:d5:f3:23:78:80:c0:a3:f2:d0:32:9e:33:05:da:66:
bf:57:1e:61:70:45:ac:26:d5:6e:99:38:6b:f2:42:6e:46:15:
6c:d7:98:bb:2d:d8:72:2a:d0:a2:16:d5:a8:ac:07:66:da:99:
f1:5f:6c:4e:f4:ec:02:3c:7d:08:65:7a:e0:51:b7:cc:0f:92:
f3:08:f2:36:f7:17:0b:47:41:c0:b7:9c:2a:42:87:9f:2d:8e:
16:4c:96:23:39:4d:b6:97:21:66:75:9e:00:40:bd:3b:fe:8d:
28:0e:12:4c:73:14:17:e7:08:72:9d:93:51:93:27:63:0b:9b:
0e:4c:d5:24:7a:f8:e7:dc:f9:ba:92:7c:e3:11:a9:73:2f:b0:
81:94:00:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUyiguTbyRN2d7SxWg7isdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz
NTBiY2IwHhcNMjUwMjIzMTEyMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDY3NDFlYjM0ZDUxNzc3YzQyNmVhMjFkNTU3N2U4NzNjOWYxMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW5yVH0gGvclfBzBUx41oRdbFBPJ
Go7YfyoOoLVt6t0IaZcN+5tUnMm0wFVNyUvAyrv8yjGOJ1pWnBOdIbp7YHz8JdDl
AaHXilQ1pgPw6Oxoi1V59hqXP+tAG3CQ6rkWUk8m3D3FEbXYtyIH0z7kVoYU3z/D
AZs87tSmaVu1HdvTyMsYiaHHotwY87Qveiro4IgMCD39atrQlvjBits/MSZ0ZO8w
9s2oCVaN15W0x4K8L8ELUCxmpnvF+2a/qeI+VEq9IzUMdRLyCquHF02GimZAIJVU
+YvVJ4hlP+dQpu2tcV1R/2QZa+IA0GBPPBE4rYNqjpes6nJGF26w468J2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE1nQes01Rd3xCbqIdVXfoc8nxL/MB8GA1UdIwQY
MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt
NTI4NzQ2MTFjZDIxLzEvVFdkQjZ6VFZGM2ZFSnVvaDFWZC1oenlmRXY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx
LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVnfMA0G
CSqGSIb3DQEBCwUAA4IBAQCmXb0dtc1yswoB48R5YP/1Hl1GKcUefdFsQYInify5
4aTPV0wF7mKLxr9nS7654F0L7xt1Y1Hq85y3eulJ5eR7iIL+L0xxpy9xIZX9St+9
VlE8ByU7BYwF+OtXHNNbLf2nhgTcwSSc5kKZJKzHjIzV8yN4gMCj8tAynjMF2ma/
Vx5hcEWsJtVumThr8kJuRhVs15i7LdhyKtCiFtWorAdm2pnxX2xO9OwCPH0IZXrg
UbfMD5LzCPI29xcLR0HAt5wqQoefLY4WTJYjOU22lyFmdZ4AQL07/o0oDhJMcxQX
5whynZNRkydjC5sOTNUkevjn3Pm6knzjEalzL7CBlAAu
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:51:15 2025 by rpki-client