Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/V2yuW3JJ20RvCluN3rXCUUMiG7w.roa
File: V2yuW3JJ20RvCluN3rXCUUMiG7w.roa (raw, json)
Hash identifier: x17gUm0KUeJAMk7xHzgBZEWB6s9JGa50PPNlB66G6AI=
Subject key identifier: 57:6C:AE:5B:72:49:DB:44:6F:0A:5B:8D:DE:B5:C2:51:43:22:1B:BC
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019648233B02EA1B7E73708B10D2D7CC62E9
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/V2yuW3JJ20RvCluN3rXCUUMiG7w.roa
Signing time: Fri 18 Apr 2025 09:03:10 +0000
ROA not before: Fri 18 Apr 2025 09:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214174
IP address blocks: 45.157.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 May 2025 09:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:23:3b:02:ea:1b:7e:73:70:8b:10:d2:d7:cc:62:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 18 09:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=576cae5b7249db446f0a5b8ddeb5c25143221bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:cc:d3:42:74:43:8f:07:8d:bc:e2:96:7f:
29:8a:89:28:71:51:4b:0d:53:c2:52:ba:3a:1f:85:
dd:ed:16:eb:b4:66:b4:1d:0f:30:cd:87:32:8b:fe:
9e:57:f5:dd:ed:02:8d:cc:83:0f:ac:ec:62:dc:29:
b7:65:46:82:5d:ea:56:a1:49:db:a9:1b:85:04:ae:
41:32:2b:df:68:34:3d:ee:80:72:c5:a7:fc:8e:23:
0c:cb:c5:b4:12:1c:9e:5b:d6:ca:5d:2b:08:61:f0:
af:51:57:cd:e2:51:c1:0f:e6:c2:f4:93:a2:2c:5a:
99:43:f0:45:fc:18:54:50:b0:8e:fd:c9:38:d6:21:
7f:ea:90:f4:d1:20:cd:c1:4c:b9:70:8d:2d:c6:0c:
d1:52:21:8a:78:cb:7a:f0:1e:17:9f:0c:56:46:b0:
2b:32:0a:88:ea:d9:25:7e:12:a8:3d:c4:e6:a7:20:
05:09:db:1b:dd:68:82:b4:ed:5a:3b:ce:a3:c7:ac:
1f:f6:22:bc:cc:e2:89:b5:ad:2d:c1:37:ed:4a:88:
d1:8a:d8:65:e9:12:ce:8a:f4:7d:e5:d0:29:31:66:
4e:19:0c:17:6d:48:80:f6:74:85:8b:e9:dd:40:6a:
ed:fb:be:67:d1:06:51:05:a2:02:41:12:10:46:ee:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6C:AE:5B:72:49:DB:44:6F:0A:5B:8D:DE:B5:C2:51:43:22:1B:BC
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/V2yuW3JJ20RvCluN3rXCUUMiG7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.208.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d0:f0:ba:e8:11:a3:b7:8c:0c:e2:c6:aa:f6:3d:04:98:12:
c3:0c:e9:4b:48:04:15:a5:07:8d:06:e8:dc:ad:84:b4:64:36:
2f:ce:91:93:85:d9:7a:55:fc:e8:43:5f:16:c9:6e:78:11:06:
67:96:cc:72:f7:e9:ba:79:5f:e2:09:44:fe:e6:90:d6:6b:e7:
69:3b:e5:e8:e8:de:41:db:96:26:9d:d5:1a:51:81:40:17:55:
d5:ea:af:fe:0d:79:d0:fe:9c:6f:9a:be:57:ee:82:66:90:da:
d6:cc:dc:96:9e:df:f8:28:2e:7b:0e:ad:98:d9:fc:df:b9:a4:
65:5d:87:86:2f:79:66:5e:01:ae:d2:64:9d:ae:f6:45:86:52:
40:2a:87:b6:33:7d:ab:2c:d7:8a:00:17:8c:c0:8f:77:cf:d3:
14:19:8e:6b:95:12:73:9e:b1:5c:23:c9:ba:df:8b:0f:12:27:
34:d1:11:a8:d3:b2:2e:61:20:18:ba:dd:a1:cb:bf:29:6c:d1:
e7:29:90:fd:d1:6c:88:0f:dd:e1:02:72:fc:b7:f1:c4:c0:fc:
21:7e:e1:94:c7:cd:c5:9c:30:20:04:25:4b:40:fb:a0:06:60:
ad:1e:d4:12:47:1e:99:a8:d5:a1:aa:1a:ee:02:96:76:b8:14:
70:b8:3c:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZIIzsC6ht+c3CLENLXzGLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjUwNDE4MDkwMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzZjYWU1YjcyNDlkYjQ0NmYwYTViOGRkZWI1YzI1MTQzMjIxYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwnM00J0Q48Hjbziln8piokocVFL
DVPCUro6H4Xd7RbrtGa0HQ8wzYcyi/6eV/Xd7QKNzIMPrOxi3Cm3ZUaCXepWoUnb
qRuFBK5BMivfaDQ97oByxaf8jiMMy8W0EhyeW9bKXSsIYfCvUVfN4lHBD+bC9JOi
LFqZQ/BF/BhUULCO/ck41iF/6pD00SDNwUy5cI0txgzRUiGKeMt68B4XnwxWRrAr
MgqI6tklfhKoPcTmpyAFCdsb3WiCtO1aO86jx6wf9iK8zOKJta0twTftSojRithl
6RLOivR95dApMWZOGQwXbUiA9nSFi+ndQGrt+75n0QZRBaICQRIQRu7mKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFdsrltySdtEbwpbjd61wlFDIhu8MB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvVjJ5dVczSkoyMFJ2Q2x1TjNyWENVVU1pRzd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ3QMA0G
CSqGSIb3DQEBCwUAA4IBAQAV0PC66BGjt4wM4saq9j0EmBLDDOlLSAQVpQeNBujc
rYS0ZDYvzpGThdl6VfzoQ18WyW54EQZnlsxy9+m6eV/iCUT+5pDWa+dpO+Xo6N5B
25YmndUaUYFAF1XV6q/+DXnQ/pxvmr5X7oJmkNrWzNyWnt/4KC57Dq2Y2fzfuaRl
XYeGL3lmXgGu0mSdrvZFhlJAKoe2M32rLNeKABeMwI93z9MUGY5rlRJznrFcI8m6
34sPEic00RGo07IuYSAYut2hy78pbNHnKZD90WyID93hAnL8t/HEwPwhfuGUx83F
nDAgBCVLQPugBmCtHtQSRx6ZqNWhqhruApZ2uBRwuDxU
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:33:27 2025 by rpki-client