Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/B06GzxvLF6rDfTGWAUDdXOiAEwA.roa
File: B06GzxvLF6rDfTGWAUDdXOiAEwA.roa (raw, json)
Hash identifier: SC4HieMAQ4w12QIhxsoycT5YWERt/Ce50JcQYIrAzYg=
Subject key identifier: 07:4E:86:CF:1B:CB:17:AA:C3:7D:31:96:01:40:DD:5C:E8:80:13:00
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 018CC3B6EDACC10264AD493BB20602C0B6FB
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/B06GzxvLF6rDfTGWAUDdXOiAEwA.roa
Signing time: Mon 01 Jan 2024 06:29:54 +0000
ROA not before: Mon 01 Jan 2024 06:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62229
IP address blocks: 178.22.72.0/21 maxlen: 24
45.157.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ed:ac:c1:02:64:ad:49:3b:b2:06:02:c0:b6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Jan 1 06:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=074e86cf1bcb17aac37d31960140dd5ce8801300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:83:5d:73:f8:fb:15:fb:c5:9a:b2:5d:eb:
56:21:a3:1e:b1:d4:22:7f:73:fc:46:d6:6c:43:35:
d1:d7:a1:d3:3a:b5:70:17:23:42:83:89:d8:f0:7d:
a1:ed:2b:66:1c:c6:5c:38:8c:f1:bc:ad:18:8e:29:
ec:fb:10:e2:0c:29:0f:9e:ae:32:d6:97:08:0e:f9:
47:f9:26:ca:8c:15:ad:18:64:09:5f:27:17:45:26:
72:97:81:44:d2:2c:62:bf:43:0e:de:fc:23:d3:ca:
d6:92:68:96:88:01:e8:0c:44:4c:b3:9b:c1:13:48:
a1:3d:e3:7f:c1:d1:a5:42:e2:e3:61:9a:45:69:b3:
9f:8d:35:dc:35:27:a1:52:a7:92:94:48:87:44:d0:
09:f5:4d:e4:a2:23:e9:58:30:c1:cc:3c:78:94:f7:
96:7e:19:9f:84:a5:a6:64:2e:e1:0f:eb:ce:59:6a:
d5:0f:f4:92:63:44:2a:a5:b4:e5:46:93:d5:18:9f:
3e:74:b9:09:79:36:d4:a3:04:bb:81:ce:35:dc:5e:
a0:a5:f0:43:60:fd:59:75:56:19:76:e8:da:fb:26:
35:6f:25:5b:17:86:5f:de:bd:82:6d:cf:c8:9d:fc:
8e:be:30:fa:47:bf:f0:ef:95:45:0f:1a:10:5c:e3:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4E:86:CF:1B:CB:17:AA:C3:7D:31:96:01:40:DD:5C:E8:80:13:00
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/B06GzxvLF6rDfTGWAUDdXOiAEwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.244.0/22
178.22.72.0/21
Signature Algorithm: sha256WithRSAEncryption
83:bf:84:57:24:20:ad:21:2a:06:bb:3a:71:d8:f8:b5:9a:8d:
f0:04:e1:e3:be:28:44:b3:95:fe:36:4a:85:f1:d5:3c:33:ff:
1f:bc:f1:06:32:ae:22:17:0d:8b:7c:a2:50:88:54:51:76:04:
a3:af:7e:f5:ba:08:02:71:7e:21:b4:69:df:ff:63:8c:b6:43:
8a:e8:bb:3f:71:4a:4d:5f:32:2f:58:18:be:1c:5a:97:34:75:
e3:b3:7d:f4:8d:e7:22:97:97:ba:8c:94:d8:5d:d7:fa:63:bd:
5b:ba:10:4d:c4:05:51:62:f9:d2:09:13:f6:75:3f:59:01:42:
9a:fa:70:01:5f:06:8c:28:37:8e:2e:5a:16:2e:97:2f:ff:08:
68:28:dc:7d:d7:d5:aa:45:1e:cf:71:b6:38:dd:31:c4:86:90:
0d:d5:26:e1:f1:17:6e:2d:12:bf:87:9a:f6:65:4a:99:60:9c:
85:6f:52:23:c9:5d:65:eb:83:9c:ad:b3:f6:ae:18:24:28:ab:
19:2c:9c:49:bd:25:f8:f4:4c:8b:98:d0:fa:9c:9f:74:dd:33:
0d:0e:23:40:03:bc:aa:12:30:88:5c:a5:6d:f0:f0:cf:74:c6:
b7:f5:80:75:2d:fd:50:25:77:fe:de:49:68:52:2a:38:ca:27:
6b:21:47:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtu2swQJkrUk7sgYCwLb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2Q5MGFiY2RkZTBiYzZmMGJjYWFmMjFjZWMzYTRmMmFj
ZmFlNGYwHhcNMjQwMTAxMDYyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzRlODZjZjFiY2IxN2FhYzM3ZDMxOTYwMTQwZGQ1Y2U4ODAxMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqqDXXP4+xX7xZqyXetWIaMesdQi
f3P8RtZsQzXR16HTOrVwFyNCg4nY8H2h7StmHMZcOIzxvK0Yjins+xDiDCkPnq4y
1pcIDvlH+SbKjBWtGGQJXycXRSZyl4FE0ixiv0MO3vwj08rWkmiWiAHoDERMs5vB
E0ihPeN/wdGlQuLjYZpFabOfjTXcNSehUqeSlEiHRNAJ9U3koiPpWDDBzDx4lPeW
fhmfhKWmZC7hD+vOWWrVD/SSY0QqpbTlRpPVGJ8+dLkJeTbUowS7gc413F6gpfBD
YP1ZdVYZduja+yY1byVbF4Zf3r2Cbc/InfyOvjD6R7/w75VFDxoQXON66QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAdOhs8byxeqw30xlgFA3VzogBMAMB8GA1UdIwQY
MBaAFI99kKvN3gvG8Lyq8hzsOk8qz65PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajMyUXE4M2VDOGJ3dktyeUhPdzZUeXJQcms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zMGIwYmItODk4Yy00Mjg5LTkxMjQt
MzdlMzJlYWE3NjY3LzEvQjA2R3p4dkxGNnJEZlRHV0FVRGRYT2lBRXdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zMGIwYmItODk4Yy00Mjg5LTkxMjQtMzdlMzJlYWE3NjY3
LzEvajMyUXE4M2VDOGJ3dktyeUhPdzZUeXJQcms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZ30AwQD
shZIMA0GCSqGSIb3DQEBCwUAA4IBAQCDv4RXJCCtISoGuzpx2Pi1mo3wBOHjvihE
s5X+NkqF8dU8M/8fvPEGMq4iFw2LfKJQiFRRdgSjr371uggCcX4htGnf/2OMtkOK
6Ls/cUpNXzIvWBi+HFqXNHXjs330jecil5e6jJTYXdf6Y71buhBNxAVRYvnSCRP2
dT9ZAUKa+nABXwaMKDeOLloWLpcv/whoKNx919WqRR7PcbY43THEhpAN1Sbh8Rdu
LRK/h5r2ZUqZYJyFb1IjyV1l64OcrbP2rhgkKKsZLJxJvSX49EyLmND6nJ903TMN
DiNAA7yqEjCIXKVt8PDPdMa39YB1Lf1QJXf+3kloUio4yidrIUeo
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:36 2025 by rpki-client