Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/a0UQ30S1NSc4BEjkBvDbQ9S3ysU.roa
File: a0UQ30S1NSc4BEjkBvDbQ9S3ysU.roa (raw, json)
Hash identifier: NCtGyeLld8J8UlKq4LmNv/lgq6Ym+qWf12U8Dep2zO4=
Subject key identifier: 6B:45:10:DF:44:B5:35:27:38:04:48:E4:06:F0:DB:43:D4:B7:CA:C5
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 018CC56E5BD0FAAA0A963549DAE6D63C1E9B
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/a0UQ30S1NSc4BEjkBvDbQ9S3ysU.roa
Signing time: Mon 01 Jan 2024 14:29:53 +0000
ROA not before: Mon 01 Jan 2024 14:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210129
IP address blocks: 45.137.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5b:d0:fa:aa:0a:96:35:49:da:e6:d6:3c:1e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Jan 1 14:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b4510df44b53527380448e406f0db43d4b7cac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:ed:02:4d:64:bc:aa:42:fb:64:ff:42:e1:
14:cd:c6:86:31:27:ce:f8:51:1f:bb:69:56:a8:a9:
a8:e3:9c:74:8f:b9:82:4e:6f:00:fe:d1:e5:74:3f:
71:77:c8:cf:91:44:9f:3a:8e:c4:b3:ec:3a:5c:0b:
6a:89:f4:ea:d8:8f:af:3e:eb:7e:ec:29:4f:3a:d3:
08:fd:bc:98:db:72:bb:f4:a8:49:4d:1d:ab:bf:7f:
17:67:0f:5c:1e:e3:19:18:8b:66:0e:1e:d2:06:ad:
83:cd:a3:c4:ab:7c:93:8e:cb:bc:8a:d9:19:e8:08:
4f:8d:44:c4:8d:5f:0e:9d:18:36:5c:ba:39:e7:28:
4c:9d:f0:45:fc:87:f9:48:64:a0:e3:ec:79:55:3f:
60:69:95:7b:35:ca:b6:12:f3:7e:a7:69:0b:97:ec:
7a:1b:0b:21:76:ae:a3:7a:90:9d:71:4f:ac:c9:25:
d7:dd:7b:16:e4:47:bf:9f:d1:a9:97:d9:b3:2a:a7:
5d:08:d6:91:41:e8:c4:67:2f:90:10:1c:1d:cb:42:
0c:5b:11:23:97:f6:45:21:73:10:53:28:32:de:ee:
58:f7:4c:32:d9:00:fb:e4:81:4e:2f:49:10:6d:12:
c6:83:97:f1:a4:4f:8f:a2:5e:49:65:22:33:ce:48:
e2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:45:10:DF:44:B5:35:27:38:04:48:E4:06:F0:DB:43:D4:B7:CA:C5
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/a0UQ30S1NSc4BEjkBvDbQ9S3ysU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.232.0/22
Signature Algorithm: sha256WithRSAEncryption
97:b5:04:c3:01:77:2c:b7:9c:a5:08:42:cb:66:7d:79:3b:ea:
d9:43:12:6e:41:1d:a1:56:25:19:27:69:cd:5c:27:f8:75:60:
3b:71:a3:e9:e2:eb:89:07:ab:b9:41:5a:c5:43:f8:20:23:36:
49:40:a4:30:61:08:08:cf:5a:a1:3a:c5:47:0b:51:c5:03:24:
bd:f8:15:1b:4d:c7:09:f8:90:bb:a8:85:55:5f:10:90:d6:f5:
fd:61:26:8c:75:be:f0:67:db:df:59:3f:df:3a:15:77:0c:12:
fc:90:0d:b2:d4:85:9f:e6:d1:e4:62:42:ec:d6:a8:07:b8:fd:
00:55:ae:83:0a:7d:2a:72:d8:a7:22:b5:34:a2:a8:25:2b:d9:
eb:0c:a0:dc:39:9f:b0:b4:c9:17:c2:eb:14:80:7a:31:40:b4:
f1:ac:65:fb:8a:f0:94:03:9f:92:cc:d6:80:19:e6:29:1f:c0:
b2:04:36:0c:b0:2d:4a:0c:e3:56:b7:08:7f:aa:c9:db:c7:02:
fc:a7:d3:2a:11:25:f5:b2:f4:a4:65:95:ec:55:52:b6:21:46:
10:81:c4:be:55:24:78:fb:fb:5b:87:de:51:02:5a:a9:de:9a:
ca:af:26:32:94:9f:a9:1d:41:a1:db:2d:02:a5:9b:c2:c3:73:
05:d5:3f:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFblvQ+qoKljVJ2ubWPB6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGFjMGIxMDY2ZDBkZWZjYjE2OTU2NDNkY2JhYTA3Mzk5
NzVjYTgwHhcNMjQwMTAxMTQyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjQ1MTBkZjQ0YjUzNTI3MzgwNDQ4ZTQwNmYwZGI0M2Q0YjdjYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogXtAk1kvKpC+2T/QuEUzcaGMSfO
+FEfu2lWqKmo45x0j7mCTm8A/tHldD9xd8jPkUSfOo7Es+w6XAtqifTq2I+vPut+
7ClPOtMI/byY23K79KhJTR2rv38XZw9cHuMZGItmDh7SBq2DzaPEq3yTjsu8itkZ
6AhPjUTEjV8OnRg2XLo55yhMnfBF/If5SGSg4+x5VT9gaZV7Ncq2EvN+p2kLl+x6
Gwshdq6jepCdcU+sySXX3XsW5Ee/n9Gpl9mzKqddCNaRQejEZy+QEBwdy0IMWxEj
l/ZFIXMQUygy3u5Y90wy2QD75IFOL0kQbRLGg5fxpE+Pol5JZSIzzkjizQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGtFEN9EtTUnOARI5Abw20PUt8rFMB8GA1UdIwQY
MBaAFNmKwLEGbQ3vyxaVZD3Lqgc5l1yoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgt
ZTM1ZDJkNWYwMGY4LzEvYTBVUTMwUzFOU2M0QkVqa0J2RGJROVMzeXNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgtZTM1ZDJkNWYwMGY4
LzEvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYnoMA0G
CSqGSIb3DQEBCwUAA4IBAQCXtQTDAXcst5ylCELLZn15O+rZQxJuQR2hViUZJ2nN
XCf4dWA7caPp4uuJB6u5QVrFQ/ggIzZJQKQwYQgIz1qhOsVHC1HFAyS9+BUbTccJ
+JC7qIVVXxCQ1vX9YSaMdb7wZ9vfWT/fOhV3DBL8kA2y1IWf5tHkYkLs1qgHuP0A
Va6DCn0qctinIrU0oqglK9nrDKDcOZ+wtMkXwusUgHoxQLTxrGX7ivCUA5+SzNaA
GeYpH8CyBDYMsC1KDONWtwh/qsnbxwL8p9MqESX1svSkZZXsVVK2IUYQgcS+VSR4
+/tbh95RAlqp3prKryYylJ+pHUGh2y0CpZvCw3MF1T9g
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:53 2025 by rpki-client