Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/pysUu3aPbjGcS5cutVfyy6ZwhVw.roa
File: pysUu3aPbjGcS5cutVfyy6ZwhVw.roa (raw, json)
Hash identifier: g0b6CHOB7+Uk8Uctto+SXE3rcwpnV2KCu0LBabDZarA=
Subject key identifier: A7:2B:14:BB:76:8F:6E:31:9C:4B:97:2E:B5:57:F2:CB:A6:70:85:5C
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 018CC6B788E139F25ABF9FEC2A5308176589
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/pysUu3aPbjGcS5cutVfyy6ZwhVw.roa
Signing time: Mon 01 Jan 2024 20:29:26 +0000
ROA not before: Mon 01 Jan 2024 20:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200780
IP address blocks: 45.80.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Sep 2024 15:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:88:e1:39:f2:5a:bf:9f:ec:2a:53:08:17:65:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a72b14bb768f6e319c4b972eb557f2cba670855c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:6a:31:09:6d:89:64:7e:33:5f:93:b3:a8:
54:41:95:c8:0f:dd:86:8a:be:43:f8:09:8a:a1:53:
36:1a:ef:cb:05:c3:7f:2f:bc:86:a5:e4:9f:a6:84:
07:92:b7:dd:d6:2d:8e:1a:26:4d:59:5a:6e:b6:92:
53:44:ef:85:47:72:99:4d:70:0a:d6:0b:bc:bb:7b:
d1:c8:56:09:f1:8f:d9:94:6d:d3:e6:a9:5c:e2:25:
cc:88:18:8a:2d:6e:2e:4e:c3:bc:ac:51:d5:47:89:
b3:da:14:49:c4:c2:0a:8f:fe:04:b7:1c:99:24:63:
05:e1:6a:d8:ff:6b:e5:7d:93:ff:ef:0e:67:be:d3:
e1:d8:a8:29:ec:2e:03:85:9a:5a:25:5a:17:07:f0:
0c:73:7c:6a:1d:bf:6c:f5:99:52:e6:e7:1a:d8:da:
63:d0:f2:d7:94:df:eb:22:2f:f4:63:e6:b2:f7:a4:
83:36:26:36:71:27:0d:f7:f6:6c:ec:41:d2:18:fc:
83:42:cc:1f:25:79:80:1f:0c:0b:eb:03:f9:55:a8:
c7:d6:ac:0e:73:2b:62:6d:f9:3c:58:44:25:e9:4d:
b2:9a:90:b7:cc:1e:ca:d3:78:69:b2:37:ee:80:45:
bd:7d:f8:00:38:8b:0a:bb:53:25:ad:91:09:e7:18:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2B:14:BB:76:8F:6E:31:9C:4B:97:2E:B5:57:F2:CB:A6:70:85:5C
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/pysUu3aPbjGcS5cutVfyy6ZwhVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:56:98:5f:15:dd:eb:f9:b0:8f:0f:ff:83:b4:e2:af:f0:5d:
00:06:9b:32:32:81:93:d3:5d:3f:4d:02:3e:b4:02:38:25:b3:
f2:a3:fb:dd:a2:e2:c9:c6:92:67:e3:46:fd:6d:1b:37:ab:f4:
85:89:dd:91:6d:9b:da:09:bd:fb:32:c9:e2:80:9f:40:37:6d:
3b:be:26:3e:2b:07:74:65:19:0d:10:13:ee:9a:8a:39:b5:11:
c6:54:58:40:26:f4:9a:60:82:04:92:cd:bf:65:80:bd:ea:15:
5f:2e:f5:d6:35:06:cb:25:71:22:a0:6a:27:17:af:f0:c1:76:
aa:74:f7:13:6d:61:cb:dd:41:52:8f:62:cd:63:c4:1f:89:57:
9d:45:25:1b:d0:b8:2a:8b:67:ab:41:63:8f:32:f5:ba:18:74:
fd:2d:23:63:d4:bb:04:ed:71:80:7f:9c:c2:4d:8b:22:9d:70:
16:89:6f:56:21:e6:6e:67:63:95:a2:fe:21:60:7e:d4:78:1c:
42:19:bf:96:14:3c:ff:ec:32:c2:16:e2:bc:f2:85:9d:ac:d0:
a6:90:a9:87:ae:c5:f7:0c:2b:88:f8:ba:98:8a:b3:02:93:fd:
2e:28:49:3b:05:99:98:02:ca:7c:f1:f2:ad:43:16:f1:a4:f4:
05:f1:60:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt4jhOfJav5/sKlMIF2WJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw
MjhlOTEwHhcNMjQwMTAxMjAyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzJiMTRiYjc2OGY2ZTMxOWM0Yjk3MmViNTU3ZjJjYmE2NzA4NTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka1qMQltiWR+M1+Ts6hUQZXID92G
ir5D+AmKoVM2Gu/LBcN/L7yGpeSfpoQHkrfd1i2OGiZNWVputpJTRO+FR3KZTXAK
1gu8u3vRyFYJ8Y/ZlG3T5qlc4iXMiBiKLW4uTsO8rFHVR4mz2hRJxMIKj/4EtxyZ
JGMF4WrY/2vlfZP/7w5nvtPh2Kgp7C4DhZpaJVoXB/AMc3xqHb9s9ZlS5uca2Npj
0PLXlN/rIi/0Y+ay96SDNiY2cScN9/Zs7EHSGPyDQswfJXmAHwwL6wP5VajH1qwO
cytibfk8WEQl6U2ympC3zB7K03hpsjfugEW9ffgAOIsKu1MlrZEJ5xhg1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKcrFLt2j24xnEuXLrVX8sumcIVcMB8GA1UdIwQY
MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt
ODg1NGM4MmI1NDVkLzEvcHlzVXUzYVBiakdjUzVjdXRWZnl5Nlp3aFZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk
LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVABMA0G
CSqGSIb3DQEBCwUAA4IBAQALVphfFd3r+bCPD/+DtOKv8F0ABpsyMoGT010/TQI+
tAI4JbPyo/vdouLJxpJn40b9bRs3q/SFid2RbZvaCb37MsnigJ9AN207viY+Kwd0
ZRkNEBPumoo5tRHGVFhAJvSaYIIEks2/ZYC96hVfLvXWNQbLJXEioGonF6/wwXaq
dPcTbWHL3UFSj2LNY8QfiVedRSUb0Lgqi2erQWOPMvW6GHT9LSNj1LsE7XGAf5zC
TYsinXAWiW9WIeZuZ2OVov4hYH7UeBxCGb+WFDz/7DLCFuK88oWdrNCmkKmHrsX3
DCuI+LqYirMCk/0uKEk7BZmYAsp88fKtQxbxpPQF8WD8
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:33:05 2025 by rpki-client