Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/IdODwALyxGJJx-QiM5U0N7_ePP4.roa
File: IdODwALyxGJJx-QiM5U0N7_ePP4.roa (raw, json)
Hash identifier: SfoA/wgX2pdah03xLe3OF3nZxV9bMNPRiJ2Jr7W3cVs=
Subject key identifier: 21:D3:83:C0:02:F2:C4:62:49:C7:E4:22:33:95:34:37:BF:DE:3C:FE
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01963DDC0266F57658BD55803F188BEF8F69
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/IdODwALyxGJJx-QiM5U0N7_ePP4.roa
Signing time: Wed 16 Apr 2025 09:09:10 +0000
ROA not before: Wed 16 Apr 2025 09:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 45.150.32.0/24 maxlen: 24
45.150.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:dc:02:66:f5:76:58:bd:55:80:3f:18:8b:ef:8f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 16 09:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21d383c002f2c46249c7e42233953437bfde3cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:59:d3:18:0b:ec:07:2b:27:f4:91:cb:03:
39:44:e5:95:9b:f8:3f:fe:2a:01:5a:93:ca:17:20:
bc:84:ed:60:10:9d:f2:ed:66:09:16:38:84:59:d5:
a3:4b:0a:76:d0:01:3d:1e:ca:10:58:fb:62:fc:5b:
a7:be:4f:e4:7f:47:ba:d5:ec:3f:fd:6a:1f:fb:87:
85:aa:96:c0:01:51:59:d1:c5:10:f0:be:79:9e:74:
77:fe:f8:5b:9f:16:cc:07:82:ab:05:22:ee:44:09:
82:5a:29:8f:db:59:bb:e1:1e:92:14:52:1f:04:d1:
96:da:5d:9e:2a:78:be:41:86:da:f6:11:d5:a5:1a:
c9:d6:93:c7:11:e1:0b:70:8a:95:5c:7c:87:57:3d:
e7:b2:b5:f9:37:cf:76:31:88:a4:2a:9f:12:30:f7:
ac:bd:99:8e:66:be:aa:db:75:9a:15:44:4a:49:75:
c5:1a:df:1f:38:67:6b:65:68:b6:8c:fa:38:ad:42:
e3:1f:e7:05:b6:b7:b4:38:c4:ed:f9:66:b1:57:b7:
06:0b:c7:a3:29:91:d9:6e:ae:a0:72:54:2f:1b:8a:
85:2f:2e:bb:7e:c0:b3:33:7a:29:75:27:dc:2a:70:
0d:f8:71:a1:c3:55:b8:56:22:92:9f:17:21:26:56:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D3:83:C0:02:F2:C4:62:49:C7:E4:22:33:95:34:37:BF:DE:3C:FE
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/IdODwALyxGJJx-QiM5U0N7_ePP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.32.0/23
Signature Algorithm: sha256WithRSAEncryption
00:00:91:e4:4a:13:56:9b:22:00:68:a8:0a:e0:0d:27:5e:d9:
53:8e:68:6e:02:0d:82:c3:5a:2e:63:70:23:bc:f2:9e:cf:89:
0c:8c:df:42:af:4e:3c:27:91:3a:df:f9:f9:fd:40:52:df:4c:
6a:80:6d:24:54:bd:df:2e:97:e4:da:2c:86:35:e5:98:1c:82:
e1:f5:75:d8:25:fa:8a:ed:7a:c8:ec:ac:14:13:a1:07:82:26:
b9:64:a0:5c:21:99:6e:59:22:5c:57:f7:3a:7e:01:4e:fa:a7:
1d:30:40:33:99:a4:e6:76:96:68:6f:9e:56:42:c4:f0:86:f6:
18:75:51:cf:28:bb:26:f0:96:f2:33:5d:2b:88:d7:7f:6a:3c:
d6:9a:77:49:10:d3:3d:51:b5:a6:8f:5f:a0:3f:c4:1c:f4:f2:
b5:b7:5c:42:4e:94:03:15:11:10:c7:29:99:d7:f9:3b:09:ec:
ac:77:fc:ca:12:36:d9:d9:8e:cf:f3:4b:53:40:ee:56:3b:5d:
83:20:d1:14:fd:b1:58:53:d0:07:d2:88:0f:95:18:a4:c1:d7:
60:d0:7a:28:ae:78:7f:91:44:01:0c:d1:a5:67:f4:4d:b6:ef:
64:43:09:59:90:f3:49:2f:a8:bb:32:ed:60:4b:6a:d1:b3:a1:
d8:a2:16:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZY93AJm9XZYvVWAPxiL749pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwNDE2MDkwOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWQzODNjMDAyZjJjNDYyNDljN2U0MjIzMzk1MzQzN2JmZGUzY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI1Z0xgL7AcrJ/SRywM5ROWVm/g/
/ioBWpPKFyC8hO1gEJ3y7WYJFjiEWdWjSwp20AE9HsoQWPti/Funvk/kf0e61ew/
/Wof+4eFqpbAAVFZ0cUQ8L55nnR3/vhbnxbMB4KrBSLuRAmCWimP21m74R6SFFIf
BNGW2l2eKni+QYba9hHVpRrJ1pPHEeELcIqVXHyHVz3nsrX5N892MYikKp8SMPes
vZmOZr6q23WaFURKSXXFGt8fOGdrZWi2jPo4rULjH+cFtre0OMTt+WaxV7cGC8ej
KZHZbq6gclQvG4qFLy67fsCzM3opdSfcKnAN+HGhw1W4ViKSnxchJlbGOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCHTg8AC8sRiScfkIjOVNDe/3jz+MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvSWRPRHdBTHl4R0pKeC1RaU01VTBON19lUFA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZYgMA0G
CSqGSIb3DQEBCwUAA4IBAQAAAJHkShNWmyIAaKgK4A0nXtlTjmhuAg2Cw1ouY3Aj
vPKez4kMjN9Cr048J5E63/n5/UBS30xqgG0kVL3fLpfk2iyGNeWYHILh9XXYJfqK
7XrI7KwUE6EHgia5ZKBcIZluWSJcV/c6fgFO+qcdMEAzmaTmdpZob55WQsTwhvYY
dVHPKLsm8JbyM10riNd/ajzWmndJENM9UbWmj1+gP8Qc9PK1t1xCTpQDFREQxymZ
1/k7Ceysd/zKEjbZ2Y7P80tTQO5WO12DINEU/bFYU9AH0ogPlRikwddg0Hoornh/
kUQBDNGlZ/RNtu9kQwlZkPNJL6i7Mu1gS2rRs6HYohZ4
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:04 2025 by rpki-client