Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/meh2smIWjzLP4WYHO9J2COE9VgY.roa
File: meh2smIWjzLP4WYHO9J2COE9VgY.roa (raw, json)
Hash identifier: EENMViPCYPPFdMeFAisLS1Xd0dJQLylDIW2fCQVhU4o=
Subject key identifier: 99:E8:76:B2:62:16:8F:32:CF:E1:66:07:3B:D2:76:08:E1:3D:56:06
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 018CC3B70CB5B386CE452699DD09E4018614
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/meh2smIWjzLP4WYHO9J2COE9VgY.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209733
IP address blocks: 45.82.62.0/24 maxlen: 24
45.82.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0c:b5:b3:86:ce:45:26:99:dd:09:e4:01:86:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99e876b262168f32cfe166073bd27608e13d5606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:ce:6f:d1:ff:09:b9:73:53:21:8c:80:da:
5b:a4:9a:f6:c4:36:0a:67:dc:49:dc:4d:f6:a9:fd:
39:59:3a:0f:c1:3b:4e:57:af:80:cd:ad:58:d1:da:
ab:6e:25:d8:90:ae:61:27:71:15:03:03:d5:93:54:
4a:c4:13:82:44:e3:57:4f:a3:b5:93:51:49:8e:e2:
3c:61:10:bf:ae:29:da:6d:23:06:b6:f3:3d:1a:e2:
10:2b:aa:d0:5f:18:d7:15:c0:25:8e:84:c8:e8:54:
a5:60:6e:66:f4:01:86:7c:a5:8d:9d:14:e0:9c:a0:
85:05:84:51:0d:27:a6:64:81:df:d6:cb:ae:97:4c:
dc:18:ca:93:80:d0:a9:17:aa:19:19:1f:22:80:a6:
8b:63:fd:64:be:83:ac:f3:d1:0a:6c:73:21:1e:3a:
93:4f:bd:b1:f8:63:05:96:33:bc:a2:93:67:45:32:
47:cf:e0:e3:15:31:84:37:b3:3e:10:07:d8:9a:75:
2e:dd:6a:91:59:19:47:54:82:b9:cd:30:69:04:2c:
a2:ef:d0:83:a3:42:23:f9:6e:5f:56:76:71:b4:7a:
2e:88:c1:3c:01:c6:f6:10:9b:6c:8d:55:1f:63:c8:
27:1a:93:04:bf:e3:ad:c4:4b:55:14:b3:7e:4d:c8:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:76:B2:62:16:8F:32:CF:E1:66:07:3B:D2:76:08:E1:3D:56:06
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/meh2smIWjzLP4WYHO9J2COE9VgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.61.0-45.82.62.255
Signature Algorithm: sha256WithRSAEncryption
a3:fa:08:81:ca:41:84:66:32:e4:55:ff:50:8c:76:99:2a:8c:
b9:54:06:a3:a6:69:6a:76:93:34:15:2b:a2:ec:20:d2:e3:8b:
b6:52:28:d6:3c:00:a5:4b:1a:01:5c:14:17:c9:e1:59:34:bc:
91:8e:c5:06:ff:20:7b:85:16:3b:3a:ca:5f:f3:39:c2:78:d3:
a0:39:e1:a1:5c:3f:33:e7:64:d9:0a:5b:48:3f:75:8a:d7:9d:
78:54:40:50:0e:24:05:bb:13:41:1e:da:1b:98:7c:7a:df:64:
44:b8:b5:53:8d:7b:b9:d8:ca:e0:59:e3:e0:7f:69:6a:93:2d:
b2:95:c4:22:9d:36:19:6c:c8:ef:98:c3:87:96:25:dc:99:27:
9d:18:9d:2d:8a:d8:e9:df:15:cf:22:a6:9e:df:18:80:5b:0c:
b0:9f:c5:e7:db:80:b6:51:e5:8a:45:e2:b1:cf:5c:54:61:f1:
40:ce:5a:1e:c2:8b:27:3e:f0:6e:fb:85:18:1f:fc:3e:29:4a:
0b:79:12:a5:0f:9f:a3:f7:66:67:5c:d0:7b:5d:eb:8c:7b:c7:
d7:f5:19:d9:9a:ef:ad:b2:6b:38:de:a6:ec:48:a6:41:5f:dc:
12:ba:97:72:d3:8d:02:09:11:fa:a1:7b:c0:ef:21:a7:a3:5f:
48:be:1f:db
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzDtwy1s4bORSaZ3QnkAYYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4
NGZhNDEwHhcNMjQwMTAxMDYzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWU4NzZiMjYyMTY4ZjMyY2ZlMTY2MDczYmQyNzYwOGUxM2Q1NjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVHOb9H/CblzUyGMgNpbpJr2xDYK
Z9xJ3E32qf05WToPwTtOV6+Aza1Y0dqrbiXYkK5hJ3EVAwPVk1RKxBOCRONXT6O1
k1FJjuI8YRC/rinabSMGtvM9GuIQK6rQXxjXFcAljoTI6FSlYG5m9AGGfKWNnRTg
nKCFBYRRDSemZIHf1suul0zcGMqTgNCpF6oZGR8igKaLY/1kvoOs89EKbHMhHjqT
T72x+GMFljO8opNnRTJHz+DjFTGEN7M+EAfYmnUu3WqRWRlHVIK5zTBpBCyi79CD
o0Ij+W5fVnZxtHouiME8Acb2EJtsjVUfY8gnGpMEv+OtxEtVFLN+TcgyuQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJnodrJiFo8yz+FmBzvSdgjhPVYGMB8GA1UdIwQY
MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt
OGNjOTgzMzYxMWU2LzEvbWVoMnNtSVdqekxQNFdZSE85SjJDT0U5VmdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2
LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtUj0D
BAAtUj4wDQYJKoZIhvcNAQELBQADggEBAKP6CIHKQYRmMuRV/1CMdpkqjLlUBqOm
aWp2kzQVK6LsINLji7ZSKNY8AKVLGgFcFBfJ4Vk0vJGOxQb/IHuFFjs6yl/zOcJ4
06A54aFcPzPnZNkKW0g/dYrXnXhUQFAOJAW7E0Ee2huYfHrfZES4tVONe7nYyuBZ
4+B/aWqTLbKVxCKdNhlsyO+Yw4eWJdyZJ50YnS2K2OnfFc8ipp7fGIBbDLCfxefb
gLZR5YpF4rHPXFRh8UDOWh7Ciyc+8G77hRgf/D4pSgt5EqUPn6P3Zmdc0Htd64x7
x9f1Gdma762yazjepuxIpkFf3BK6l3LTjQIJEfqhe8DvIaejX0i+H9s=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:29 2025 by rpki-client