Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/aRPwvxfWKHZJP8wqYIAzbFnDMag.roa
File: aRPwvxfWKHZJP8wqYIAzbFnDMag.roa (raw, json)
Hash identifier: l/Is+C+mXMWmgZ8YYnr8QSrpKQ1kvfxUM+xMrIsBLu0=
Subject key identifier: 69:13:F0:BF:17:D6:28:76:49:3F:CC:2A:60:80:33:6C:59:C3:31:A8
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 01926B6B120E473FFE872EAB311E89C3DE7B
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/aRPwvxfWKHZJP8wqYIAzbFnDMag.roa
Signing time: Tue 08 Oct 2024 09:17:11 +0000
ROA not before: Tue 08 Oct 2024 09:17:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216003
IP address blocks: 45.80.85.0/24 maxlen: 24
45.80.86.0/24 maxlen: 24
45.80.87.0/24 maxlen: 24
177.8.68.0/24 maxlen: 24
185.246.196.0/22 maxlen: 24
185.246.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:6b:12:0e:47:3f:fe:87:2e:ab:31:1e:89:c3:de:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Oct 8 09:17:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6913f0bf17d62876493fcc2a6080336c59c331a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:03:e6:cd:af:c6:de:99:c8:24:e8:77:d2:
5b:5a:7e:a3:7a:74:eb:cd:b2:3e:f1:74:af:3c:a0:
43:eb:fb:d3:8f:23:41:15:ad:bd:65:e9:d4:7c:91:
90:d6:58:7b:92:0a:cf:09:bc:fe:18:d2:9b:29:3f:
55:12:de:92:62:8e:7e:e9:0d:60:10:08:01:ef:22:
39:3e:8d:c4:61:ce:04:b2:75:2c:c0:a4:69:5d:d6:
a8:92:69:a8:36:ed:3f:e1:b4:58:2d:c9:ed:35:e0:
82:7d:96:29:8b:91:cd:e5:12:81:89:30:2b:23:d9:
07:95:06:1e:98:2e:1c:d0:0b:00:57:66:1c:b1:14:
1f:aa:67:34:6b:53:7f:77:41:78:c7:da:f4:eb:2c:
ad:39:64:4a:1b:f8:c9:ba:08:59:46:bf:49:d6:02:
b3:89:38:75:34:a5:77:ec:1e:3c:16:4d:fe:db:74:
0d:3d:1f:13:af:d2:f0:52:b6:c2:13:05:3f:93:19:
82:38:aa:3f:81:1c:23:06:d3:9d:48:07:f0:56:96:
5f:e4:7c:64:f4:f1:a1:c4:2e:52:df:70:22:25:77:
95:5a:ea:87:e7:17:2d:c1:62:b3:cd:dd:9d:76:2e:
69:fa:53:a6:14:2b:e8:6d:a8:9d:42:82:34:e4:81:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:13:F0:BF:17:D6:28:76:49:3F:CC:2A:60:80:33:6C:59:C3:31:A8
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/aRPwvxfWKHZJP8wqYIAzbFnDMag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.85.0-45.80.87.255
177.8.68.0/24
185.246.196.0/22
Signature Algorithm: sha256WithRSAEncryption
43:bc:76:a6:e4:28:40:c7:25:20:ec:ca:c2:d9:7d:a6:41:01:
81:c3:b8:ab:3e:c8:58:29:6a:33:f5:1e:84:55:bc:5d:10:b4:
72:d0:d3:f2:4d:45:57:08:a4:5c:48:1b:6a:c9:3d:02:65:c7:
4a:84:d8:1f:b2:84:46:19:7d:01:3e:0b:34:bb:cf:25:14:65:
c4:72:d3:e4:01:0a:a2:7d:a2:ac:f8:f4:06:19:04:d7:c0:1b:
ff:eb:2f:d0:9d:71:51:bf:b5:ed:2e:92:36:5f:6c:02:54:59:
54:a2:8e:c4:4c:18:42:57:88:5e:9a:37:e6:2a:e6:95:1b:3d:
21:d7:f9:61:49:12:11:67:07:53:32:da:30:28:4b:ea:1c:c8:
23:2f:3b:4b:72:14:ad:fe:f5:d0:9b:ff:4c:c2:d1:3d:43:ba:
0f:bc:6b:78:01:46:de:85:ad:e4:01:06:4b:0b:0a:84:8b:33:
6f:d5:62:a1:51:14:b0:71:79:bf:bb:d2:eb:76:66:7e:66:7c:
ba:52:37:89:d1:be:ab:10:2d:1b:3a:a1:c9:8d:22:3c:50:26:
c4:84:0a:35:ec:8a:6c:79:9a:05:3c:bb:c0:41:3f:42:14:09:
84:32:16:2d:02:93:19:12:64:f0:7a:87:70:7d:79:76:57:92:
68:0f:5f:ab
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZJraxIORz/+hy6rMR6Jw957MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3
MDJmNGEwHhcNMjQxMDA4MDkxNzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTEzZjBiZjE3ZDYyODc2NDkzZmNjMmE2MDgwMzM2YzU5YzMzMWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtgD5s2vxt6ZyCTod9JbWn6jenTr
zbI+8XSvPKBD6/vTjyNBFa29ZenUfJGQ1lh7kgrPCbz+GNKbKT9VEt6SYo5+6Q1g
EAgB7yI5Po3EYc4EsnUswKRpXdaokmmoNu0/4bRYLcntNeCCfZYpi5HN5RKBiTAr
I9kHlQYemC4c0AsAV2YcsRQfqmc0a1N/d0F4x9r06yytOWRKG/jJughZRr9J1gKz
iTh1NKV37B48Fk3+23QNPR8Tr9LwUrbCEwU/kxmCOKo/gRwjBtOdSAfwVpZf5Hxk
9PGhxC5S33AiJXeVWuqH5xctwWKzzd2ddi5p+lOmFCvobaidQoI05IEwxwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFGkT8L8X1ih2ST/MKmCAM2xZwzGoMB8GA1UdIwQY
MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt
MmM0OGNiMjk4NjQ2LzEvYVJQd3Z4ZldLSFpKUDh3cVlJQXpiRm5ETWFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2
LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtUFUD
BAMtUFADBACxCEQDBAK59sQwDQYJKoZIhvcNAQELBQADggEBAEO8dqbkKEDHJSDs
ysLZfaZBAYHDuKs+yFgpajP1HoRVvF0QtHLQ0/JNRVcIpFxIG2rJPQJlx0qE2B+y
hEYZfQE+CzS7zyUUZcRy0+QBCqJ9oqz49AYZBNfAG//rL9CdcVG/te0ukjZfbAJU
WVSijsRMGEJXiF6aN+Yq5pUbPSHX+WFJEhFnB1My2jAoS+ocyCMvO0tyFK3+9dCb
/0zC0T1Dug+8a3gBRt6FreQBBksLCoSLM2/VYqFRFLBxeb+70ut2Zn5mfLpSN4nR
vqsQLRs6ocmNIjxQJsSECjXsimx5mgU8u8BBP0IUCYQyFi0CkxkSZPB6h3B9eXZX
kmgPX6s=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:32:10 2025 by rpki-client