Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/a83XiSHoQMn7aSQD0Qn0TqG5pG0.roa
File: a83XiSHoQMn7aSQD0Qn0TqG5pG0.roa (raw, json)
Hash identifier: Ez+jqT0mg8zIk9wNrtTIj3odCM2UVUdE1ugibUybWo0=
Subject key identifier: 6B:CD:D7:89:21:E8:40:C9:FB:69:24:03:D1:09:F4:4E:A1:B9:A4:6D
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 018CC7271813A4590372292247C8D8861637
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/a83XiSHoQMn7aSQD0Qn0TqG5pG0.roa
Signing time: Mon 01 Jan 2024 22:31:17 +0000
ROA not before: Mon 01 Jan 2024 22:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208975
IP address blocks: 45.9.195.0/24 maxlen: 24
2a0e:1107::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:18:13:a4:59:03:72:29:22:47:c8:d8:86:16:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Jan 1 22:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bcdd78921e840c9fb692403d109f44ea1b9a46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:10:f1:78:4e:0c:c0:23:bd:3f:b3:75:1a:
bb:60:bc:c1:49:f0:b3:39:0d:bb:90:ea:3b:0d:84:
90:db:57:31:9c:6a:96:7e:99:87:ba:79:82:cc:65:
6e:1b:b3:c6:51:2c:9c:66:e9:fa:28:fd:8a:59:b3:
ad:3e:97:06:1d:de:f8:ba:1e:d1:3b:af:b1:1a:27:
c5:d2:de:17:cd:12:46:8a:dc:e7:10:f0:13:ba:a0:
bd:4a:4d:7b:64:e4:38:4b:a9:9d:c4:0b:78:37:09:
04:d7:e8:c0:d3:db:54:f9:0e:25:31:0b:51:e9:3c:
9f:21:62:d8:33:e2:13:1b:9b:b6:1c:82:67:d8:f0:
6d:5a:75:a9:55:51:69:29:c2:b9:f0:9d:25:d7:41:
e6:9f:7e:14:ba:e1:dd:03:ff:d9:ff:2b:00:36:c0:
19:d8:c0:c7:4a:19:59:15:73:18:1d:ec:18:6c:10:
9a:67:f1:2a:de:b8:9c:af:43:4e:d0:5c:b3:22:94:
9d:06:df:0a:c5:38:c2:35:1c:9a:de:bf:cf:00:5f:
48:3e:46:91:96:6f:fc:00:4b:77:57:e7:ec:73:2a:
81:c2:91:82:3e:43:db:81:97:35:5a:1f:6a:f2:34:
98:f2:e4:3c:dd:2e:cc:e2:12:a1:02:7f:7c:5f:1d:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CD:D7:89:21:E8:40:C9:FB:69:24:03:D1:09:F4:4E:A1:B9:A4:6D
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/a83XiSHoQMn7aSQD0Qn0TqG5pG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.195.0/24
IPv6:
2a0e:1107::/48
Signature Algorithm: sha256WithRSAEncryption
2a:16:f1:c3:2e:f6:e9:01:31:4d:22:d9:c0:90:f9:1b:5c:a6:
e8:2f:22:56:25:dc:ce:d1:07:f0:7c:b3:3b:0c:e3:f1:74:2e:
a8:80:a1:80:8a:d0:7d:de:ec:16:32:6e:b1:2e:ec:07:d0:78:
e3:ea:95:7d:c0:1c:6b:bd:29:b3:d0:8a:7f:e8:47:b6:11:a8:
88:c5:e4:85:7b:40:15:26:f9:6c:0c:f7:fe:69:ad:36:56:e5:
7c:a7:fa:95:9e:4b:01:34:26:e6:b9:97:07:08:82:a5:b0:00:
7b:05:f1:75:58:e0:d1:db:24:cb:9b:47:56:9b:f1:49:75:c6:
da:04:16:6c:fc:4e:6f:0e:d9:39:f8:e1:b8:a3:16:f2:74:0e:
cc:6b:5a:98:4c:22:3a:e8:69:bb:f2:df:eb:38:a9:44:bf:25:
cf:bb:b1:03:c2:e1:53:6e:eb:ea:76:f0:30:e8:bd:3c:e8:da:
58:f2:4c:2c:0e:f1:68:38:c6:2d:da:96:59:5e:21:f9:fa:d4:
3c:58:fa:d9:77:9c:b1:81:be:a4:cf:e0:ec:23:aa:ea:09:7d:
92:7b:da:bb:f9:bf:52:12:c7:a5:0e:12:b3:df:c2:87:03:1d:
9a:71:6b:24:4f:31:ec:b5:d1:9f:a1:3c:37:18:ef:ff:af:df:
ff:0a:7f:93
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzHJxgTpFkDcikiR8jYhhY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz
OGI4NWEwHhcNMjQwMTAxMjIzMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmNkZDc4OTIxZTg0MGM5ZmI2OTI0MDNkMTA5ZjQ0ZWExYjlhNDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk04Q8XhODMAjvT+zdRq7YLzBSfCz
OQ27kOo7DYSQ21cxnGqWfpmHunmCzGVuG7PGUSycZun6KP2KWbOtPpcGHd74uh7R
O6+xGifF0t4XzRJGitznEPATuqC9Sk17ZOQ4S6mdxAt4NwkE1+jA09tU+Q4lMQtR
6TyfIWLYM+ITG5u2HIJn2PBtWnWpVVFpKcK58J0l10Hmn34UuuHdA//Z/ysANsAZ
2MDHShlZFXMYHewYbBCaZ/Eq3ricr0NO0FyzIpSdBt8KxTjCNRya3r/PAF9IPkaR
lm/8AEt3V+fscyqBwpGCPkPbgZc1Wh9q8jSY8uQ83S7M4hKhAn98Xx3OkwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGvN14kh6EDJ+2kkA9EJ9E6huaRtMB8GA1UdIwQY
MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt
MzMxZDdmYzc3YmQ0LzEvYTgzWGlTSG9RTW43YVNRRDBRbjBUcUc1cEcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0
LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALQnDMA8E
AgACMAkDBwAqDhEHAAAwDQYJKoZIhvcNAQELBQADggEBACoW8cMu9ukBMU0i2cCQ
+RtcpugvIlYl3M7RB/B8szsM4/F0LqiAoYCK0H3e7BYybrEu7AfQeOPqlX3AHGu9
KbPQin/oR7YRqIjF5IV7QBUm+WwM9/5prTZW5Xyn+pWeSwE0Jua5lwcIgqWwAHsF
8XVY4NHbJMubR1ab8Ul1xtoEFmz8Tm8O2Tn44bijFvJ0DsxrWphMIjroabvy3+s4
qUS/Jc+7sQPC4VNu6+p28DDovTzo2ljyTCwO8Wg4xi3allleIfn61DxY+tl3nLGB
vqTP4OwjquoJfZJ72rv5v1ISx6UOErPfwocDHZpxayRPMey10Z+hPDcY7/+v3/8K
f5M=
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:15:31 2025 by rpki-client