Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/tUAcdjZrxAvkAdrmYC6QfcbK3vQ.roa
File: tUAcdjZrxAvkAdrmYC6QfcbK3vQ.roa (raw, json)
Hash identifier: jRqf3SN3lunYQUwaPFbkvSDzB+ujxXeL7za0sBf/9jM=
Subject key identifier: B5:40:1C:76:36:6B:C4:0B:E4:01:DA:E6:60:2E:90:7D:C6:CA:DE:F4
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 018CC94D9DD6DF53890BF4F8C06B78C4462D
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/tUAcdjZrxAvkAdrmYC6QfcbK3vQ.roa
Signing time: Tue 02 Jan 2024 08:32:36 +0000
ROA not before: Tue 02 Jan 2024 08:32:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52088
IP address blocks: 185.45.108.0/23 maxlen: 24
2a02:22f0::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:9d:d6:df:53:89:0b:f4:f8:c0:6b:78:c4:46:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Jan 2 08:32:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5401c76366bc40be401dae6602e907dc6cadef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:bc:03:58:79:29:ca:23:c7:76:6c:b8:22:
f5:6d:91:9a:b8:b7:b0:b2:8b:b7:56:da:2a:e3:e6:
85:6d:f4:f0:ad:7d:3b:cf:5d:5d:ca:11:3c:74:6d:
00:a7:c6:75:41:75:8c:87:8c:f9:66:44:be:84:45:
88:83:07:dc:fc:93:21:ab:8d:fb:d5:23:5c:0f:ee:
31:60:d5:d1:02:58:76:b3:4a:16:a1:c9:f4:7d:ba:
c5:81:fa:51:9e:1e:08:ba:16:97:0a:ff:92:46:79:
7d:fd:83:b7:72:dd:d6:d4:ce:17:8c:07:1a:9d:30:
c4:2e:61:43:78:c5:82:4d:db:d9:8c:ac:a3:8b:8e:
a4:bb:da:1d:5a:fc:f7:53:da:29:1e:49:81:aa:1c:
87:df:8b:c8:94:03:ba:00:00:08:48:0b:d3:64:2b:
ad:54:c9:fe:92:ad:f9:92:36:43:71:c9:de:26:40:
b4:d9:8e:e1:b2:fc:7c:b6:1e:a3:4d:4e:47:36:54:
42:ef:7d:d1:30:13:40:bc:40:cd:a1:57:dd:67:74:
4f:02:d0:9b:51:ed:88:9e:46:a5:2b:3c:6e:8c:01:
25:13:6b:af:0b:58:e6:39:b8:a4:19:a0:41:32:b5:
c0:18:d5:64:9c:a8:ff:c1:20:4c:e0:94:fa:b8:1a:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:40:1C:76:36:6B:C4:0B:E4:01:DA:E6:60:2E:90:7D:C6:CA:DE:F4
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/tUAcdjZrxAvkAdrmYC6QfcbK3vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.108.0/23
IPv6:
2a02:22f0::/32
Signature Algorithm: sha256WithRSAEncryption
92:c1:85:ce:1c:83:b9:63:87:b5:b2:6f:14:8e:e6:8d:79:8a:
42:df:7e:c1:3a:17:0d:a4:82:67:3b:39:f0:07:f4:bc:c4:d7:
db:a0:93:8c:73:5b:e1:68:c1:d0:32:50:fc:81:8d:b3:2f:9a:
12:57:47:3b:6c:a0:1f:41:1c:b0:da:4f:36:73:7a:c6:ce:b5:
39:cd:fc:f5:de:33:48:2c:bd:10:7f:07:45:65:58:de:a3:e6:
79:a3:f4:31:e7:31:49:12:d3:92:06:fd:44:38:5e:ce:d9:05:
0f:45:bc:5a:0a:f4:d4:c1:67:fc:3b:b4:bc:cd:6e:63:a9:22:
93:92:b9:5b:89:55:14:8d:b9:ee:61:31:0d:38:a1:6a:f3:2c:
3b:57:c9:8e:d0:d5:32:20:3f:52:5f:e5:2e:25:17:06:67:af:
ec:11:11:02:84:4a:27:9c:69:b0:2f:d4:1f:71:51:fe:41:b9:
0a:82:ca:71:cc:5a:41:a2:3a:99:60:a1:69:e8:37:e9:e1:b4:
f2:aa:2c:1e:0e:46:c6:b8:bd:a5:2d:85:86:24:d8:08:03:b0:
39:92:91:33:35:22:64:a3:98:5e:36:54:08:7a:42:c9:a4:ac:
28:77:e0:a9:46:82:93:cb:e8:1b:b7:18:cf:d2:4f:10:2f:44:
2d:38:e0:d4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzJTZ3W31OJC/T4wGt4xEYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1
ZjE0YzAwHhcNMjQwMTAyMDgzMjM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTQwMWM3NjM2NmJjNDBiZTQwMWRhZTY2MDJlOTA3ZGM2Y2FkZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH+8A1h5Kcojx3ZsuCL1bZGauLew
sou3Vtoq4+aFbfTwrX07z11dyhE8dG0Ap8Z1QXWMh4z5ZkS+hEWIgwfc/JMhq437
1SNcD+4xYNXRAlh2s0oWocn0fbrFgfpRnh4IuhaXCv+SRnl9/YO3ct3W1M4XjAca
nTDELmFDeMWCTdvZjKyji46ku9odWvz3U9opHkmBqhyH34vIlAO6AAAISAvTZCut
VMn+kq35kjZDccneJkC02Y7hsvx8th6jTU5HNlRC733RMBNAvEDNoVfdZ3RPAtCb
Ue2InkalKzxujAElE2uvC1jmObikGaBBMrXAGNVknKj/wSBM4JT6uBr9NwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLVAHHY2a8QL5AHa5mAukH3Gyt70MB8GA1UdIwQY
MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt
ZjVlYzQwM2ZkYWNmLzEvdFVBY2RqWnJ4QXZrQWRybVlDNlFmY2JLM3ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm
LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuS1sMA0E
AgACMAcDBQAqAiLwMA0GCSqGSIb3DQEBCwUAA4IBAQCSwYXOHIO5Y4e1sm8UjuaN
eYpC337BOhcNpIJnOznwB/S8xNfboJOMc1vhaMHQMlD8gY2zL5oSV0c7bKAfQRyw
2k82c3rGzrU5zfz13jNILL0QfwdFZVjeo+Z5o/Qx5zFJEtOSBv1EOF7O2QUPRbxa
CvTUwWf8O7S8zW5jqSKTkrlbiVUUjbnuYTENOKFq8yw7V8mO0NUyID9SX+UuJRcG
Z6/sEREChEonnGmwL9QfcVH+QbkKgspxzFpBojqZYKFp6Dfp4bTyqiweDkbGuL2l
LYWGJNgIA7A5kpEzNSJko5heNlQIekLJpKwod+CpRoKTy+gbtxjP0k8QL0QtOODU
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:19 2025 by rpki-client