Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_tyDZrHJoIyhsq9Pn9rUVTISSTA.roa
File: _tyDZrHJoIyhsq9Pn9rUVTISSTA.roa (raw, json)
Hash identifier: wo6BPeIfZYEBp6STKDP6YJ7scroiqHSqb1xwH/VeBPQ=
Subject key identifier: FE:DC:83:66:B1:C9:A0:8C:A1:B2:AF:4F:9F:DA:D4:55:32:12:49:30
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01950A0E49C7AD68513717F6EB15FDFB7354
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_tyDZrHJoIyhsq9Pn9rUVTISSTA.roa
Signing time: Sat 15 Feb 2025 14:41:03 +0000
ROA not before: Sat 15 Feb 2025 14:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 45.131.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 12:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0a:0e:49:c7:ad:68:51:37:17:f6:eb:15:fd:fb:73:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 15 14:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fedc8366b1c9a08ca1b2af4f9fdad45532124930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:91:19:e0:fb:c1:0d:17:84:8d:83:31:f7:
7f:11:4f:57:f0:e5:5c:61:f3:54:e9:8d:24:5f:2c:
c7:6f:93:05:fb:fd:e2:20:88:04:bd:d2:f9:23:3f:
2e:8c:98:f6:98:8e:c5:45:a3:e0:e2:12:15:b5:7e:
30:b7:bd:0f:ea:bf:fb:db:f6:f8:3f:a1:97:af:0e:
7f:66:10:5f:09:73:35:bf:de:f8:22:61:3f:3c:db:
d7:92:a6:62:09:d3:eb:f4:e3:a1:8f:74:2e:7b:28:
d5:2a:f2:0d:7e:a6:30:2c:69:5d:88:df:01:29:94:
a6:80:86:16:9a:2a:09:55:71:d5:bc:d3:67:03:c0:
fa:d3:b7:49:76:23:e4:1f:5b:2b:b9:54:33:3c:d6:
21:6e:68:d6:b8:f7:cb:20:bb:61:f5:2d:c9:a4:b4:
a6:17:aa:a8:e2:e9:8c:f4:cc:5a:16:79:61:f8:ab:
24:bd:9e:ef:41:f3:40:07:25:d9:fa:c6:b5:d5:ec:
d5:94:7c:ca:57:7d:d5:9b:14:f1:f0:cf:6d:e0:53:
52:73:df:a4:92:92:79:0b:7d:bc:fc:70:28:f7:4c:
61:b3:a1:c0:f8:58:41:f0:d3:ad:59:80:04:03:4c:
84:b6:41:99:28:21:b4:79:2f:a2:b3:3f:71:e5:63:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DC:83:66:B1:C9:A0:8C:A1:B2:AF:4F:9F:DA:D4:55:32:12:49:30
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_tyDZrHJoIyhsq9Pn9rUVTISSTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3f:8a:3a:ea:04:17:0e:34:65:7e:8e:f0:cb:96:a5:f8:c1:
43:7a:73:c2:93:e8:7b:0d:47:a4:52:13:f5:e3:b8:be:5e:e0:
b2:7f:b1:0d:bb:7b:4b:7b:45:54:da:06:50:96:95:12:fd:66:
c1:0a:70:cf:86:68:2a:a6:1d:96:b1:23:64:7a:88:a1:a1:cc:
8d:35:12:88:33:36:eb:a5:a0:dd:81:93:ed:9c:c8:c3:5a:8b:
2c:21:52:07:24:cf:17:c5:1e:f9:d2:70:3b:74:f9:17:53:e9:
d8:27:ab:69:53:af:4b:be:1f:2d:3d:78:a7:85:b0:e2:25:c0:
ce:36:82:66:be:61:66:31:a0:72:06:28:f2:15:83:2a:79:c1:
b4:4d:b8:f6:09:2b:0b:fb:d8:5b:71:46:54:a6:5a:c7:c5:4e:
e2:93:c4:3f:d0:08:05:33:1a:51:43:2a:95:1b:5e:dd:96:d0:
26:12:5c:d7:89:31:d0:92:03:f4:c7:e4:f9:ab:24:fc:50:8b:
6b:bb:7c:9f:3c:a6:88:8b:35:02:9f:15:9b:23:f9:bf:f4:82:
61:38:1a:6c:0f:f6:77:f6:c1:54:fb:90:6c:83:43:cf:d3:cb:
75:38:2f:5e:91:69:ea:40:a2:93:2a:c8:19:2b:cc:b9:9d:18:
0e:cc:37:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUKDknHrWhRNxf26xX9+3NUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMjE1MTQ0MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWRjODM2NmIxYzlhMDhjYTFiMmFmNGY5ZmRhZDQ1NTMyMTI0OTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ2RGeD7wQ0XhI2DMfd/EU9X8OVc
YfNU6Y0kXyzHb5MF+/3iIIgEvdL5Iz8ujJj2mI7FRaPg4hIVtX4wt70P6r/72/b4
P6GXrw5/ZhBfCXM1v974ImE/PNvXkqZiCdPr9OOhj3QueyjVKvINfqYwLGldiN8B
KZSmgIYWmioJVXHVvNNnA8D607dJdiPkH1sruVQzPNYhbmjWuPfLILth9S3JpLSm
F6qo4umM9MxaFnlh+KskvZ7vQfNAByXZ+sa11ezVlHzKV33VmxTx8M9t4FNSc9+k
kpJ5C328/HAo90xhs6HA+FhB8NOtWYAEA0yEtkGZKCG0eS+isz9x5WN09QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP7cg2axyaCMobKvT5/a1FUyEkkwMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvX3R5RFpySEpvSXloc3E5UG45clVWVElTU1RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYO7MA0G
CSqGSIb3DQEBCwUAA4IBAQC2P4o66gQXDjRlfo7wy5al+MFDenPCk+h7DUekUhP1
47i+XuCyf7ENu3tLe0VU2gZQlpUS/WbBCnDPhmgqph2WsSNkeoihocyNNRKIMzbr
paDdgZPtnMjDWossIVIHJM8XxR750nA7dPkXU+nYJ6tpU69Lvh8tPXinhbDiJcDO
NoJmvmFmMaByBijyFYMqecG0Tbj2CSsL+9hbcUZUplrHxU7ik8Q/0AgFMxpRQyqV
G17dltAmElzXiTHQkgP0x+T5qyT8UItru3yfPKaIizUCnxWbI/m/9IJhOBpsD/Z3
9sFU+5Bsg0PP08t1OC9ekWnqQKKTKsgZK8y5nRgOzDfy
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:46:43 2025 by rpki-client