Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/VfCE29B3tR_R9744u-l7GAjKexE.roa
File: VfCE29B3tR_R9744u-l7GAjKexE.roa (raw, json)
Hash identifier: KoL6MnbmPhaW0MJyOGLalq8Q2ob1CbgDiCuxoMHeRf4=
Subject key identifier: 55:F0:84:DB:D0:77:B5:1F:D1:F7:BE:38:BB:E9:7B:18:08:CA:7B:11
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 01942B077F1A37C7129C1A20A08F75041C0A
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/VfCE29B3tR_R9744u-l7GAjKexE.roa
Signing time: Fri 03 Jan 2025 07:18:19 +0000
ROA not before: Fri 03 Jan 2025 07:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57137
IP address blocks: 45.129.148.0/22 maxlen: 22
45.129.148.0/24 maxlen: 24
45.129.149.0/24 maxlen: 24
45.129.150.0/24 maxlen: 24
45.129.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 09:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:07:7f:1a:37:c7:12:9c:1a:20:a0:8f:75:04:1c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Jan 3 07:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55f084dbd077b51fd1f7be38bbe97b1808ca7b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:d5:79:b6:f7:77:1e:b5:e2:77:67:5d:1f:
f9:38:8b:4e:d5:cf:94:d7:d4:f4:14:a0:71:06:ff:
b0:d6:6a:29:81:b3:bf:77:d9:a2:d6:39:14:03:52:
af:aa:82:66:a5:b8:92:14:69:88:1a:10:79:88:1a:
20:1e:d8:11:ff:5b:30:82:ba:71:5e:49:a2:3d:5e:
49:fd:5d:d4:d9:8a:e8:9d:46:fd:70:b5:21:cc:35:
a7:34:e4:a3:81:d9:62:33:52:69:a4:4a:85:a1:fb:
01:65:c7:f8:ed:1a:a5:e8:8a:16:28:c7:60:bc:a4:
50:db:01:88:ea:cb:21:c9:ac:82:93:2f:5f:65:fc:
ec:52:66:2d:1c:1f:ba:42:70:50:32:d9:c6:01:6d:
34:ed:10:f2:b2:4b:e3:b0:38:4a:86:e6:22:81:c3:
e1:63:e5:dd:54:86:e8:e6:da:29:12:4d:50:8e:0a:
1b:fa:65:a8:10:2a:fb:3f:17:f7:37:e9:f8:21:68:
0b:f2:a0:0d:12:f5:a3:a3:3f:cc:6f:df:cf:ef:f5:
13:fa:52:2a:2d:d9:31:55:15:a2:59:01:2f:eb:59:
fe:2c:9c:5a:cb:2c:3f:f2:cc:95:cf:75:0f:67:54:
ac:0d:3e:c2:18:80:54:8a:9e:1b:70:93:a4:0c:31:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:84:DB:D0:77:B5:1F:D1:F7:BE:38:BB:E9:7B:18:08:CA:7B:11
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/VfCE29B3tR_R9744u-l7GAjKexE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.148.0/22
Signature Algorithm: sha256WithRSAEncryption
00:f4:6a:56:51:64:3e:dd:b1:7d:a8:ae:f0:fd:ae:e2:51:9e:
61:57:04:a3:42:35:6d:d4:ae:bf:c1:90:d1:8b:1d:1c:70:45:
67:2a:93:ab:3e:ae:e0:75:fe:cc:75:67:7b:78:a9:d4:37:51:
80:96:26:86:15:6c:8f:47:ab:65:30:26:e3:55:0f:46:43:0a:
70:86:6f:34:8a:c3:6e:06:7f:f2:7c:1b:ff:8d:86:4c:d9:02:
a8:19:ff:4d:d9:3e:dc:e6:1d:b0:96:43:23:36:49:bc:4b:23:
54:d3:81:95:bd:d2:37:a4:09:7e:3e:81:69:7a:6d:62:48:4c:
87:5d:9f:ac:c9:6e:e8:2b:4a:34:f2:15:fd:f7:fa:d4:94:67:
73:c3:32:66:b8:d7:85:aa:72:03:f8:18:d9:2f:8c:f3:8f:e3:
9b:ae:63:02:f3:15:5c:9e:9c:a2:25:7a:66:58:5d:28:df:81:
e4:48:22:3e:f1:b3:f5:53:20:a4:5b:64:00:1b:46:7d:2a:2e:
52:77:c4:a9:98:5b:30:58:30:87:f7:9f:84:a5:bb:34:7a:80:
fe:f9:1f:53:f4:dd:c9:33:6d:fa:9b:a8:62:be:d3:2e:63:57:
44:00:7f:82:ef:5b:1b:88:cb:bb:78:4c:fd:17:e3:67:20:9b:
ef:e6:d0:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQrB38aN8cSnBogoI91BBwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZTY1YzU3Njg2Y2U1ZTUxYjM2N2ZjOTk2YjQ5YmNjNTk4
OTZiOWMwHhcNMjUwMTAzMDcxODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWYwODRkYmQwNzdiNTFmZDFmN2JlMzhiYmU5N2IxODA4Y2E3YjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5vVebb3dx614ndnXR/5OItO1c+U
19T0FKBxBv+w1mopgbO/d9mi1jkUA1KvqoJmpbiSFGmIGhB5iBogHtgR/1swgrpx
XkmiPV5J/V3U2YronUb9cLUhzDWnNOSjgdliM1JppEqFofsBZcf47Rql6IoWKMdg
vKRQ2wGI6sshyayCky9fZfzsUmYtHB+6QnBQMtnGAW007RDyskvjsDhKhuYigcPh
Y+XdVIbo5topEk1Qjgob+mWoECr7Pxf3N+n4IWgL8qANEvWjoz/Mb9/P7/UT+lIq
LdkxVRWiWQEv61n+LJxayyw/8syVz3UPZ1SsDT7CGIBUip4bcJOkDDGHvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFXwhNvQd7Uf0fe+OLvpexgIynsRMB8GA1UdIwQY
MBaAFBzmXFdobOXlGzZ/yZa0m8xZiWucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjIt
MTI4YjVjM2QwNTNhLzEvVmZDRTI5QjN0Ul9SOTc0NHUtbDdHQWpLZXhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjItMTI4YjVjM2QwNTNh
LzEvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYGUMA0G
CSqGSIb3DQEBCwUAA4IBAQAA9GpWUWQ+3bF9qK7w/a7iUZ5hVwSjQjVt1K6/wZDR
ix0ccEVnKpOrPq7gdf7MdWd7eKnUN1GAliaGFWyPR6tlMCbjVQ9GQwpwhm80isNu
Bn/yfBv/jYZM2QKoGf9N2T7c5h2wlkMjNkm8SyNU04GVvdI3pAl+PoFpem1iSEyH
XZ+syW7oK0o08hX99/rUlGdzwzJmuNeFqnID+BjZL4zzj+ObrmMC8xVcnpyiJXpm
WF0o34HkSCI+8bP1UyCkW2QAG0Z9Ki5Sd8SpmFswWDCH95+Epbs0eoD++R9T9N3J
M236m6hivtMuY1dEAH+C71sbiMu7eEz9F+NnIJvv5tCy
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:20:44 2025 by rpki-client