Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/firkSoDHzSU_607lok39ut2JgZg.roa
File: firkSoDHzSU_607lok39ut2JgZg.roa (raw, json)
Hash identifier: qGFbIGdGvA2y5tpsiFFHYK5jf80wCt24unORrGbq9lk=
Subject key identifier: 7E:2A:E4:4A:80:C7:CD:25:3F:EB:4E:E5:A2:4D:FD:BA:DD:89:81:98
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018CC2DB635A506592B6BA88E9876D9D3006
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/firkSoDHzSU_607lok39ut2JgZg.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47204
IP address blocks: 45.131.50.0/24 maxlen: 24
45.131.48.0/24 maxlen: 24
45.131.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 12:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:63:5a:50:65:92:b6:ba:88:e9:87:6d:9d:30:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e2ae44a80c7cd253feb4ee5a24dfdbadd898198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:4c:29:2b:8a:fc:b4:69:80:18:2a:ec:a8:
c3:86:0a:09:ee:f4:e4:46:2e:55:29:87:dc:2b:9e:
cf:ed:c4:1c:60:1d:03:d7:ce:81:9d:15:8e:6a:93:
dc:b8:22:04:f1:31:c2:7d:af:72:be:e5:d8:4b:47:
1e:85:7d:12:41:d7:e8:0e:48:8c:5c:1e:60:1f:88:
ab:5e:87:ca:cb:60:29:61:61:6d:b9:87:39:80:c4:
d2:e2:b3:08:cb:a0:77:e9:7e:a7:f3:eb:84:e0:c6:
01:17:33:b4:b6:33:ff:7c:b9:c6:10:6e:dc:56:d2:
14:07:ca:db:8c:4e:75:d9:f1:c6:6e:58:fd:f7:e1:
9d:6c:a6:58:d0:c7:5b:64:b7:ea:0d:36:c1:06:c8:
ff:e0:f1:af:05:05:71:6d:f5:80:e8:b5:22:c9:3b:
9f:ab:a5:07:44:b8:72:9d:8a:7a:69:bc:18:71:22:
f9:5a:b2:1f:ed:75:74:e0:e7:a8:d1:1c:79:8a:db:
ac:b6:fa:b4:24:75:eb:6d:62:79:24:89:c5:04:3e:
ac:37:3f:10:aa:2b:1a:9a:2e:b4:65:99:cf:1c:3b:
4e:34:4e:7e:7a:4b:52:e3:37:b3:7d:84:8a:90:43:
e0:c6:da:50:78:af:21:41:90:2c:0c:8e:26:63:68:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2A:E4:4A:80:C7:CD:25:3F:EB:4E:E5:A2:4D:FD:BA:DD:89:81:98
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/firkSoDHzSU_607lok39ut2JgZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.48.0-45.131.50.255
Signature Algorithm: sha256WithRSAEncryption
55:d8:d7:93:7c:1a:b8:40:d2:13:d7:5a:60:22:15:f4:c2:f9:
32:86:84:53:bc:95:e9:cc:8a:ac:bf:1d:0d:58:8a:1d:73:b2:
5d:7a:37:44:b2:12:e7:4c:ca:db:65:f4:5c:98:3b:f5:c3:c6:
f6:22:c2:f0:35:29:5c:9b:78:1b:22:44:f1:64:89:9f:d9:a8:
86:3b:8d:a3:ec:d4:5f:05:88:dc:7f:bb:31:0a:5c:d1:0e:7a:
53:4d:20:aa:b9:b3:79:c1:d3:e4:75:62:9c:89:c7:5c:9c:7f:
80:ec:42:21:d0:33:b7:28:70:4b:34:c3:f8:4c:14:82:21:7a:
54:a1:62:c9:10:bb:62:07:bc:25:05:d4:d3:8c:11:08:81:35:
8c:6f:f9:53:9f:37:18:50:a2:4f:b8:28:c6:7a:0d:20:7d:a6:
fd:67:72:22:01:73:6c:ef:df:ec:f6:42:13:b8:37:00:54:29:
35:b9:65:af:c0:cf:b8:57:21:4d:d9:7c:58:7b:69:03:7b:d7:
ae:8d:3a:96:18:4a:43:e0:b5:a8:87:c2:7a:53:40:2f:43:90:
33:fb:e9:d1:27:29:d6:1e:8c:c2:bc:79:25:ea:61:91:c1:39:
a2:1a:ea:7b:4c:f2:92:93:67:0c:32:c6:03:81:99:c4:47:a2:
4c:51:3d:8c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzC22NaUGWStrqI6YdtnTAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQwMTAxMDIzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTJhZTQ0YTgwYzdjZDI1M2ZlYjRlZTVhMjRkZmRiYWRkODk4MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDFMKSuK/LRpgBgq7KjDhgoJ7vTk
Ri5VKYfcK57P7cQcYB0D186BnRWOapPcuCIE8THCfa9yvuXYS0cehX0SQdfoDkiM
XB5gH4irXofKy2ApYWFtuYc5gMTS4rMIy6B36X6n8+uE4MYBFzO0tjP/fLnGEG7c
VtIUB8rbjE512fHGblj99+GdbKZY0MdbZLfqDTbBBsj/4PGvBQVxbfWA6LUiyTuf
q6UHRLhynYp6abwYcSL5WrIf7XV04Oeo0Rx5itustvq0JHXrbWJ5JInFBD6sNz8Q
qisami60ZZnPHDtONE5+ektS4zezfYSKkEPgxtpQeK8hQZAsDI4mY2gUZwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFH4q5EqAx80lP+tO5aJN/brdiYGYMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvZmlya1NvREh6U1VfNjA3bG9rMzl1dDJKZ1pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQtgzAD
BAAtgzIwDQYJKoZIhvcNAQELBQADggEBAFXY15N8GrhA0hPXWmAiFfTC+TKGhFO8
lenMiqy/HQ1Yih1zsl16N0SyEudMyttl9FyYO/XDxvYiwvA1KVybeBsiRPFkiZ/Z
qIY7jaPs1F8FiNx/uzEKXNEOelNNIKq5s3nB0+R1YpyJx1ycf4DsQiHQM7cocEs0
w/hMFIIhelShYskQu2IHvCUF1NOMEQiBNYxv+VOfNxhQok+4KMZ6DSB9pv1nciIB
c2zv3+z2QhO4NwBUKTW5Za/Az7hXIU3ZfFh7aQN7166NOpYYSkPgtaiHwnpTQC9D
kDP76dEnKdYejMK8eSXqYZHBOaIa6ntM8pKTZwwyxgOBmcRHokxRPYw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:37 2025 by rpki-client