Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TvQzfTe0ePIs7tl5BA3WRfeYXDI.roa
File: TvQzfTe0ePIs7tl5BA3WRfeYXDI.roa (raw, json)
Hash identifier: NsFT3g6+fD0ftB9le+0aeHb3mI72gti2Qjr/I1oTquk=
Subject key identifier: 4E:F4:33:7D:37:B4:78:F2:2C:EE:D9:79:04:0D:D6:45:F7:98:5C:32
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FB5E2E2372F3EB68179A619925F5F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TvQzfTe0ePIs7tl5BA3WRfeYXDI.roa
Signing time: Tue 02 Jan 2024 04:30:13 +0000
ROA not before: Tue 02 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211588
IP address blocks: 45.131.60.0/24 maxlen: 24
45.83.205.0/24 maxlen: 24
45.134.222.0/24 maxlen: 24
2a07:e345::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b5:e2:e2:37:2f:3e:b6:81:79:a6:19:92:5f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ef4337d37b478f22ceed979040dd645f7985c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:96:05:d7:8d:86:f8:cb:1c:ad:fc:fa:1f:
e6:41:26:0f:5d:ca:d0:d8:79:53:a4:6b:4c:24:da:
0e:7a:d2:15:58:bf:7e:0d:82:56:75:fe:3c:c5:91:
87:a9:c7:ce:9b:df:21:2d:59:bf:ae:ae:95:42:0a:
98:62:e1:c9:ff:a7:6e:0e:dc:d8:a3:e2:65:5d:e4:
b0:b8:d0:3c:2e:0d:9e:ba:ed:4b:fc:8e:3f:25:94:
06:c8:06:e1:b5:ad:69:47:38:18:d1:af:33:30:0a:
a4:fc:d3:a5:5e:31:f4:c4:af:b4:8a:9c:e7:e7:90:
1c:3d:25:6c:32:65:34:f1:8f:fc:aa:1a:51:8a:b5:
17:8d:8d:37:82:18:56:ec:ae:bf:59:3a:e8:cb:1d:
71:41:4e:37:52:f4:26:18:5d:ed:a7:3f:81:de:94:
50:b6:a4:1c:db:c1:65:50:25:46:ec:ea:34:0f:2a:
a1:a4:84:15:5c:06:89:e8:e3:75:a6:da:0c:7e:cc:
01:6f:21:94:50:a6:f7:23:6b:96:7f:09:d7:cc:8d:
f3:13:f5:9c:c6:06:6f:ed:d4:dc:4c:cf:c1:15:78:
00:e1:4e:ee:06:a4:a1:76:33:cd:bc:5c:72:99:bf:
2b:51:7b:19:66:c7:8a:f5:45:94:ad:6e:21:7d:9b:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F4:33:7D:37:B4:78:F2:2C:EE:D9:79:04:0D:D6:45:F7:98:5C:32
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TvQzfTe0ePIs7tl5BA3WRfeYXDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.205.0/24
45.131.60.0/24
45.134.222.0/24
IPv6:
2a07:e345::/32
Signature Algorithm: sha256WithRSAEncryption
37:f1:6f:b9:2c:b3:39:7c:3b:96:75:d3:4f:8a:6c:6e:b6:bf:
c5:de:0f:ff:86:4c:b1:90:13:5d:e8:87:5d:eb:a6:8b:09:e6:
91:39:4b:93:89:dc:d9:a4:ca:c4:68:50:6f:11:64:ca:15:ba:
2f:54:e6:89:7f:14:d8:c0:54:12:8d:9d:e3:bc:99:9a:06:1c:
46:4a:c8:7f:28:f5:76:07:e2:56:1e:e1:71:54:c0:f0:98:b7:
c6:33:f2:00:c1:c4:94:87:20:cc:23:5a:ee:02:72:f9:2f:9f:
66:a3:90:2e:e7:a9:1b:af:2b:a9:03:10:66:5f:af:ac:2b:25:
b0:d3:42:e3:e9:c4:0f:46:73:a7:e1:66:34:63:4e:e6:f8:26:
8b:3f:8d:3a:ba:a5:d5:5a:7b:ab:aa:b2:d0:25:82:a2:30:ea:
ca:a7:66:fe:83:a7:a0:2c:ae:ce:5f:e8:95:1a:87:b6:38:ce:
3e:8e:ab:5e:8f:1e:e5:5f:01:dc:77:93:2d:65:04:dd:29:ca:
35:80:10:1a:93:b6:3c:b8:42:6f:ad:11:7c:4d:54:0b:cf:a0:
19:7f:3c:b3:bd:da:92:46:83:f8:3e:05:74:fb:ec:70:cb:e6:
f5:ec:e6:54:d2:95:d2:5a:25:6b:07:62:49:d4:ed:d9:7d:b8:
63:b2:9e:c4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzIb7Xi4jcvPraBeaYZkl9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWY0MzM3ZDM3YjQ3OGYyMmNlZWQ5NzkwNDBkZDY0NWY3OTg1YzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupOWBdeNhvjLHK38+h/mQSYPXcrQ
2HlTpGtMJNoOetIVWL9+DYJWdf48xZGHqcfOm98hLVm/rq6VQgqYYuHJ/6duDtzY
o+JlXeSwuNA8Lg2euu1L/I4/JZQGyAbhta1pRzgY0a8zMAqk/NOlXjH0xK+0ipzn
55AcPSVsMmU08Y/8qhpRirUXjY03ghhW7K6/WTroyx1xQU43UvQmGF3tpz+B3pRQ
tqQc28FlUCVG7Oo0DyqhpIQVXAaJ6ON1ptoMfswBbyGUUKb3I2uWfwnXzI3zE/Wc
xgZv7dTcTM/BFXgA4U7uBqShdjPNvFxymb8rUXsZZseK9UWUrW4hfZvqHwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFE70M303tHjyLO7ZeQQN1kX3mFwyMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvVHZRemZUZTBlUElzN3RsNUJBM1dSZmVZWERJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALVPNAwQA
LYM8AwQALYbeMA0EAgACMAcDBQAqB+NFMA0GCSqGSIb3DQEBCwUAA4IBAQA38W+5
LLM5fDuWddNPimxutr/F3g//hkyxkBNd6Idd66aLCeaROUuTidzZpMrEaFBvEWTK
FbovVOaJfxTYwFQSjZ3jvJmaBhxGSsh/KPV2B+JWHuFxVMDwmLfGM/IAwcSUhyDM
I1ruAnL5L59mo5Au56kbryupAxBmX6+sKyWw00Lj6cQPRnOn4WY0Y07m+CaLP406
uqXVWnurqrLQJYKiMOrKp2b+g6egLK7OX+iVGoe2OM4+jqtejx7lXwHcd5MtZQTd
Kco1gBAak7Y8uEJvrRF8TVQLz6AZfzyzvdqSRoP4PgV0++xwy+b17OZU0pXSWiVr
B2JJ1O3Zfbhjsp7E
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:30 2025 by rpki-client