Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/bw7mIDe6nixVal0uy1Jd08OwzeE.roa
File: bw7mIDe6nixVal0uy1Jd08OwzeE.roa (raw, json)
Hash identifier: HUQBCya6uXu6wyQ79cC7SGmI6Lp8VFKLjRwBeBPEtrc=
Subject key identifier: 6F:0E:E6:20:37:BA:9E:2C:55:6A:5D:2E:CB:52:5D:D3:C3:B0:CD:E1
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 018CC8DEFB937F135C305AA21FDA160DD9EF
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/bw7mIDe6nixVal0uy1Jd08OwzeE.roa
Signing time: Tue 02 Jan 2024 06:31:45 +0000
ROA not before: Tue 02 Jan 2024 06:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208234
IP address blocks: 45.145.61.0/24 maxlen: 24
45.145.62.0/24 maxlen: 24
45.145.63.0/24 maxlen: 24
45.145.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:fb:93:7f:13:5c:30:5a:a2:1f:da:16:0d:d9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Jan 2 06:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f0ee62037ba9e2c556a5d2ecb525dd3c3b0cde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:81:cb:af:31:15:8f:99:6a:ea:08:a0:3e:
2e:cf:01:6b:cb:2c:20:4b:a7:c9:29:4c:b6:18:f5:
68:f6:78:f3:8d:ef:74:bb:b6:c7:b6:66:a7:a1:2c:
d0:97:db:37:17:50:b1:91:68:23:0a:33:5c:f5:2c:
0a:8c:02:f3:c7:25:35:68:a7:8d:73:a0:4e:72:ef:
56:a7:8d:e0:e7:53:27:51:f0:d0:2e:07:c7:f7:17:
d6:3d:38:b3:02:12:85:84:45:b8:9c:b4:a9:4f:77:
47:17:1a:2a:db:46:0b:a8:85:1f:b6:9a:4b:e8:a5:
3f:5f:cb:e9:35:00:75:1c:03:45:8d:87:29:7a:69:
91:9c:66:cb:64:85:86:a0:56:f5:50:26:87:32:2e:
8b:97:78:b0:dc:86:12:c2:13:1c:f8:7e:30:1b:1b:
0b:bb:0e:89:bd:ec:27:2b:dd:2d:a3:d7:1f:61:1c:
cb:97:c6:32:ee:fc:41:67:a3:5c:3c:81:a9:e3:94:
5b:09:08:84:29:74:fd:f8:43:01:03:b4:1e:5e:1d:
4e:43:ff:0e:e9:fb:ca:98:77:71:01:77:18:88:a5:
ea:2a:70:59:c2:a6:a1:fd:04:7a:ef:5a:e7:95:3a:
2f:8e:cb:6c:9d:75:f1:9c:6e:05:2f:a8:a7:95:63:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0E:E6:20:37:BA:9E:2C:55:6A:5D:2E:CB:52:5D:D3:C3:B0:CD:E1
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/bw7mIDe6nixVal0uy1Jd08OwzeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.60.0/22
Signature Algorithm: sha256WithRSAEncryption
82:ef:a8:cf:82:d9:86:ad:b3:8a:14:db:ef:d5:6b:0a:49:33:
bb:31:30:6a:e0:5f:7e:68:36:ad:3d:08:0f:a3:3f:94:6a:d7:
2b:d1:0b:db:34:2d:24:f0:61:ba:df:c3:a7:c6:e6:1d:2f:e3:
64:30:9f:45:d3:99:87:52:8c:ca:d5:f5:37:be:f8:29:f7:cb:
7e:17:a5:86:62:3a:db:f0:53:20:ee:5b:f2:23:4a:e0:bb:20:
09:2a:45:95:36:34:3e:3d:29:d2:b4:cc:54:6a:37:cf:f9:36:
ca:c1:ad:7f:22:e4:aa:54:c2:be:2b:d1:42:75:b6:04:22:81:
ca:4e:d8:3a:05:cc:e0:a3:64:0a:84:e6:0f:d8:b8:10:fe:03:
ac:5a:fb:d9:29:ff:94:b8:00:7c:ed:78:d3:3b:73:69:23:0d:
0b:e8:1e:a5:5d:dd:a2:39:af:06:95:3c:0e:fc:2d:b8:00:2f:
f0:5f:81:3b:09:03:40:e6:05:a1:2b:49:0d:19:43:ab:a8:50:
c8:c2:98:51:c7:2b:17:2f:24:05:3f:a6:36:22:ec:55:09:ec:
f4:4a:cf:6b:31:5b:a9:bb:44:9b:99:cb:bb:bd:2a:91:f4:99:
9f:56:fa:af:c8:c5:45:43:45:3f:32:e7:8c:00:15:4e:9f:93:
40:0c:67:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3vuTfxNcMFqiH9oWDdnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZTIzNTNkOWJkNWI4YzViNThjYzcxMDIxMzI0YmI5MGRk
MmRkOTEwHhcNMjQwMTAyMDYzMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjBlZTYyMDM3YmE5ZTJjNTU2YTVkMmVjYjUyNWRkM2MzYjBjZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJKBy68xFY+ZauoIoD4uzwFryywg
S6fJKUy2GPVo9njzje90u7bHtmanoSzQl9s3F1CxkWgjCjNc9SwKjALzxyU1aKeN
c6BOcu9Wp43g51MnUfDQLgfH9xfWPTizAhKFhEW4nLSpT3dHFxoq20YLqIUftppL
6KU/X8vpNQB1HANFjYcpemmRnGbLZIWGoFb1UCaHMi6Ll3iw3IYSwhMc+H4wGxsL
uw6JvewnK90to9cfYRzLl8Yy7vxBZ6NcPIGp45RbCQiEKXT9+EMBA7QeXh1OQ/8O
6fvKmHdxAXcYiKXqKnBZwqah/QR671rnlTovjstsnXXxnG4FL6inlWNVUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG8O5iA3up4sVWpdLstSXdPDsM3hMB8GA1UdIwQY
MBaAFKviNT2b1bjFtYzHECEyS7kN0t2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUt
ZWVjNDkwZDUwNmY3LzEvYnc3bUlEZTZuaXhWYWwwdXkxSmQwOE93emVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUtZWVjNDkwZDUwNmY3
LzEvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZE8MA0G
CSqGSIb3DQEBCwUAA4IBAQCC76jPgtmGrbOKFNvv1WsKSTO7MTBq4F9+aDatPQgP
oz+Uatcr0QvbNC0k8GG638OnxuYdL+NkMJ9F05mHUozK1fU3vvgp98t+F6WGYjrb
8FMg7lvyI0rguyAJKkWVNjQ+PSnStMxUajfP+TbKwa1/IuSqVMK+K9FCdbYEIoHK
Ttg6Bczgo2QKhOYP2LgQ/gOsWvvZKf+UuAB87XjTO3NpIw0L6B6lXd2iOa8GlTwO
/C24AC/wX4E7CQNA5gWhK0kNGUOrqFDIwphRxysXLyQFP6Y2IuxVCez0Ss9rMVup
u0Sbmcu7vSqR9JmfVvqvyMVFQ0U/MueMABVOn5NADGcX
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:36 2025 by rpki-client