Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4GiZXeyZt8fkAUoSFnvBpsQxc-w.roa
File: 4GiZXeyZt8fkAUoSFnvBpsQxc-w.roa (raw, json)
Hash identifier: B84dVToWT12iDyWfnGAAlPuUFKWdX7t0W9X2amMb4wE=
Subject key identifier: E0:68:99:5D:EC:99:B7:C7:E4:01:4A:12:16:7B:C1:A6:C4:31:73:EC
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0193F84003C6B9F5E00A695C7E513B64803B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4GiZXeyZt8fkAUoSFnvBpsQxc-w.roa
Signing time: Tue 24 Dec 2024 10:39:25 +0000
ROA not before: Tue 24 Dec 2024 10:39:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397032
IP address blocks: 45.43.163.0/24 maxlen: 24
216.173.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:40:03:c6:b9:f5:e0:0a:69:5c:7e:51:3b:64:80:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Dec 24 10:39:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e068995dec99b7c7e4014a12167bc1a6c43173ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:45:27:24:ef:1d:84:04:bf:80:e0:8e:bf:bb:
b5:6e:ac:6b:8c:07:2b:28:df:f4:ee:f2:0d:47:e2:
68:4c:4d:37:c9:a9:33:e6:e0:72:3e:19:45:f7:6c:
1b:bb:89:cf:00:ca:c1:f0:7b:01:1d:a0:47:15:0b:
ea:69:c8:e2:4f:6c:3e:b1:ac:4d:78:41:e8:91:46:
02:40:78:01:1c:b0:6d:ff:76:62:38:2d:d0:bd:1e:
af:22:b1:e9:e2:78:b5:1b:7b:a5:a1:72:d7:73:91:
bb:eb:f3:89:21:57:56:8e:cd:91:ab:ba:89:f8:58:
3f:c0:e2:04:be:6b:93:db:e7:f6:88:c3:d6:33:2d:
a7:e1:76:be:3a:48:3e:98:f7:34:45:df:d7:85:dd:
d1:a7:24:ae:ef:8a:a2:f7:ec:c5:e0:57:5a:25:e0:
ac:09:b9:f6:25:62:37:2b:e5:ff:01:f2:6c:24:ee:
9f:cc:bd:5f:0d:8c:4a:a9:dc:ed:cc:6b:14:1b:cb:
37:cd:26:1c:76:7b:e6:8c:c2:63:6b:9c:ae:99:ea:
2f:b3:59:b9:05:a7:68:3a:0b:b1:ff:0b:6e:72:9c:
66:60:83:68:87:dc:2d:6e:54:63:b8:da:f4:27:9a:
fc:04:c7:21:8e:ba:00:d0:f5:5f:2c:ad:77:58:7d:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:68:99:5D:EC:99:B7:C7:E4:01:4A:12:16:7B:C1:A6:C4:31:73:EC
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4GiZXeyZt8fkAUoSFnvBpsQxc-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.163.0/24
216.173.77.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6b:78:ae:0e:83:a7:96:75:17:7a:e7:b1:cf:2e:d2:5f:e7:
67:dc:5c:73:8c:68:0a:68:88:5e:ae:c1:05:d8:1b:f4:7d:c6:
72:39:b9:52:be:8b:06:9a:90:93:4e:09:33:a7:ce:48:cd:26:
f5:e5:cd:21:94:bf:a1:8d:f8:b8:07:98:2f:7b:56:ce:07:db:
75:36:62:79:0b:83:be:92:5d:67:75:e2:8b:87:72:d5:92:59:
1e:e6:ba:e6:02:d2:51:f7:91:02:86:9b:e3:a9:1e:d0:03:01:
fa:86:5f:11:16:57:e5:41:8d:8a:ea:62:65:17:47:90:b0:7c:
29:71:ba:0c:f3:46:f6:b6:33:2c:a1:03:0a:b6:50:ef:13:d5:
87:0a:fd:f0:77:db:f4:0d:7a:97:63:e1:72:ce:5f:bf:76:34:
77:cf:c9:0d:d0:b6:4c:58:9f:44:25:44:81:97:c0:a5:29:7e:
99:cb:2d:27:58:83:86:cd:9b:e5:9e:e3:0b:81:62:17:f4:fc:
07:1b:ea:af:8d:64:d9:44:13:14:34:28:7e:61:9e:81:29:e1:
36:2a:21:fe:43:fc:5b:12:e7:12:fa:d4:24:b7:a3:76:b8:88:
a7:ba:a8:aa:95:69:16:aa:45:21:41:fd:fd:1b:ce:c4:e6:ff:
95:b2:db:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZP4QAPGufXgCmlcflE7ZIA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjQxMjI0MTAzOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDY4OTk1ZGVjOTliN2M3ZTQwMTRhMTIxNjdiYzFhNmM0MzE3M2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0UnJO8dhAS/gOCOv7u1bqxrjAcr
KN/07vINR+JoTE03yakz5uByPhlF92wbu4nPAMrB8HsBHaBHFQvqacjiT2w+saxN
eEHokUYCQHgBHLBt/3ZiOC3QvR6vIrHp4ni1G3uloXLXc5G76/OJIVdWjs2Rq7qJ
+Fg/wOIEvmuT2+f2iMPWMy2n4Xa+Okg+mPc0Rd/Xhd3RpySu74qi9+zF4FdaJeCs
Cbn2JWI3K+X/AfJsJO6fzL1fDYxKqdztzGsUG8s3zSYcdnvmjMJja5yumeovs1m5
BadoOgux/wtucpxmYINoh9wtblRjuNr0J5r8BMchjroA0PVfLK13WH0SzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOBomV3smbfH5AFKEhZ7wabEMXPsMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvNEdpWlhleVp0OGZrQVVvU0ZudkJwc1F4Yy13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALSujAwQA
2K1NMA0GCSqGSIb3DQEBCwUAA4IBAQCEa3iuDoOnlnUXeuexzy7SX+dn3FxzjGgK
aIhersEF2Bv0fcZyOblSvosGmpCTTgkzp85IzSb15c0hlL+hjfi4B5gve1bOB9t1
NmJ5C4O+kl1ndeKLh3LVklke5rrmAtJR95EChpvjqR7QAwH6hl8RFlflQY2K6mJl
F0eQsHwpcboM80b2tjMsoQMKtlDvE9WHCv3wd9v0DXqXY+Fyzl+/djR3z8kN0LZM
WJ9EJUSBl8ClKX6Zyy0nWIOGzZvlnuMLgWIX9PwHG+qvjWTZRBMUNCh+YZ6BKeE2
KiH+Q/xbEucS+tQkt6N2uIinuqiqlWkWqkUhQf39G87E5v+VstvL
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:34:38 2025 by rpki-client