Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/814Z7V4s-01WQiCVzLZQz65_sYw.roa
File: 814Z7V4s-01WQiCVzLZQz65_sYw.roa (raw, json)
Hash identifier: W9cPoEmzOAACad8hhzOX1Jo9BkiOVYlzpYueEbz3yb4=
Subject key identifier: F3:5E:19:ED:5E:2C:FB:4D:56:42:20:95:CC:B6:50:CF:AE:7F:B1:8C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019026D5476C8E09D47A43E227FD76BEA372
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/814Z7V4s-01WQiCVzLZQz65_sYw.roa
Signing time: Mon 17 Jun 2024 15:33:50 +0000
ROA not before: Mon 17 Jun 2024 15:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.9.117.0/24 maxlen: 24
45.86.12.0/24 maxlen: 24
45.130.124.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
2a0c:7884::/32 maxlen: 32
2a0e:1a84::/32 maxlen: 32
2a0f:2d80:1292::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e847:1::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a13:18c3::/32 maxlen: 32
2a13:2b40::/29 maxlen: 32
2a13:4900::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 18 Jun 2024 06:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:d5:47:6c:8e:09:d4:7a:43:e2:27:fd:76:be:a3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 17 15:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f35e19ed5e2cfb4d56422095ccb650cfae7fb18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:53:6a:91:f5:eb:a6:73:34:23:bd:59:0b:
db:fe:2f:ae:80:2f:40:bd:02:52:98:b5:b5:fa:5a:
71:0c:b3:17:1e:50:76:21:e3:f5:e9:e7:b8:75:05:
9e:81:19:47:b2:60:ed:54:59:6a:eb:bf:fe:2b:db:
25:c2:df:ca:f0:3c:3d:f2:ff:83:80:c9:bf:45:5a:
c0:33:ee:cf:29:bb:b9:4c:a2:a5:36:6f:8f:a7:c6:
56:c8:36:cc:3a:97:f0:9a:18:f7:d6:15:e8:1e:97:
e6:77:3a:9e:bb:45:6a:cf:0e:92:f1:01:1d:85:04:
de:2b:26:d5:cc:de:ab:72:73:ca:78:97:6a:71:bb:
e2:21:6e:1f:9a:9b:ce:7c:48:ef:83:d4:86:bd:9b:
5a:c1:a8:5d:9e:dc:31:e4:3f:31:36:63:bb:ae:3b:
e8:12:b1:18:c9:c3:8e:cc:26:65:56:d0:ce:97:21:
c1:fa:e5:e0:5d:68:fe:1f:c2:21:c3:c6:27:bf:a3:
3e:69:f3:5d:c1:8c:f0:21:91:e5:9c:04:96:eb:ea:
52:51:a0:29:06:a4:e6:6e:24:86:3a:04:3d:73:d5:
ff:9a:bd:ec:b1:48:05:b4:3b:72:6c:0a:45:36:83:
50:7f:a9:35:88:ea:7a:59:fc:31:08:2f:98:80:71:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5E:19:ED:5E:2C:FB:4D:56:42:20:95:CC:B6:50:CF:AE:7F:B1:8C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/814Z7V4s-01WQiCVzLZQz65_sYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.86.12.0/24
45.130.124.0/24
45.152.198.0/24
IPv6:
2a0c:7884::/32
2a0e:1a84::/32
2a0f:2d80:1292::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:e847:1::/48
2a0f:e940::/29
2a12:d6c0::/29
2a13:18c3::/32
2a13:2b40::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
a4:3e:46:e1:40:67:ba:81:7a:7a:42:ca:8c:13:d2:45:5a:b1:
7d:af:8c:2c:06:83:cd:ff:31:ad:aa:eb:70:37:0c:be:f7:9b:
d8:a9:86:46:b4:4f:61:3e:00:5e:72:98:b8:5c:aa:44:bb:48:
52:39:0b:b3:a2:64:c6:24:97:cf:e6:cf:07:24:50:82:5e:9d:
f3:de:c9:b9:bb:ee:16:9e:00:28:7c:07:cd:ab:c7:75:a2:ef:
22:f4:7e:f8:4d:ca:8c:23:dd:bf:87:b0:92:fb:8c:0f:c6:c9:
cf:8a:ba:f2:59:14:d7:35:2a:ad:be:04:44:e4:b4:b8:f9:62:
76:87:73:3c:22:e8:e6:f5:a5:ba:c2:37:2b:12:db:c1:dc:2d:
97:f8:de:01:b6:d5:3e:cf:63:f2:f6:ca:21:92:18:72:b1:da:
4e:b3:34:30:d5:10:77:ec:92:2b:3e:04:82:f5:09:5e:ee:98:
92:6e:63:f6:c1:b7:c8:1c:2e:65:85:72:29:69:cf:c1:7b:23:
8e:ec:d3:e7:27:77:ab:47:2d:f7:4f:7d:7f:34:67:c0:92:ba:
fe:28:65:df:fb:3f:7e:80:0b:b9:4d:69:8c:9b:cd:86:82:2a:
c1:2f:b7:b1:a1:fe:bb:c1:dc:c2:54:de:08:02:60:f5:ef:bd:
dc:0d:bb:e0
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAZAm1UdsjgnUekPiJ/12vqNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNjE3MTUzMzUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzVlMTllZDVlMmNmYjRkNTY0MjIwOTVjY2I2NTBjZmFlN2ZiMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmhTapH166ZzNCO9WQvb/i+ugC9A
vQJSmLW1+lpxDLMXHlB2IeP16ee4dQWegRlHsmDtVFlq67/+K9slwt/K8Dw98v+D
gMm/RVrAM+7PKbu5TKKlNm+Pp8ZWyDbMOpfwmhj31hXoHpfmdzqeu0Vqzw6S8QEd
hQTeKybVzN6rcnPKeJdqcbviIW4fmpvOfEjvg9SGvZtawahdntwx5D8xNmO7rjvo
ErEYycOOzCZlVtDOlyHB+uXgXWj+H8Ihw8Ynv6M+afNdwYzwIZHlnASW6+pSUaAp
BqTmbiSGOgQ9c9X/mr3ssUgFtDtybApFNoNQf6k1iOp6WfwxCC+YgHG37QIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFPNeGe1eLPtNVkIglcy2UM+uf7GMMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvODE0WjdWNHMtMDFXUWlDVnpMWlF6NjVfc1l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wHgQCAAEwGAMEAC0JdQME
AC1WDAMEAC2CfAMEAC2YxjBbBAIAAjBVAwUAKgx4hAMFACoOGoQDBwAqDy2AEpID
BwAqD30AAAEDBwAqD7wAocQDBwAqD+hHAAEDBQMqD+lAAwUDKhLWwAMFACoTGMMD
BQMqEytAAwUDKhNJADANBgkqhkiG9w0BAQsFAAOCAQEApD5G4UBnuoF6ekLKjBPS
RVqxfa+MLAaDzf8xrarrcDcMvveb2KmGRrRPYT4AXnKYuFyqRLtIUjkLs6JkxiSX
z+bPByRQgl6d897JubvuFp4AKHwHzavHdaLvIvR++E3KjCPdv4ewkvuMD8bJz4q6
8lkU1zUqrb4EROS0uPlidodzPCLo5vWlusI3KxLbwdwtl/jeAbbVPs9j8vbKIZIY
crHaTrM0MNUQd+ySKz4EgvUJXu6Ykm5j9sG3yBwuZYVyKWnPwXsjjuzT5yd3q0ct
9099fzRnwJK6/ihl3/s/foALuU1pjJvNhoIqwS+3saH+u8HcwlTeCAJg9e+93A27
4A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:11 2025 by rpki-client