Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/XPwRouehIx_M4w_v4l29eap3Eds.roa
File: XPwRouehIx_M4w_v4l29eap3Eds.roa (raw, json)
Hash identifier: F4pQrAGZ/spodDKc8vQz/bmf7MXI4N9BotC0dxMf3LI=
Subject key identifier: 5C:FC:11:A2:E7:A1:23:1F:CC:E3:0F:EF:E2:5D:BD:79:AA:77:11:DB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 0194E4CD330041ABD7AAEB1662C5AF19C452
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/XPwRouehIx_M4w_v4l29eap3Eds.roa
Signing time: Sat 08 Feb 2025 09:04:00 +0000
ROA not before: Sat 08 Feb 2025 09:04:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 45.89.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Feb 2025 11:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e4:cd:33:00:41:ab:d7:aa:eb:16:62:c5:af:19:c4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Feb 8 09:04:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cfc11a2e7a1231fcce30fefe25dbd79aa7711db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:22:a2:7f:73:59:5e:7a:e1:fd:90:18:fd:
fe:f6:8f:8c:b9:31:85:89:16:e0:ac:52:54:d8:c1:
9b:da:f5:75:fd:a6:cc:3e:44:f7:7f:12:5e:40:d3:
ab:22:a1:04:f3:b6:15:fe:ab:aa:a1:99:5c:39:9d:
ec:48:f0:5e:21:94:41:00:b5:2c:0c:e6:0f:47:45:
00:74:9d:32:16:59:00:b0:1f:b2:b3:f0:c4:14:35:
86:da:cf:1e:a8:2c:31:c9:1e:31:de:70:e0:63:9a:
a1:34:06:37:c0:9c:1b:cc:f1:ad:3e:20:e9:1f:12:
50:2d:8b:ab:e8:b6:85:6c:87:27:0a:12:bc:ca:9c:
35:0f:a6:9e:3f:58:82:b7:9f:46:9b:c9:14:77:56:
ae:cd:22:0e:7d:68:46:15:64:18:5a:e6:1a:18:d9:
a1:c7:db:db:90:7a:0d:7d:f1:8a:37:24:0e:d6:cf:
32:e7:99:63:aa:57:24:87:b9:b4:1e:25:4c:70:d0:
2e:65:40:f0:ce:9f:dc:95:1b:7a:e0:1f:16:8c:16:
b7:a2:0a:35:0f:cb:4b:85:12:72:ce:fa:9c:a6:65:
4f:e6:c8:32:d4:a3:62:fb:6f:5f:60:86:5f:b1:47:
39:85:39:b0:bf:a8:cb:10:cd:a3:5a:21:99:9b:bc:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FC:11:A2:E7:A1:23:1F:CC:E3:0F:EF:E2:5D:BD:79:AA:77:11:DB
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/XPwRouehIx_M4w_v4l29eap3Eds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:11:95:3e:97:49:df:4e:8e:5d:e9:39:fb:07:5b:27:0e:ff:
5f:94:2b:16:14:97:5f:b2:88:49:6c:3b:84:61:e4:d7:c2:94:
e8:67:28:cc:a5:f1:0b:b0:60:58:c3:92:6a:21:63:d2:04:e2:
d2:3c:d7:9e:58:d0:b5:fc:44:97:08:a7:ce:0b:49:f9:c9:2b:
4e:57:9f:38:4d:4f:85:3a:6a:20:62:9f:e8:fa:cb:0a:6a:b5:
73:d3:0c:f3:4f:8c:fd:7d:1b:8e:ce:9a:68:3a:08:5a:c4:57:
06:c8:32:5d:c3:9d:af:73:13:c1:52:ee:63:68:53:7a:39:06:
36:24:43:e3:80:89:82:4c:7d:52:47:d6:92:1d:74:45:22:00:
e0:ad:a6:f3:eb:98:d2:6b:d3:0d:93:60:9d:81:af:dc:d9:7e:
0a:7c:fd:18:e9:a8:bc:c0:78:65:51:79:d1:04:39:57:8e:bf:
bf:71:bd:b5:db:1a:51:a6:03:bc:97:cc:1f:75:da:f2:d2:79:
25:a1:b8:9e:87:08:f2:e4:67:89:12:76:17:50:5d:1f:cb:a6:
db:d5:7d:23:14:dc:12:ee:00:b7:53:d6:fc:85:d4:0c:11:14:
33:d9:fd:02:9c:b4:23:f0:57:f0:c8:e4:6b:0f:2c:57:da:2f:
98:80:cb:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTkzTMAQavXqusWYsWvGcRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz
NTBiY2IwHhcNMjUwMjA4MDkwNDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2ZjMTFhMmU3YTEyMzFmY2NlMzBmZWZlMjVkYmQ3OWFhNzcxMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLUion9zWV564f2QGP3+9o+MuTGF
iRbgrFJU2MGb2vV1/abMPkT3fxJeQNOrIqEE87YV/quqoZlcOZ3sSPBeIZRBALUs
DOYPR0UAdJ0yFlkAsB+ys/DEFDWG2s8eqCwxyR4x3nDgY5qhNAY3wJwbzPGtPiDp
HxJQLYur6LaFbIcnChK8ypw1D6aeP1iCt59Gm8kUd1auzSIOfWhGFWQYWuYaGNmh
x9vbkHoNffGKNyQO1s8y55ljqlckh7m0HiVMcNAuZUDwzp/clRt64B8WjBa3ogo1
D8tLhRJyzvqcpmVP5sgy1KNi+29fYIZfsUc5hTmwv6jLEM2jWiGZm7wl8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFz8EaLnoSMfzOMP7+JdvXmqdxHbMB8GA1UdIwQY
MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt
NTI4NzQ2MTFjZDIxLzEvWFB3Um91ZWhJeF9NNHdfdjRsMjllYXAzRWRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx
LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVnfMA0G
CSqGSIb3DQEBCwUAA4IBAQAPEZU+l0nfTo5d6Tn7B1snDv9flCsWFJdfsohJbDuE
YeTXwpToZyjMpfELsGBYw5JqIWPSBOLSPNeeWNC1/ESXCKfOC0n5yStOV584TU+F
OmogYp/o+ssKarVz0wzzT4z9fRuOzppoOghaxFcGyDJdw52vcxPBUu5jaFN6OQY2
JEPjgImCTH1SR9aSHXRFIgDgrabz65jSa9MNk2Cdga/c2X4KfP0Y6ai8wHhlUXnR
BDlXjr+/cb212xpRpgO8l8wfddry0nklobiehwjy5GeJEnYXUF0fy6bb1X0jFNwS
7gC3U9b8hdQMERQz2f0CnLQj8FfwyORrDyxX2i+YgMt7
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:25:55 2025 by rpki-client