Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/040nv72iCxQOYbUBCzscmNI08tI.roa
File: 040nv72iCxQOYbUBCzscmNI08tI.roa (raw, json)
Hash identifier: 2HL1r159M0tLwVulk7+23mLP/AkdSEeJga5IoZ2Lq8M=
Subject key identifier: D3:8D:27:BF:BD:A2:0B:14:0E:61:B5:01:0B:3B:1C:98:D2:34:F2:D2
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 018CC5DC4F4F7363394B296D7F02778FBA1A
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/040nv72iCxQOYbUBCzscmNI08tI.roa
Signing time: Mon 01 Jan 2024 16:29:58 +0000
ROA not before: Mon 01 Jan 2024 16:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56701
IP address blocks: 45.157.212.0/24 maxlen: 24
45.157.213.0/24 maxlen: 24
45.157.215.0/24 maxlen: 24
45.157.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 11:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4f:4f:73:63:39:4b:29:6d:7f:02:77:8f:ba:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d38d27bfbda20b140e61b5010b3b1c98d234f2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:0a:56:d2:f5:7f:42:4e:33:7b:ef:b7:a3:
09:0f:ef:ea:19:de:16:b7:c4:34:9b:e6:ba:85:53:
07:cc:55:5b:51:b9:c0:75:10:08:dd:45:7a:bd:4c:
b6:23:8c:10:4e:d6:be:79:d9:98:e9:d9:af:5b:97:
b9:b1:49:f5:b1:50:26:bc:bf:79:af:b6:61:70:4f:
09:aa:03:8d:2d:7b:11:d6:e6:af:e0:56:af:39:e4:
1b:71:b4:e5:f7:13:1c:53:34:21:4e:b4:10:88:34:
b8:42:e8:d0:40:47:3e:ce:2b:81:3f:c1:ef:50:8e:
96:f5:2b:71:8c:2d:f4:5d:72:0e:84:31:66:70:d1:
96:ce:16:79:d8:45:88:d2:96:a5:2f:1d:d8:ec:4d:
2a:dc:16:9f:34:ee:f9:05:66:23:44:63:98:05:ce:
14:44:4e:d1:0a:b9:3a:c2:fc:e8:5d:94:60:09:fe:
7a:77:a0:b0:ea:6d:6c:32:38:c5:0b:ba:66:ed:44:
eb:a5:c9:a4:8b:ef:0f:5d:e8:66:f9:a7:02:a9:5f:
93:7c:3b:17:b3:95:3e:ed:d6:35:d3:7c:0f:31:04:
e4:61:63:a2:22:17:81:9e:98:a8:cd:fc:46:5f:17:
b4:f0:93:61:34:1d:0e:d8:ca:72:1c:fe:75:46:ea:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8D:27:BF:BD:A2:0B:14:0E:61:B5:01:0B:3B:1C:98:D2:34:F2:D2
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/040nv72iCxQOYbUBCzscmNI08tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:f8:12:e0:dd:93:8b:96:a0:36:20:cd:4b:4b:9e:ed:5f:79:
b7:f5:1d:17:1c:93:52:ac:bf:40:ba:18:12:36:0f:0f:0a:88:
7e:df:54:82:71:da:3e:02:5d:32:58:4f:ae:e9:93:0c:7c:ea:
17:85:ab:8d:36:75:34:b4:ce:8e:41:80:57:5f:96:d1:c9:9c:
12:c9:ae:97:e1:6a:71:56:01:18:26:e8:6d:13:49:c3:53:c9:
5f:2c:dd:76:7e:5d:6f:c3:00:98:33:9c:4b:90:ea:e2:fe:b2:
0e:85:bb:df:37:ef:dc:d9:a9:9b:7f:9b:02:a6:b9:a5:42:4d:
86:3e:ee:11:98:f2:04:14:f4:da:3f:40:ff:1b:cd:7a:65:b7:
76:4a:5a:0b:0f:9a:48:33:8f:1c:dc:fb:da:ee:a6:24:b6:a1:
27:be:29:28:b3:f9:a3:85:4d:7a:dc:5a:80:ae:18:72:da:be:
04:26:90:4b:51:c1:fd:7f:86:a1:f3:18:91:bc:0c:a5:fd:70:
bc:74:3d:a3:e5:d2:c7:04:4b:73:3d:bd:e5:ce:c8:52:d7:b9:
54:de:4f:20:21:88:25:23:ed:3e:19:b9:12:b8:d9:84:4d:f4:
0a:ae:2b:65:38:6e:6b:55:f9:4f:45:4d:c0:18:99:dd:46:e3:
99:03:44:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3E9Pc2M5SyltfwJ3j7oaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDNkMTNjN2JiZDJhYTE1ZjU2NzdjMTM5YWMzM2M4Njc4
NzlmMmMwHhcNMjQwMTAxMTYyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzhkMjdiZmJkYTIwYjE0MGU2MWI1MDEwYjNiMWM5OGQyMzRmMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE8KVtL1f0JOM3vvt6MJD+/qGd4W
t8Q0m+a6hVMHzFVbUbnAdRAI3UV6vUy2I4wQTta+edmY6dmvW5e5sUn1sVAmvL95
r7ZhcE8JqgONLXsR1uav4FavOeQbcbTl9xMcUzQhTrQQiDS4QujQQEc+ziuBP8Hv
UI6W9StxjC30XXIOhDFmcNGWzhZ52EWI0palLx3Y7E0q3BafNO75BWYjRGOYBc4U
RE7RCrk6wvzoXZRgCf56d6Cw6m1sMjjFC7pm7UTrpcmki+8PXehm+acCqV+TfDsX
s5U+7dY103wPMQTkYWOiIheBnpiozfxGXxe08JNhNB0O2MpyHP51Rup6hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNONJ7+9ogsUDmG1AQs7HJjSNPLSMB8GA1UdIwQY
MBaAFPFD0Tx7vSqhX1Z3wTmsM8hnh58sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQt
YTE0NmExYjAxZjhmLzEvMDQwbnY3MmlDeFFPWWJVQkN6c2NtTkkwOHRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQtYTE0NmExYjAxZjhm
LzEvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ3UMA0G
CSqGSIb3DQEBCwUAA4IBAQBs+BLg3ZOLlqA2IM1LS57tX3m39R0XHJNSrL9AuhgS
Ng8PCoh+31SCcdo+Al0yWE+u6ZMMfOoXhauNNnU0tM6OQYBXX5bRyZwSya6X4Wpx
VgEYJuhtE0nDU8lfLN12fl1vwwCYM5xLkOri/rIOhbvfN+/c2ambf5sCprmlQk2G
Pu4RmPIEFPTaP0D/G816Zbd2SloLD5pIM48c3Pva7qYktqEnvikos/mjhU163FqA
rhhy2r4EJpBLUcH9f4ah8xiRvAyl/XC8dD2j5dLHBEtzPb3lzshS17lU3k8gIYgl
I+0+GbkSuNmETfQKritlOG5rVflPRU3AGJndRuOZA0Qr
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:02:44 2025 by rpki-client