Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/l8bQCqmT9o45n89p_NA6ddV2ujg.roa
File: l8bQCqmT9o45n89p_NA6ddV2ujg.roa (raw, json)
Hash identifier: KObuTRtDuY9RSFooQIluxq8axsWlMpfMorEzjIUIlFk=
Subject key identifier: 97:C6:D0:0A:A9:93:F6:8E:39:9F:CF:69:FC:D0:3A:75:D5:76:BA:38
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BCA580E935689C6274DFAB510550C2
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/l8bQCqmT9o45n89p_NA6ddV2ujg.roa
Signing time: Tue 02 Jan 2024 10:33:52 +0000
ROA not before: Tue 02 Jan 2024 10:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3917
IP address blocks: 145.26.0.0/16 maxlen: 16
145.26.56.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a5:80:e9:35:68:9c:62:74:df:ab:51:05:50:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97c6d00aa993f68e399fcf69fcd03a75d576ba38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:fa:13:19:a5:bb:a8:ac:3f:56:3f:29:1f:
4b:4c:63:ea:73:c2:cd:8b:e7:c0:8d:47:f1:8d:67:
cb:5d:8b:61:7c:df:77:2c:e5:24:ab:d3:a2:01:06:
19:bc:22:0e:c9:6b:c0:87:81:53:b5:3c:3c:93:07:
ad:c3:f4:96:16:f8:47:04:61:e0:fe:7b:fd:a3:76:
50:8c:d3:19:5b:f8:e9:fa:38:b1:eb:0d:97:6e:da:
3f:14:45:d2:ad:1a:db:4c:8e:3a:18:da:81:e2:b6:
c0:0a:fb:42:e2:e6:fd:4d:9c:ff:66:a0:4e:ff:ef:
5d:05:58:cc:c7:dc:6f:5b:f8:76:6f:53:d6:c6:b0:
5f:02:b3:ed:3e:7f:e7:ef:03:94:dc:dd:1d:63:da:
71:17:9e:da:cc:e1:47:cb:72:e2:12:9b:f1:76:4e:
da:b8:95:41:62:7b:7a:19:80:f9:13:a7:cf:b5:7d:
de:f7:5e:fa:cc:21:61:8e:21:1e:17:53:7f:1c:cd:
f3:fe:2c:4e:70:30:71:e1:bb:eb:f2:b1:cd:09:05:
e8:e4:e5:65:a6:88:21:91:d4:67:c1:b6:7a:18:80:
9d:00:94:f3:a9:b0:5d:d8:54:47:cb:c6:03:b4:60:
03:8a:29:24:db:42:c5:71:10:7d:01:93:51:2f:9d:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C6:D0:0A:A9:93:F6:8E:39:9F:CF:69:FC:D0:3A:75:D5:76:BA:38
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/l8bQCqmT9o45n89p_NA6ddV2ujg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.26.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:e5:e3:90:2d:da:29:fd:0a:72:f7:18:f7:27:d2:c5:3f:a8:
93:b5:0a:60:36:0c:33:7d:d6:fc:c8:15:c8:11:4c:7b:68:6d:
b3:c7:41:a0:ba:80:99:bc:92:c2:93:e9:2d:c7:3e:ec:42:f1:
af:6e:66:68:b5:21:fa:3e:43:43:eb:eb:14:5f:69:b9:28:3b:
ed:14:f0:17:6f:ba:cf:18:08:98:f2:17:73:7a:3e:1f:5d:2d:
db:5b:e1:55:75:17:5b:a3:af:20:a7:5d:2b:89:ac:59:69:52:
b5:45:85:43:a8:92:35:d2:e8:e8:19:f3:87:df:81:11:c9:00:
bb:58:cd:a6:93:c2:72:18:af:4e:42:b6:9b:28:bd:b1:2a:80:
a6:95:88:fc:84:c5:70:8d:4f:25:58:d2:d5:55:50:10:7d:b3:
88:ed:da:a9:5a:4e:e9:83:82:bb:dd:e0:2d:f8:f8:e4:a7:ce:
d3:91:df:cf:cc:08:a1:86:56:b8:cf:7f:fc:72:7d:17:b3:96:
32:fc:9d:b0:59:80:96:61:cd:71:ec:02:86:4d:69:59:b5:38:
c3:1f:41:71:05:6c:e5:0a:e1:0f:7e:4a:3f:7d:98:61:9a:4e:
62:a6:c7:34:4f:54:56:21:91:37:88:ab:c0:94:91:f2:bd:4d:
b6:84:d1:2f
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzJvKWA6TVonGJ036tRBVDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjQwMTAyMTAzMzUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2M2ZDAwYWE5OTNmNjhlMzk5ZmNmNjlmY2QwM2E3NWQ1NzZiYTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohj6Exmlu6isP1Y/KR9LTGPqc8LN
i+fAjUfxjWfLXYthfN93LOUkq9OiAQYZvCIOyWvAh4FTtTw8kwetw/SWFvhHBGHg
/nv9o3ZQjNMZW/jp+jix6w2Xbto/FEXSrRrbTI46GNqB4rbACvtC4ub9TZz/ZqBO
/+9dBVjMx9xvW/h2b1PWxrBfArPtPn/n7wOU3N0dY9pxF57azOFHy3LiEpvxdk7a
uJVBYnt6GYD5E6fPtX3e9176zCFhjiEeF1N/HM3z/ixOcDBx4bvr8rHNCQXo5OVl
poghkdRnwbZ6GICdAJTzqbBd2FRHy8YDtGADiikk20LFcRB9AZNRL52OUQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFJfG0Aqpk/aOOZ/PafzQOnXVdro4MB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvbDhiUUNxbVQ5bzQ1bjg5cF9OQTZkZFYydWpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkRowDQYJ
KoZIhvcNAQELBQADggEBAD7l45At2in9CnL3GPcn0sU/qJO1CmA2DDN91vzIFcgR
THtobbPHQaC6gJm8ksKT6S3HPuxC8a9uZmi1Ifo+Q0Pr6xRfabkoO+0U8Bdvus8Y
CJjyF3N6Ph9dLdtb4VV1F1ujryCnXSuJrFlpUrVFhUOokjXS6OgZ84ffgRHJALtY
zaaTwnIYr05CtpsovbEqgKaViPyExXCNTyVY0tVVUBB9s4jt2qlaTumDgrvd4C34
+OSnztOR38/MCKGGVrjPf/xyfRezljL8nbBZgJZhzXHsAoZNaVm1OMMfQXEFbOUK
4Q9+Sj99mGGaTmKmxzRPVFYhkTeIq8CUkfK9TbaE0S8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:00 2025 by rpki-client