Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ueIGJhVF90kh2MavGwuCYgAnLJ0.roa
File: ueIGJhVF90kh2MavGwuCYgAnLJ0.roa (raw, json)
Hash identifier: DKeDH9eD+bBJxRa+uzuu9WStKPCa/+saAfL1BKUXuRY=
Subject key identifier: B9:E2:06:26:15:45:F7:49:21:D8:C6:AF:1B:0B:82:62:00:27:2C:9D
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019396A44BF3D3CC3A5D965472DDF0638FEB
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ueIGJhVF90kh2MavGwuCYgAnLJ0.roa
Signing time: Thu 05 Dec 2024 11:46:09 +0000
ROA not before: Thu 05 Dec 2024 11:46:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212372
IP address blocks: 45.83.0.0/23 maxlen: 23
45.83.2.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:a4:4b:f3:d3:cc:3a:5d:96:54:72:dd:f0:63:8f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Dec 5 11:46:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9e206261545f74921d8c6af1b0b826200272c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:37:3a:0d:0e:34:47:09:66:9d:70:1f:1b:
33:22:98:9d:b5:30:3b:8d:ff:75:d4:be:84:5b:25:
fd:03:55:34:c2:3f:5c:18:0d:27:3e:14:01:4f:57:
85:19:0b:91:02:2f:fc:75:48:f6:5c:e2:f4:ad:26:
69:77:10:b8:5f:01:8c:af:4d:60:18:48:28:20:01:
3c:80:0e:ce:35:84:10:79:6b:13:37:27:ff:1c:03:
67:91:93:77:5b:0d:e4:52:98:03:83:49:84:f5:c7:
af:34:8b:33:d1:18:b2:5d:d9:42:ae:25:de:4f:4c:
6b:3f:58:3a:55:ac:a9:a6:a9:20:cb:20:9a:2a:67:
a2:ec:f3:64:a7:1f:f6:f5:5f:be:a7:a6:b9:78:37:
5d:34:3c:67:06:8e:36:56:78:aa:00:d2:79:5b:68:
13:f4:d2:1d:87:81:34:9f:0a:3d:7d:0b:94:e8:7b:
cd:a7:36:03:17:b8:0a:e5:28:3a:67:dc:f1:4b:63:
8e:d7:97:c6:44:73:37:dc:d1:4c:d6:82:56:37:92:
04:a8:e5:24:64:82:16:7d:cf:66:66:04:9a:62:38:
ab:91:bd:f8:ed:4a:0d:2c:31:bd:aa:18:e2:57:72:
69:26:89:ee:81:b6:09:6a:6b:d7:75:03:de:59:59:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E2:06:26:15:45:F7:49:21:D8:C6:AF:1B:0B:82:62:00:27:2C:9D
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ueIGJhVF90kh2MavGwuCYgAnLJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.0.0/22
Signature Algorithm: sha256WithRSAEncryption
16:13:dc:2e:78:11:86:9b:66:ae:a8:6b:a7:68:b9:da:16:e8:
b3:51:a7:7f:14:1c:84:fc:f5:78:9e:cc:6e:46:3e:d0:62:4d:
e3:75:46:4c:3b:39:95:d8:9c:98:10:75:51:01:aa:99:a2:ac:
53:3a:c3:0f:8f:3e:24:a9:76:11:e9:e7:1d:0b:c1:95:aa:93:
80:35:de:74:c2:a8:41:f2:f0:62:d9:b7:9d:af:3a:6a:28:f7:
70:dd:06:fe:ff:2f:78:41:7e:5d:f5:34:f6:dd:cf:89:c9:c3:
b7:10:4e:7a:ff:c0:71:0b:63:1e:f0:a2:8a:ad:ad:d2:3a:a1:
f7:ce:69:f9:a5:ca:20:46:b0:73:35:0d:13:9d:ac:f9:cb:87:
cb:e1:83:1b:8d:da:8b:0d:e6:49:f1:da:d0:7e:75:4a:0f:c1:
35:43:b1:da:f5:7a:c3:31:57:1b:b5:99:ff:a1:03:21:f8:34:
15:e6:6d:d0:c3:1c:f5:ee:9d:a2:10:c5:ab:a2:af:e9:cc:5f:
e6:71:07:ee:ba:df:6a:8d:18:f3:49:16:47:b8:96:5a:28:6c:
5a:ef:b5:0e:5a:ce:30:6e:aa:af:21:7b:d3:f3:8d:a3:39:51:
3a:f6:94:12:4d:82:de:41:9b:fb:52:01:c7:6e:cc:45:25:23:
a3:43:12:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOWpEvz08w6XZZUct3wY4/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjQxMjA1MTE0NjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWUyMDYyNjE1NDVmNzQ5MjFkOGM2YWYxYjBiODI2MjAwMjcyYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBE3Og0ONEcJZp1wHxszIpidtTA7
jf911L6EWyX9A1U0wj9cGA0nPhQBT1eFGQuRAi/8dUj2XOL0rSZpdxC4XwGMr01g
GEgoIAE8gA7ONYQQeWsTNyf/HANnkZN3Ww3kUpgDg0mE9cevNIsz0RiyXdlCriXe
T0xrP1g6VayppqkgyyCaKmei7PNkpx/29V++p6a5eDddNDxnBo42VniqANJ5W2gT
9NIdh4E0nwo9fQuU6HvNpzYDF7gK5Sg6Z9zxS2OO15fGRHM33NFM1oJWN5IEqOUk
ZIIWfc9mZgSaYjirkb347UoNLDG9qhjiV3JpJonugbYJamvXdQPeWVm2XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLniBiYVRfdJIdjGrxsLgmIAJyydMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvdWVJR0poVkY5MGtoMk1hdkd3dUNZZ0FuTEowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVMAMA0G
CSqGSIb3DQEBCwUAA4IBAQAWE9wueBGGm2auqGunaLnaFuizUad/FByE/PV4nsxu
Rj7QYk3jdUZMOzmV2JyYEHVRAaqZoqxTOsMPjz4kqXYR6ecdC8GVqpOANd50wqhB
8vBi2bedrzpqKPdw3Qb+/y94QX5d9TT23c+JycO3EE56/8BxC2Me8KKKra3SOqH3
zmn5pcogRrBzNQ0Tnaz5y4fL4YMbjdqLDeZJ8drQfnVKD8E1Q7Ha9XrDMVcbtZn/
oQMh+DQV5m3Qwxz17p2iEMWroq/pzF/mcQfuut9qjRjzSRZHuJZaKGxa77UOWs4w
bqqvIXvT842jOVE69pQSTYLeQZv7UgHHbsxFJSOjQxKM
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:12:02 2025 by rpki-client