Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/0KiFzX0UXCgCeV2Rbkd6U-Ki1Z0.roa
File: 0KiFzX0UXCgCeV2Rbkd6U-Ki1Z0.roa (raw, json)
Hash identifier: FPOt4Ppii27CLYDB/f54X1dKTqG9bLO7joxZ2/c2EU8=
Subject key identifier: D0:A8:85:CD:7D:14:5C:28:02:79:5D:91:6E:47:7A:53:E2:A2:D5:9D
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019271B7512990849B72700ABDF6B43C4981
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/0KiFzX0UXCgCeV2Rbkd6U-Ki1Z0.roa
Signing time: Wed 09 Oct 2024 14:38:12 +0000
ROA not before: Wed 09 Oct 2024 14:38:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.13.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:b7:51:29:90:84:9b:72:70:0a:bd:f6:b4:3c:49:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Oct 9 14:38:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0a885cd7d145c2802795d916e477a53e2a2d59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:46:bc:9c:9e:73:69:79:ea:1e:d9:02:ae:
56:e2:a4:fb:f0:1f:4c:fb:ca:fc:e8:38:cd:42:64:
ac:d9:3d:15:34:0d:f8:ac:d8:c6:16:ef:c3:7c:47:
26:bc:82:1c:22:23:e3:a8:21:32:c2:dc:32:42:58:
1f:43:a7:0d:76:6c:ad:8d:43:bc:04:66:39:52:4c:
37:8f:91:76:0b:1c:cc:48:a8:1b:c7:78:f4:16:4c:
86:90:5c:b2:77:a0:3d:8c:15:e6:b3:92:e7:95:e9:
d6:40:5e:3a:1a:92:0a:56:96:90:47:ab:63:0c:39:
2e:e4:4b:82:a1:86:f5:66:23:8f:13:0f:7b:a7:73:
37:69:bc:95:27:b8:41:28:b8:8d:c5:28:1d:0b:41:
88:99:0e:6a:f9:04:3a:ba:5c:33:4e:49:f4:6c:40:
1d:d8:e0:d6:4c:12:84:6b:ec:d2:71:e1:cf:61:c8:
5a:3c:c9:1f:ca:4f:76:cd:25:09:7a:5f:06:bd:1d:
0f:66:77:d6:88:d4:79:8c:e1:23:6f:a8:04:45:43:
0f:c8:1e:f1:ba:b5:ec:66:43:48:6c:4d:3c:c3:b1:
78:0c:61:6f:88:50:74:64:9c:d3:f3:48:6f:85:67:
36:9b:5a:83:ac:4e:b6:70:53:76:20:bd:40:7a:50:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A8:85:CD:7D:14:5C:28:02:79:5D:91:6E:47:7A:53:E2:A2:D5:9D
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/0KiFzX0UXCgCeV2Rbkd6U-Ki1Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:51:d3:5e:da:06:a1:c1:87:7c:9e:03:12:4e:96:94:93:79:
ac:6f:81:1b:e5:40:3e:28:4e:4e:6f:25:73:6c:83:ca:11:bf:
98:f7:51:67:7c:46:d4:85:52:35:ab:1c:9b:ef:cf:6e:ed:c5:
11:b0:5f:00:2c:21:13:32:94:4f:c1:65:41:9c:86:ec:a4:6c:
55:3d:c1:a3:b3:b6:4b:78:e2:1b:5c:80:f9:e7:a0:ef:69:b2:
bc:14:a0:ed:41:1e:c3:14:f1:ad:f8:8e:67:d9:e4:36:50:6a:
b6:52:1e:9d:4b:97:24:e5:4d:64:4a:c0:a2:ba:7e:98:53:c4:
0c:79:04:a1:73:54:c9:ef:c5:e0:07:4f:82:7f:0c:18:14:ee:
a3:fd:2d:b3:4d:ce:29:45:88:4e:c2:1c:23:ac:da:e6:79:cb:
9f:b7:8c:ca:70:cf:98:ed:04:9c:48:fb:44:f7:cf:e6:9d:36:
3f:65:f9:46:c6:1f:26:b8:40:77:49:13:00:86:41:16:96:b5:
96:5c:57:c0:27:24:5a:1b:da:c1:fe:e8:32:4e:70:e6:18:19:
9d:99:b3:6d:43:65:be:83:8a:4e:bb:8c:e3:89:95:33:5a:1e:
a1:cb:dc:c0:61:38:19:5a:12:11:af:9a:cd:6b:1d:d8:e1:2f:
c6:4e:27:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJxt1EpkISbcnAKvfa0PEmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjQxMDA5MTQzODEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGE4ODVjZDdkMTQ1YzI4MDI3OTVkOTE2ZTQ3N2E1M2UyYTJkNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tFGvJyec2l56h7ZAq5W4qT78B9M
+8r86DjNQmSs2T0VNA34rNjGFu/DfEcmvIIcIiPjqCEywtwyQlgfQ6cNdmytjUO8
BGY5Ukw3j5F2CxzMSKgbx3j0FkyGkFyyd6A9jBXms5LnlenWQF46GpIKVpaQR6tj
DDku5EuCoYb1ZiOPEw97p3M3abyVJ7hBKLiNxSgdC0GImQ5q+QQ6ulwzTkn0bEAd
2ODWTBKEa+zSceHPYchaPMkfyk92zSUJel8GvR0PZnfWiNR5jOEjb6gERUMPyB7x
urXsZkNIbE08w7F4DGFviFB0ZJzT80hvhWc2m1qDrE62cFN2IL1AelBbtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNCohc19FFwoAnldkW5HelPiotWdMB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEvMEtpRnpYMFVYQ2dDZVYyUmJrZDZVLUtpMVowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ2zMA0G
CSqGSIb3DQEBCwUAA4IBAQCxUdNe2gahwYd8ngMSTpaUk3msb4Eb5UA+KE5ObyVz
bIPKEb+Y91FnfEbUhVI1qxyb789u7cURsF8ALCETMpRPwWVBnIbspGxVPcGjs7ZL
eOIbXID556DvabK8FKDtQR7DFPGt+I5n2eQ2UGq2Uh6dS5ck5U1kSsCiun6YU8QM
eQShc1TJ78XgB0+CfwwYFO6j/S2zTc4pRYhOwhwjrNrmecuft4zKcM+Y7QScSPtE
98/mnTY/ZflGxh8muEB3SRMAhkEWlrWWXFfAJyRaG9rB/ugyTnDmGBmdmbNtQ2W+
g4pOu4zjiZUzWh6hy9zAYTgZWhIRr5rNax3Y4S/GTifl
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:54 2025 by rpki-client