Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2PTUVcq44woP6cKN4AG2huaY8uE.roa
File: 2PTUVcq44woP6cKN4AG2huaY8uE.roa (raw, json)
Hash identifier: Edc8zNKhfZrW9cs+b0qYhvjj7Bj8G9RuTp6QF2JS9Co=
Subject key identifier: D8:F4:D4:55:CA:B8:E3:0A:0F:E9:C2:8D:E0:01:B6:86:E6:98:F2:E1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019368D8F99E148A84239FA71702EBA5E8DF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2PTUVcq44woP6cKN4AG2huaY8uE.roa
Signing time: Tue 26 Nov 2024 14:21:10 +0000
ROA not before: Tue 26 Nov 2024 14:21:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216300
IP address blocks: 45.87.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:d8:f9:9e:14:8a:84:23:9f:a7:17:02:eb:a5:e8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 26 14:21:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8f4d455cab8e30a0fe9c28de001b686e698f2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:03:d4:5a:37:f6:ab:64:07:01:6f:8e:f4:
13:ee:38:c3:b0:82:20:f3:11:4f:86:1f:c8:90:8a:
ea:8b:d7:6a:5f:5a:55:50:67:bb:33:8f:d8:cd:dc:
0d:28:a8:e7:09:2f:08:32:a0:3a:38:04:fd:d1:5b:
0b:14:ab:d1:dd:9d:5f:50:76:8f:61:6d:17:b2:da:
91:ff:40:76:6f:96:43:2c:93:71:db:df:61:27:f4:
51:2b:5f:71:bd:89:20:56:31:de:d9:8f:0e:a7:58:
3d:63:e0:5d:14:b4:f6:c8:ed:3a:50:85:6e:3a:00:
52:6c:89:54:c6:36:a3:53:58:95:d5:a5:b7:1a:d3:
78:79:2c:ed:74:6e:d5:59:44:80:d8:06:9f:84:b3:
dd:4f:3c:16:bd:6d:17:ad:76:b7:9a:af:48:35:97:
b6:48:f1:b4:63:7c:2a:14:85:c9:6c:09:b1:d3:8d:
f6:70:ca:f4:77:1e:e9:b6:f1:5b:eb:39:09:7c:64:
7c:b7:90:db:a4:a6:90:55:05:6c:23:d1:ac:e3:0b:
d3:3e:17:f3:42:47:aa:00:62:5e:53:93:e2:5f:4f:
ad:0e:e1:65:e4:55:9f:45:d2:4b:4f:8d:5a:a0:8d:
9e:9d:2e:1c:a0:22:8d:03:21:79:7b:d8:8b:8b:6b:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F4:D4:55:CA:B8:E3:0A:0F:E9:C2:8D:E0:01:B6:86:E6:98:F2:E1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2PTUVcq44woP6cKN4AG2huaY8uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.121.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4e:ed:03:99:54:96:ff:16:6d:d0:10:af:19:57:1d:85:20:
fc:32:bb:86:86:1c:b4:ac:ee:ad:87:fe:82:54:20:55:b5:34:
ef:d3:d1:9d:f8:bc:37:10:51:50:ef:ba:ff:75:b7:e1:67:a6:
17:26:bf:c9:eb:65:50:37:f3:8a:69:18:48:f2:29:21:bd:c4:
37:56:17:0f:2e:f5:e7:22:54:92:5d:89:d4:d6:93:81:0e:e1:
61:46:db:db:ac:ba:9c:6b:82:dd:c2:6c:00:6d:4e:d8:f1:46:
29:16:f4:a9:8a:fe:f9:26:ed:b4:bf:00:1b:ed:f8:f5:16:cd:
66:27:a0:4c:df:6d:51:74:f4:8e:b5:27:f5:86:3b:6f:a9:7b:
c2:25:36:67:3e:f3:22:a3:1c:3e:31:9b:6c:27:93:81:58:51:
94:ee:31:ec:c2:0e:f0:9e:8d:0e:7b:f0:40:06:17:e2:04:44:
e5:39:31:92:8a:b5:d7:df:de:b4:56:40:fa:50:45:00:12:c2:
2a:80:7e:42:d9:75:a6:8b:9a:db:9d:91:17:ce:51:25:99:ba:
22:5c:f3:b0:8e:8d:42:6e:14:6e:89:00:6c:7a:78:41:9b:b6:
3c:53:93:8c:30:3b:26:b9:9b:b2:20:e3:f1:ab:c3:f2:ee:58:
1d:92:66:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNo2PmeFIqEI5+nFwLrpejfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMTI2MTQyMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGY0ZDQ1NWNhYjhlMzBhMGZlOWMyOGRlMDAxYjY4NmU2OThmMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+ED1Fo39qtkBwFvjvQT7jjDsIIg
8xFPhh/IkIrqi9dqX1pVUGe7M4/YzdwNKKjnCS8IMqA6OAT90VsLFKvR3Z1fUHaP
YW0XstqR/0B2b5ZDLJNx299hJ/RRK19xvYkgVjHe2Y8Op1g9Y+BdFLT2yO06UIVu
OgBSbIlUxjajU1iV1aW3GtN4eSztdG7VWUSA2AafhLPdTzwWvW0XrXa3mq9INZe2
SPG0Y3wqFIXJbAmx0432cMr0dx7ptvFb6zkJfGR8t5DbpKaQVQVsI9Gs4wvTPhfz
QkeqAGJeU5PiX0+tDuFl5FWfRdJLT41aoI2enS4coCKNAyF5e9iLi2sx2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNj01FXKuOMKD+nCjeABtobmmPLhMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvMlBUVVZjcTQ0d29QNmNLTjRBRzJodWFZOHVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVd5MA0G
CSqGSIb3DQEBCwUAA4IBAQCXTu0DmVSW/xZt0BCvGVcdhSD8MruGhhy0rO6th/6C
VCBVtTTv09Gd+Lw3EFFQ77r/dbfhZ6YXJr/J62VQN/OKaRhI8ikhvcQ3VhcPLvXn
IlSSXYnU1pOBDuFhRtvbrLqca4LdwmwAbU7Y8UYpFvSpiv75Ju20vwAb7fj1Fs1m
J6BM321RdPSOtSf1hjtvqXvCJTZnPvMioxw+MZtsJ5OBWFGU7jHswg7wno0Oe/BA
BhfiBETlOTGSirXX3960VkD6UEUAEsIqgH5C2XWmi5rbnZEXzlElmboiXPOwjo1C
bhRuiQBsenhBm7Y8U5OMMDsmuZuyIOPxq8Py7lgdkmYS
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:41 2025 by rpki-client