Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/881jONnwH67K9jjjpOWz8Tbg2_E.roa
File: 881jONnwH67K9jjjpOWz8Tbg2_E.roa (raw, json)
Hash identifier: 2RW/fQSWuTAHcdaSYTqz9DUY4VrFO/yuVV1l8HCrlR4=
Subject key identifier: F3:CD:63:38:D9:F0:1F:AE:CA:F6:38:E3:A4:E5:B3:F1:36:E0:DB:F1
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018D9FBC6BA10FBB4B9BD133B47B31F41B4E
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/881jONnwH67K9jjjpOWz8Tbg2_E.roa
Signing time: Mon 12 Feb 2024 23:52:22 +0000
ROA not before: Mon 12 Feb 2024 23:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142019
IP address blocks: 45.93.17.0/24 maxlen: 24
45.155.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 02:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9f:bc:6b:a1:0f:bb:4b:9b:d1:33:b4:7b:31:f4:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 12 23:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3cd6338d9f01faecaf638e3a4e5b3f136e0dbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:30:a4:ad:b6:22:9e:00:63:3e:21:9e:b2:
55:eb:36:72:0a:e1:bd:93:2d:f7:f2:63:e7:56:1a:
93:01:4d:e0:c1:d3:56:d0:07:56:c7:5e:81:bb:6e:
8d:6a:1f:24:d6:96:5c:8a:7b:03:89:bc:33:45:29:
dd:87:34:3e:2b:f2:dc:ef:d0:48:94:c2:ee:58:4b:
a9:44:bc:b9:96:8b:f8:a4:4d:00:75:c7:3a:ae:13:
6d:1d:5b:bf:17:f4:df:04:2b:20:66:80:42:66:6a:
94:1b:fb:16:93:c5:a4:62:7b:4c:84:b6:ac:72:9c:
8b:97:f8:99:9e:b3:e4:33:b4:48:00:b4:66:df:77:
e1:48:c0:96:97:44:5e:bf:41:49:84:37:62:82:ab:
7a:44:d6:7d:cc:47:39:c8:05:8e:87:31:48:2d:75:
a3:c8:c8:25:f0:6c:53:37:e0:b2:31:6f:c9:a4:04:
63:64:51:a6:32:df:5e:98:ad:32:45:5a:65:23:39:
d1:6f:b2:27:6a:ac:37:55:c1:84:89:54:02:b7:69:
c2:45:8e:9e:68:ac:f6:6f:64:6b:52:7a:92:65:b8:
b2:b3:23:5c:5c:b3:42:91:7b:94:fa:65:ec:e2:7c:
87:48:49:ca:2e:fd:71:f9:c3:f6:db:d8:6e:4c:23:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CD:63:38:D9:F0:1F:AE:CA:F6:38:E3:A4:E5:B3:F1:36:E0:DB:F1
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/881jONnwH67K9jjjpOWz8Tbg2_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.17.0/24
45.155.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:90:d7:b5:4e:41:71:31:ae:ce:a2:a4:65:0d:63:61:95:2e:
59:82:b0:d3:29:22:c5:75:3d:11:75:d1:f4:47:80:bc:a2:9e:
b4:dd:eb:1d:33:ae:de:95:a7:49:df:07:23:01:86:a6:df:fd:
a7:3f:d4:30:2b:ec:40:10:08:b8:23:65:48:dd:3d:72:71:fb:
b7:94:ec:77:64:7e:22:86:a0:78:17:ab:30:e8:02:4f:e3:6f:
d7:ea:b6:26:aa:af:3f:b7:16:e1:d0:e9:37:03:19:80:9a:19:
d0:a3:29:1b:75:4b:71:42:f5:eb:bf:17:94:11:0c:e0:77:d2:
93:4f:2b:d1:7c:e8:f9:b2:58:5b:34:5d:c6:e0:0b:5d:5f:32:
68:2f:e6:5c:47:82:5f:db:9e:11:59:42:d7:a4:b0:a4:1d:7f:
5e:af:a8:fc:b8:40:66:aa:c5:53:90:ad:0d:cf:a7:68:81:a6:
6a:0d:95:d2:9e:b9:1e:77:cd:c6:f4:e6:4f:ac:1c:bb:2e:15:
9a:fa:93:b8:ca:f7:53:9b:0f:53:3c:f0:d8:86:eb:a8:ea:d3:
fd:84:12:40:5f:bb:f3:37:f0:b5:bb:6f:87:88:bd:15:9e:54:
b0:64:dd:b5:0a:c7:57:41:46:00:49:74:c0:bf:0f:3e:42:88:
b8:2c:89:1c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY2fvGuhD7tLm9EztHsx9BtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwMjEyMjM1MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2NkNjMzOGQ5ZjAxZmFlY2FmNjM4ZTNhNGU1YjNmMTM2ZTBkYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmScwpK22Ip4AYz4hnrJV6zZyCuG9
ky338mPnVhqTAU3gwdNW0AdWx16Bu26Nah8k1pZcinsDibwzRSndhzQ+K/Lc79BI
lMLuWEupRLy5lov4pE0Adcc6rhNtHVu/F/TfBCsgZoBCZmqUG/sWk8WkYntMhLas
cpyLl/iZnrPkM7RIALRm33fhSMCWl0Rev0FJhDdigqt6RNZ9zEc5yAWOhzFILXWj
yMgl8GxTN+CyMW/JpARjZFGmMt9emK0yRVplIznRb7Inaqw3VcGEiVQCt2nCRY6e
aKz2b2RrUnqSZbiysyNcXLNCkXuU+mXs4nyHSEnKLv1x+cP229huTCPlZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPPNYzjZ8B+uyvY446Tls/E24NvxMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvODgxak9ObndINjdLOWpqanBPV3o4VGJnMl9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV0RAwQA
LZvhMA0GCSqGSIb3DQEBCwUAA4IBAQA9kNe1TkFxMa7OoqRlDWNhlS5ZgrDTKSLF
dT0RddH0R4C8op603esdM67eladJ3wcjAYam3/2nP9QwK+xAEAi4I2VI3T1ycfu3
lOx3ZH4ihqB4F6sw6AJP42/X6rYmqq8/txbh0Ok3AxmAmhnQoykbdUtxQvXrvxeU
EQzgd9KTTyvRfOj5slhbNF3G4AtdXzJoL+ZcR4Jf254RWULXpLCkHX9er6j8uEBm
qsVTkK0Nz6dogaZqDZXSnrked83G9OZPrBy7LhWa+pO4yvdTmw9TPPDYhuuo6tP9
hBJAX7vzN/C1u2+HiL0VnlSwZN21CsdXQUYASXTAvw8+Qoi4LIkc
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:10 2025 by rpki-client