Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/nY2Pn7EHuoOsfBfA1PtLbksmxSc.roa
File: nY2Pn7EHuoOsfBfA1PtLbksmxSc.roa (raw, json)
Hash identifier: 8rPur4HG0BL8LTZSFTVLSk+9/yciJUJqrRdocJIDscg=
Subject key identifier: 9D:8D:8F:9F:B1:07:BA:83:AC:7C:17:C0:D4:FB:4B:6E:4B:26:C5:27
Certificate issuer: /CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Certificate serial: 018CC3B6F7AEFFECB60E1B2D8248E4D6AC6D
Authority key identifier: B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/nY2Pn7EHuoOsfBfA1PtLbksmxSc.roa
Signing time: Mon 01 Jan 2024 06:29:57 +0000
ROA not before: Mon 01 Jan 2024 06:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42189
IP address blocks: 45.15.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f7:ae:ff:ec:b6:0e:1b:2d:82:48:e4:d6:ac:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Validity
Not Before: Jan 1 06:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d8d8f9fb107ba83ac7c17c0d4fb4b6e4b26c527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:22:3b:f3:0f:f4:57:a8:91:4a:53:09:36:
d1:b3:7d:31:6c:d0:32:92:04:27:bf:99:93:81:e0:
15:25:cb:a6:25:a0:b3:ce:a1:91:11:ce:d0:ce:5c:
28:03:fe:5b:07:79:97:88:78:25:19:a6:9b:97:b3:
43:fd:e1:d0:b1:f5:ac:92:9b:dd:10:eb:58:51:8f:
f4:52:9a:cc:48:af:ec:22:43:25:22:19:8d:8e:1d:
6d:e0:42:ae:8a:b5:82:6a:83:12:bf:c6:32:8a:c7:
c3:e8:27:ec:f3:eb:c2:ff:fa:b7:62:eb:0e:81:40:
f2:35:6e:f8:e6:5e:9a:41:9a:fb:8a:ae:11:de:02:
7e:56:50:c6:46:87:9b:3c:44:4f:b1:d6:fe:94:43:
4f:01:94:79:22:b4:fc:2b:de:16:50:28:be:43:81:
eb:fc:b1:4b:2e:ca:8d:77:4a:ff:2a:dc:9e:d6:3f:
26:40:70:64:47:bc:2e:da:47:13:d0:61:14:76:4f:
83:0f:47:98:a3:54:48:a6:58:55:5e:be:c8:77:e1:
51:67:4d:02:31:b7:98:e8:a0:0c:82:e0:79:c6:38:
b3:37:8d:42:b4:07:02:be:b6:cf:c2:1c:a4:23:18:
74:26:c0:01:e5:e4:7a:e8:4a:6f:53:6c:82:b1:ea:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8D:8F:9F:B1:07:BA:83:AC:7C:17:C0:D4:FB:4B:6E:4B:26:C5:27
X509v3 Authority Key Identifier:
keyid:B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/nY2Pn7EHuoOsfBfA1PtLbksmxSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.56.0/22
Signature Algorithm: sha256WithRSAEncryption
32:f8:8c:22:31:7b:ee:2e:8f:da:c5:51:7a:7e:50:73:2c:ed:
d1:ed:41:85:7f:28:5d:87:a8:e9:7b:66:67:2c:b5:01:60:73:
6a:c7:23:0b:10:ce:27:56:c4:01:7d:cb:07:fa:ad:9e:9b:27:
c0:10:f0:9b:6f:db:22:4f:3f:91:6e:25:83:19:13:80:f0:39:
ea:96:2f:73:b8:ae:0b:5b:71:e1:92:32:09:a7:2f:20:ac:ea:
c4:e8:7d:48:27:dc:a4:98:76:8e:0e:02:34:0e:b8:9d:12:4d:
2c:8b:95:a3:87:30:96:ae:32:d6:78:9f:27:41:4c:0c:c7:df:
fb:6e:41:15:f0:00:ca:65:75:8b:36:ec:5a:b4:0e:0b:29:39:
ba:d3:d3:18:a6:2b:20:7d:a1:68:ff:f1:35:af:ad:40:95:88:
d8:90:ff:4d:b0:0d:96:20:2e:46:e9:53:4e:e6:e8:1c:ed:3d:
32:ef:0e:a8:29:bd:d1:fb:bf:37:e5:27:ae:4f:a8:7c:28:29:
eb:f4:a4:0d:95:72:84:0c:d5:5a:83:20:6f:d9:90:d8:b5:22:
09:6d:dc:36:63:6e:b4:a9:e4:25:2b:92:c5:0b:0e:a9:9b:3b:
29:af:68:b8:b8:f5:0d:c3:15:d3:5e:90:38:18:00:ac:a2:fd:
63:a0:b2:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtveu/+y2Dhstgkjk1qxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ODJhM2U1MDdhNmYxNDAwZjZmYmUyZTE0OGZhMTY0NDQ0
N2U2Y2QwHhcNMjQwMTAxMDYyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDhkOGY5ZmIxMDdiYTgzYWM3YzE3YzBkNGZiNGI2ZTRiMjZjNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoksiO/MP9FeokUpTCTbRs30xbNAy
kgQnv5mTgeAVJcumJaCzzqGREc7QzlwoA/5bB3mXiHglGaabl7ND/eHQsfWskpvd
EOtYUY/0UprMSK/sIkMlIhmNjh1t4EKuirWCaoMSv8YyisfD6Cfs8+vC//q3YusO
gUDyNW745l6aQZr7iq4R3gJ+VlDGRoebPERPsdb+lENPAZR5IrT8K94WUCi+Q4Hr
/LFLLsqNd0r/Ktye1j8mQHBkR7wu2kcT0GEUdk+DD0eYo1RIplhVXr7Id+FRZ00C
MbeY6KAMguB5xjizN41CtAcCvrbPwhykIxh0JsAB5eR66EpvU2yCseoVEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2Nj5+xB7qDrHwXwNT7S25LJsUnMB8GA1UdIwQY
MBaAFLSCo+UHpvFAD2++LhSPoWRER+bNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdElLajVRZW04VUFQYjc0dUZJLWhaRVJINXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xOGNlNmMtNzEzMi00NDdkLThmMGUt
NzU2Mjc0ZTQ0N2VhLzEvblkyUG43RUh1b09zZkJmQTFQdExia3NteFNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8xOGNlNmMtNzEzMi00NDdkLThmMGUtNzU2Mjc0ZTQ0N2Vh
LzEvdElLajVRZW04VUFQYjc0dUZJLWhaRVJINXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ84MA0G
CSqGSIb3DQEBCwUAA4IBAQAy+IwiMXvuLo/axVF6flBzLO3R7UGFfyhdh6jpe2Zn
LLUBYHNqxyMLEM4nVsQBfcsH+q2emyfAEPCbb9siTz+RbiWDGROA8Dnqli9zuK4L
W3HhkjIJpy8grOrE6H1IJ9ykmHaODgI0DridEk0si5WjhzCWrjLWeJ8nQUwMx9/7
bkEV8ADKZXWLNuxatA4LKTm609MYpisgfaFo//E1r61AlYjYkP9NsA2WIC5G6VNO
5ugc7T0y7w6oKb3R+7835SeuT6h8KCnr9KQNlXKEDNVagyBv2ZDYtSIJbdw2Y260
qeQlK5LFCw6pmzspr2i4uPUNwxXTXpA4GACsov1joLKa
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:46 2025 by rpki-client