Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/2xR0g8ruMmU6DPDkSWHT5vn6Lcc.roa
File: 2xR0g8ruMmU6DPDkSWHT5vn6Lcc.roa (raw, json)
Hash identifier: yO4qbHF/G6f0ZmyQLcvyWEjFMwNF7oh8qn7MJVbMh5E=
Subject key identifier: DB:14:74:83:CA:EE:32:65:3A:0C:F0:E4:49:61:D3:E6:F9:FA:2D:C7
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 018CC86F78BFCAF9C3338A9061EEB739D1F3
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/2xR0g8ruMmU6DPDkSWHT5vn6Lcc.roa
Signing time: Tue 02 Jan 2024 04:29:57 +0000
ROA not before: Tue 02 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49028
IP address blocks: 45.145.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:78:bf:ca:f9:c3:33:8a:90:61:ee:b7:39:d1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Jan 2 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db147483caee32653a0cf0e44961d3e6f9fa2dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9b:f9:a2:a3:7b:d7:2e:2c:9a:11:76:e7:32:
51:63:5c:11:82:da:2f:94:66:51:e8:df:30:00:89:
ac:3e:c4:4f:2a:c6:9c:c7:d8:5c:ea:4d:9a:2c:4d:
14:19:67:29:c2:03:8f:10:29:bb:e6:b6:9c:aa:85:
ad:5d:66:60:d5:04:c0:02:2b:22:90:6b:04:17:b4:
b7:b0:4f:39:c3:6c:82:79:ff:1f:3a:5e:c9:a1:cc:
89:ca:90:c7:41:a7:31:eb:8d:e9:3c:43:d0:3c:20:
a7:c3:a8:f7:e7:0a:83:da:e5:32:2c:d4:9d:a4:4f:
cd:d8:83:7d:57:e9:db:90:54:fe:95:86:69:cb:64:
44:67:89:05:51:06:5e:36:c2:a9:7a:e1:f1:0b:98:
ff:9d:d3:5f:f6:9a:e1:69:e5:9b:52:56:ac:63:d7:
85:82:59:ae:59:bf:e9:40:37:0a:0b:d4:a9:ab:c6:
31:a4:fa:47:5c:2f:3f:b0:e0:14:51:a1:e3:62:1f:
ea:7d:8a:bb:d3:fc:9c:ba:2d:e5:fe:36:83:1c:ed:
b8:99:99:51:da:1b:4f:7c:76:a6:d0:fd:0a:d9:9a:
39:f6:4e:26:70:f2:e4:ea:d4:9d:cf:44:0f:bb:11:
e4:7c:29:33:44:39:a9:03:e1:64:4b:8a:ac:fd:8d:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:74:83:CA:EE:32:65:3A:0C:F0:E4:49:61:D3:E6:F9:FA:2D:C7
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/2xR0g8ruMmU6DPDkSWHT5vn6Lcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.165.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3e:14:fb:6b:e5:a8:40:2f:53:64:43:9a:a9:23:a5:2b:92:
6a:30:e1:09:31:02:7a:3b:38:f8:e5:3f:fb:fe:26:07:27:2f:
25:b3:b1:4a:ed:b5:b7:7d:e5:60:9b:47:72:b2:c3:f1:43:45:
92:c1:0b:58:9d:22:9b:27:78:fd:93:2e:89:b0:85:f0:69:8e:
99:b5:e6:64:67:9a:be:f3:8c:28:59:b5:e0:2f:b8:20:79:33:
06:1f:db:36:89:4d:4a:95:e1:d2:af:bf:e7:21:a2:06:12:e5:
a6:83:29:b5:70:bb:f2:03:b3:19:5e:01:5a:3a:f9:e8:56:0e:
42:aa:e7:d1:21:15:21:ca:6e:2e:8b:1c:39:6f:89:2e:a5:b8:
ee:86:1f:c0:59:c7:3b:5b:6a:49:31:1c:96:f1:f6:25:27:91:
cf:12:cd:56:ff:e1:83:47:44:4d:ad:59:84:21:29:c5:d9:e1:
3d:1c:87:ba:e7:90:4d:0f:4f:7c:ce:49:35:a7:8d:d8:57:ec:
3c:7e:95:8b:63:7a:60:a3:60:6a:ec:5c:16:76:a6:60:bf:50:
f5:23:74:8f:54:37:99:6f:ac:7b:e8:b6:98:39:c2:3a:f0:7b:
0d:fc:0d:07:e4:a6:83:65:f0:df:3a:70:60:42:9b:1a:16:34:
9a:1a:9c:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb3i/yvnDM4qQYe63OdHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MTcxNjI4NzdkYTlmNDAzMGJiY2I5ZmU4YWMxNDNlNmFi
Mjg3MWIwHhcNMjQwMTAyMDQyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjE0NzQ4M2NhZWUzMjY1M2EwY2YwZTQ0OTYxZDNlNmY5ZmEyZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJv5oqN71y4smhF25zJRY1wRgtov
lGZR6N8wAImsPsRPKsacx9hc6k2aLE0UGWcpwgOPECm75racqoWtXWZg1QTAAisi
kGsEF7S3sE85w2yCef8fOl7JocyJypDHQacx643pPEPQPCCnw6j35wqD2uUyLNSd
pE/N2IN9V+nbkFT+lYZpy2REZ4kFUQZeNsKpeuHxC5j/ndNf9prhaeWbUlasY9eF
glmuWb/pQDcKC9Spq8YxpPpHXC8/sOAUUaHjYh/qfYq70/ycui3l/jaDHO24mZlR
2htPfHam0P0K2Zo59k4mcPLk6tSdz0QPuxHkfCkzRDmpA+FkS4qs/Y1YrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNsUdIPK7jJlOgzw5Elh0+b5+i3HMB8GA1UdIwQY
MBaAFLgXFih32p9AMLvLn+isFD5qsocbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJjV0tIZmFuMEF3dTh1ZjZLd1VQbXF5aHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8xNmI3YjQtYmIyMS00YjNlLWFlYjQt
YjI3Y2EyOTFiZDc3LzEvMnhSMGc4cnVNbVU2RFBEa1NXSFQ1dm42TGNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8xNmI3YjQtYmIyMS00YjNlLWFlYjQtYjI3Y2EyOTFiZDc3
LzEvdUJjV0tIZmFuMEF3dTh1ZjZLd1VQbXF5aHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGlMA0G
CSqGSIb3DQEBCwUAA4IBAQBEPhT7a+WoQC9TZEOaqSOlK5JqMOEJMQJ6Ozj45T/7
/iYHJy8ls7FK7bW3feVgm0dyssPxQ0WSwQtYnSKbJ3j9ky6JsIXwaY6ZteZkZ5q+
84woWbXgL7ggeTMGH9s2iU1KleHSr7/nIaIGEuWmgym1cLvyA7MZXgFaOvnoVg5C
qufRIRUhym4uixw5b4kupbjuhh/AWcc7W2pJMRyW8fYlJ5HPEs1W/+GDR0RNrVmE
ISnF2eE9HIe655BND098zkk1p43YV+w8fpWLY3pgo2Bq7FwWdqZgv1D1I3SPVDeZ
b6x76LaYOcI68HsN/A0H5KaDZfDfOnBgQpsaFjSaGpy/
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:36 2025 by rpki-client