Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kDwk1d1BCQDqL6Waoz63XQ1gMEo.roa
File: kDwk1d1BCQDqL6Waoz63XQ1gMEo.roa (raw, json)
Hash identifier: B9UPrupkUcZ4lzKFF9hW+dua1jHH7jmKVdgo6Db4k58=
Subject key identifier: 90:3C:24:D5:DD:41:09:00:EA:2F:A5:9A:A3:3E:B7:5D:0D:60:30:4A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019566BE457FE537B219087B929E65AF68E0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kDwk1d1BCQDqL6Waoz63XQ1gMEo.roa
Signing time: Wed 05 Mar 2025 14:38:20 +0000
ROA not before: Wed 05 Mar 2025 14:38:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198037
IP address blocks: 45.148.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 06:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:be:45:7f:e5:37:b2:19:08:7b:92:9e:65:af:68:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 5 14:38:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=903c24d5dd410900ea2fa59aa33eb75d0d60304a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:ca:ba:e2:f7:97:a6:ff:03:57:ea:b8:17:
6a:12:27:5e:fb:af:94:1d:3d:a9:f2:72:61:b1:5a:
59:78:9b:de:06:36:de:00:51:29:1a:2c:b4:42:d8:
a4:05:3e:db:e5:69:e0:f5:52:45:16:ec:e3:36:39:
07:f6:62:1d:57:cd:71:90:41:b6:c0:4c:da:8b:5b:
8a:1a:c8:16:14:6e:1b:67:db:59:db:c8:bd:ea:2f:
47:da:3c:89:2b:e8:26:79:82:b3:08:71:9b:db:ac:
c5:ed:81:4b:a5:96:4a:8c:b6:cc:f2:8f:ed:39:39:
73:23:20:a7:7c:47:2d:a1:e5:d8:44:2d:6a:eb:03:
65:c7:3b:dd:c1:b2:ca:84:6d:3d:93:eb:7c:cf:a8:
db:8a:f6:c7:75:5c:ef:10:24:c2:27:33:1b:3e:d2:
92:1c:d4:4e:a2:ff:03:7c:ab:16:65:2f:a5:84:18:
3c:e8:37:da:68:fa:65:59:73:78:7d:cd:c4:b6:0a:
f7:e7:1a:46:77:d1:db:59:0f:2f:08:90:00:62:a7:
ee:97:a4:3b:b8:81:da:dd:cc:a4:c4:e6:3d:d0:5e:
9b:1d:04:9a:70:69:59:12:fd:c9:82:12:fc:ec:ff:
ef:3b:d8:5c:a9:62:67:d2:e5:ac:bc:12:70:05:2a:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3C:24:D5:DD:41:09:00:EA:2F:A5:9A:A3:3E:B7:5D:0D:60:30:4A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kDwk1d1BCQDqL6Waoz63XQ1gMEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.117.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d2:84:20:ec:e8:c8:d9:0f:91:70:42:0a:1e:c2:66:ed:b7:
fa:94:a1:96:39:87:d3:c3:15:99:16:17:7d:9a:98:23:17:6d:
c7:ee:20:37:1b:8b:21:98:aa:7e:23:07:81:75:9c:14:02:66:
af:55:f7:66:a1:b4:3b:57:82:f8:56:be:58:57:0c:50:6c:d7:
6b:7c:06:f9:38:f6:b7:21:95:8c:79:f9:b9:6a:a2:1c:db:ce:
6b:92:32:5f:64:69:25:53:c5:09:0f:96:70:74:f5:6c:3a:47:
df:47:f1:28:f2:f6:88:3d:fa:f5:5e:b4:1c:14:84:cb:fb:62:
03:c9:bd:79:9c:2b:b3:4a:0c:b3:14:90:0e:76:7f:df:32:98:
84:ec:80:74:7f:b5:d8:ee:a0:a5:b3:9e:af:f2:5c:12:4c:27:
90:b6:35:03:ef:ae:9e:09:55:fe:d2:c3:0c:72:43:1f:13:e4:
9c:df:2e:53:b9:b1:cf:f7:68:29:3f:91:5e:4e:c9:84:19:56:
f5:ff:a8:65:51:77:63:f1:21:e2:8b:f4:da:38:b0:0d:b6:10:
df:79:34:41:28:48:fc:74:4d:df:ea:f2:0e:cf:14:a6:25:41:
d0:d5:4c:29:22:5f:61:40:58:22:a5:08:06:67:a1:f6:99:99:
d9:fc:14:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVmvkV/5TeyGQh7kp5lr2jgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMzA1MTQzODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDNjMjRkNWRkNDEwOTAwZWEyZmE1OWFhMzNlYjc1ZDBkNjAzMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp3KuuL3l6b/A1fquBdqEide+6+U
HT2p8nJhsVpZeJveBjbeAFEpGiy0QtikBT7b5Wng9VJFFuzjNjkH9mIdV81xkEG2
wEzai1uKGsgWFG4bZ9tZ28i96i9H2jyJK+gmeYKzCHGb26zF7YFLpZZKjLbM8o/t
OTlzIyCnfEctoeXYRC1q6wNlxzvdwbLKhG09k+t8z6jbivbHdVzvECTCJzMbPtKS
HNROov8DfKsWZS+lhBg86DfaaPplWXN4fc3Etgr35xpGd9HbWQ8vCJAAYqful6Q7
uIHa3cykxOY90F6bHQSacGlZEv3JghL87P/vO9hcqWJn0uWsvBJwBSpWXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJA8JNXdQQkA6i+lmqM+t10NYDBKMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEva0R3azFkMUJDUURxTDZXYW96NjNYUTFnTUVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZR1MA0G
CSqGSIb3DQEBCwUAA4IBAQBJ0oQg7OjI2Q+RcEIKHsJm7bf6lKGWOYfTwxWZFhd9
mpgjF23H7iA3G4shmKp+IweBdZwUAmavVfdmobQ7V4L4Vr5YVwxQbNdrfAb5OPa3
IZWMefm5aqIc285rkjJfZGklU8UJD5ZwdPVsOkffR/Eo8vaIPfr1XrQcFITL+2ID
yb15nCuzSgyzFJAOdn/fMpiE7IB0f7XY7qCls56v8lwSTCeQtjUD766eCVX+0sMM
ckMfE+Sc3y5TubHP92gpP5FeTsmEGVb1/6hlUXdj8SHii/TaOLANthDfeTRBKEj8
dE3f6vIOzxSmJUHQ1UwpIl9hQFgipQgGZ6H2mZnZ/BTA
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:44:57 2025 by rpki-client