Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/4IT2tAhZP5VX8vhoJSSOYQ5-qYk.roa
File: 4IT2tAhZP5VX8vhoJSSOYQ5-qYk.roa (raw, json)
Hash identifier: Nivgl8RXQ1cnlYiSe2tg/Kf+K4Ae7myutSEeq9PAMNU=
Subject key identifier: E0:84:F6:B4:08:59:3F:95:57:F2:F8:68:25:24:8E:61:0E:7E:A9:89
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 018CC34936092EF51F4A8274846BBC1BAF31
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/4IT2tAhZP5VX8vhoJSSOYQ5-qYk.roa
Signing time: Mon 01 Jan 2024 04:30:04 +0000
ROA not before: Mon 01 Jan 2024 04:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204582
IP address blocks: 45.144.44.0/30 maxlen: 30
2a0e:eac0:2101::/48 maxlen: 48
2a0e:eac0:2110::/44 maxlen: 44
2a0e:eac0:2000::/44 maxlen: 44
2a0e:eac0:2100::/44 maxlen: 44
2a0e:eac0:2010::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 09 Feb 2024 17:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:36:09:2e:f5:1f:4a:82:74:84:6b:bc:1b:af:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Jan 1 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e084f6b408593f9557f2f86825248e610e7ea989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:c0:6c:d2:fe:de:c7:eb:5f:70:30:e3:ae:
3d:0c:2a:cb:eb:a3:83:88:23:5f:88:ae:1c:82:43:
e9:68:4f:52:8f:19:a8:46:81:3f:2b:79:44:3e:1e:
3f:9b:36:43:62:b2:7d:62:25:58:5d:8c:d2:c5:2b:
26:ec:b4:95:46:a2:94:ed:0a:a9:bd:1b:8f:9c:10:
48:9a:29:1f:79:18:d5:43:8f:cb:d6:67:e5:23:43:
b4:53:dd:47:b1:b7:b2:12:af:29:db:05:b6:62:73:
bc:25:e7:cb:c5:92:82:0b:03:5d:e9:dd:be:cb:39:
3f:02:cf:3b:bf:c4:92:99:7a:f3:0c:f6:0a:ec:5a:
42:56:f6:ae:38:d0:67:f5:da:eb:a0:78:1e:7f:92:
e5:6a:3d:6b:16:07:d5:b8:c5:cb:c1:66:2b:28:21:
0a:20:7f:8e:08:1d:88:a1:33:30:4e:71:06:8a:60:
45:e6:a8:c8:fe:53:a7:da:49:17:43:2b:3f:13:76:
6a:76:a9:f8:1d:25:b0:6f:8d:e9:b4:06:50:4a:11:
50:6c:ae:20:04:fc:7e:75:75:c4:35:68:03:ac:a4:
3c:19:3a:d3:a3:f2:09:80:06:e7:6b:a1:02:53:da:
8e:c8:fb:48:ba:9b:2d:9c:74:55:16:d2:bf:d8:9d:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:F6:B4:08:59:3F:95:57:F2:F8:68:25:24:8E:61:0E:7E:A9:89
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/4IT2tAhZP5VX8vhoJSSOYQ5-qYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.44.0/30
IPv6:
2a0e:eac0:2000::/43
2a0e:eac0:2100::/43
Signature Algorithm: sha256WithRSAEncryption
77:75:85:05:9d:d7:9c:c2:2c:a5:af:6f:9f:36:e1:10:a7:d5:
46:42:3a:38:61:f3:1e:59:ce:b1:aa:a3:ce:d4:a1:fe:43:1c:
b9:62:17:94:a4:a7:b6:20:bb:38:c9:0c:c1:98:17:b4:bd:1e:
83:67:6f:5b:77:7c:fb:89:c2:30:45:74:0e:da:99:52:d2:3d:
33:52:07:57:17:9c:66:c8:ac:93:a9:3e:cd:e8:c4:a3:88:b8:
48:f3:33:f8:2c:bf:94:0b:58:01:29:28:12:46:53:34:e6:61:
00:ea:12:c9:8b:58:cb:2a:ad:fb:3f:3c:8d:17:ab:e6:27:cc:
7c:36:b2:76:7b:88:00:f9:23:36:88:08:14:fc:c9:dd:c1:93:
61:5e:34:a6:ca:c9:8c:a4:25:85:bf:ad:87:50:4f:48:57:e5:
83:42:e2:51:c4:be:9b:85:b1:2e:5d:e7:fa:45:7c:bd:96:85:
ca:76:64:0d:e7:bf:35:cd:1c:4d:c2:1b:df:99:17:f0:c7:e8:
02:fd:be:aa:9c:b8:d7:48:77:dc:31:36:e1:f1:e4:52:57:64:
10:99:cd:02:6b:94:06:2f:c5:26:37:b1:1d:bd:26:6c:ce:4a:
1b:a2:b8:d1:39:45:d3:65:ba:38:78:c3:dd:b1:fe:54:da:de:
21:fd:36:b0
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzDSTYJLvUfSoJ0hGu8G68xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw
ZWEzYTAwHhcNMjQwMTAxMDQzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDg0ZjZiNDA4NTkzZjk1NTdmMmY4NjgyNTI0OGU2MTBlN2VhOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubDAbNL+3sfrX3Aw4649DCrL66OD
iCNfiK4cgkPpaE9SjxmoRoE/K3lEPh4/mzZDYrJ9YiVYXYzSxSsm7LSVRqKU7Qqp
vRuPnBBImikfeRjVQ4/L1mflI0O0U91HsbeyEq8p2wW2YnO8JefLxZKCCwNd6d2+
yzk/As87v8SSmXrzDPYK7FpCVvauONBn9drroHgef5Llaj1rFgfVuMXLwWYrKCEK
IH+OCB2IoTMwTnEGimBF5qjI/lOn2kkXQys/E3Zqdqn4HSWwb43ptAZQShFQbK4g
BPx+dXXENWgDrKQ8GTrTo/IJgAbna6ECU9qOyPtIupstnHRVFtK/2J2ulQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFOCE9rQIWT+VV/L4aCUkjmEOfqmJMB8GA1UdIwQY
MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt
MDBjYTMxMjZiM2ZlLzEvNElUMnRBaFpQNVZYOHZob0pTU09ZUTUtcVlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl
LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTANBAIAATAHAwUCLZAsADAY
BAIAAjASAwcFKg7qwCAAAwcFKg7qwCEAMA0GCSqGSIb3DQEBCwUAA4IBAQB3dYUF
ndecwiylr2+fNuEQp9VGQjo4YfMeWc6xqqPO1KH+Qxy5YheUpKe2ILs4yQzBmBe0
vR6DZ29bd3z7icIwRXQO2plS0j0zUgdXF5xmyKyTqT7N6MSjiLhI8zP4LL+UC1gB
KSgSRlM05mEA6hLJi1jLKq37PzyNF6vmJ8x8NrJ2e4gA+SM2iAgU/MndwZNhXjSm
ysmMpCWFv62HUE9IV+WDQuJRxL6bhbEuXef6RXy9loXKdmQN5781zRxNwhvfmRfw
x+gC/b6qnLjXSHfcMTbh8eRSV2QQmc0Ca5QGL8UmN7EdvSZszkoborjROUXTZbo4
eMPdsf5U2t4h/Taw
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:23 2025 by rpki-client