Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uEtfff4R8ou9GYrIIhcm-3hdAPI.roa
File: uEtfff4R8ou9GYrIIhcm-3hdAPI.roa (raw, json)
Hash identifier: cGG+Bwd16J5/J3PUuWwj9jGlnWabwTSOu1Ji9mBJcyM=
Subject key identifier: B8:4B:5F:7D:FE:11:F2:8B:BD:19:8A:C8:22:17:26:FB:78:5D:00:F2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01914A9F4D621611B62450567996AC702808
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uEtfff4R8ou9GYrIIhcm-3hdAPI.roa
Signing time: Tue 13 Aug 2024 07:23:59 +0000
ROA not before: Tue 13 Aug 2024 07:23:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.86.12.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
2a0e:15c4::/32 maxlen: 32
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:3d80:bac::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a12:ecc2::/32 maxlen: 48
2a13:18c3::/32 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 13 Aug 2024 08:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:9f:4d:62:16:11:b6:24:50:56:79:96:ac:70:28:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 13 07:23:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b84b5f7dfe11f28bbd198ac8221726fb785d00f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:c8:b7:87:d9:7c:04:1e:54:17:ac:c7:b4:
11:6f:6c:6e:ba:6c:42:75:89:eb:8e:e8:a0:b3:5e:
5e:67:21:ba:74:97:c2:8d:22:c6:a7:93:50:58:3b:
93:68:dc:cb:55:27:c1:30:32:25:ce:30:ce:cd:48:
bd:98:3e:07:ff:89:6e:b1:2c:2f:68:61:8b:54:21:
57:ea:24:fb:dc:43:4f:bb:7a:5f:58:63:4a:08:36:
d8:65:12:e5:13:b3:d7:99:a4:28:4b:d8:16:ef:fa:
37:63:13:20:03:03:64:f5:31:b0:a2:e4:89:ba:68:
07:fe:2c:8b:da:c3:10:d3:b8:f8:31:85:9c:cd:49:
51:9c:1a:5b:c3:d0:2f:0f:40:0c:9f:83:f6:e3:98:
af:08:6f:02:be:77:b4:2a:b2:c8:29:47:6f:35:de:
56:43:df:9f:0d:94:50:5a:12:39:d8:09:a0:be:1d:
f3:fc:ee:63:0c:e5:56:74:aa:a1:14:9b:80:32:03:
69:a1:30:31:32:79:d9:d7:b1:4b:40:00:2f:bd:17:
e5:d6:e3:5c:9f:af:91:b5:68:45:87:60:17:05:52:
a8:e9:21:66:8a:65:2f:4d:3e:16:e6:f8:2d:dd:14:
f9:7b:54:53:86:1e:91:27:61:c0:c6:97:73:43:a7:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:5F:7D:FE:11:F2:8B:BD:19:8A:C8:22:17:26:FB:78:5D:00:F2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uEtfff4R8ou9GYrIIhcm-3hdAPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.12.0/24
45.152.198.0/24
IPv6:
2a0e:15c4::/32
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:3d80:bac::/48
2a0f:3d82::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a12:ecc2::/32
2a13:18c3::/32
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
23:74:54:03:2d:d9:31:66:d2:6a:fe:e1:83:89:b2:58:cd:72:
47:8a:e8:a0:ee:ec:a3:08:06:8e:e8:8d:0a:1b:9d:c4:f5:98:
2e:82:f1:f2:a6:05:a2:2d:9c:3a:03:71:6d:67:69:75:01:21:
26:f4:9f:c5:47:af:59:58:32:cc:99:30:74:76:59:1e:29:9a:
a6:88:e7:e3:4e:7b:fd:98:6d:b3:18:84:40:63:a6:d5:48:43:
2b:03:c2:12:0e:d5:bd:44:da:f1:54:2f:58:a7:3c:34:7e:f9:
21:5b:10:e6:f3:cf:42:17:eb:b2:9d:a3:1b:f7:4e:f6:ee:8e:
a4:56:b9:31:cf:fa:d6:ca:94:08:9d:57:05:a6:ca:ec:80:83:
74:cb:bc:f3:9f:18:59:a3:7c:6d:d3:fb:cd:9c:d9:4b:8d:47:
b8:3d:20:9d:76:2d:2d:a8:66:e6:ee:81:e6:98:5b:d6:76:58:
8f:cb:66:77:55:d9:c3:a9:06:4b:cb:34:93:9a:76:56:44:a1:
ab:3d:e2:8a:7c:26:2a:f7:39:2a:78:36:51:75:6e:bc:53:c5:
15:41:05:77:2f:f3:3e:3f:33:31:6a:70:c9:8f:b1:83:00:3b:
93:fb:32:79:a8:8a:39:fc:33:fc:b7:27:7d:08:03:c2:3f:85:
1c:83:01:36
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZFKn01iFhG2JFBWeZascCgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwODEzMDcyMzU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODRiNWY3ZGZlMTFmMjhiYmQxOThhYzgyMjE3MjZmYjc4NWQwMGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyzIt4fZfAQeVBesx7QRb2xuumxC
dYnrjuigs15eZyG6dJfCjSLGp5NQWDuTaNzLVSfBMDIlzjDOzUi9mD4H/4lusSwv
aGGLVCFX6iT73ENPu3pfWGNKCDbYZRLlE7PXmaQoS9gW7/o3YxMgAwNk9TGwouSJ
umgH/iyL2sMQ07j4MYWczUlRnBpbw9AvD0AMn4P245ivCG8Cvne0KrLIKUdvNd5W
Q9+fDZRQWhI52Amgvh3z/O5jDOVWdKqhFJuAMgNpoTAxMnnZ17FLQAAvvRfl1uNc
n6+RtWhFh2AXBVKo6SFmimUvTT4W5vgt3RT5e1RThh6RJ2HAxpdzQ6ddxwIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFLhLX33+EfKLvRmKyCIXJvt4XQDyMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvdUV0ZmZmNFI4b3U5R1lySUloY20tM2hkQVBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajASBAIAATAMAwQALVYMAwQA
LZjGMFQEAgACME4DBQAqDhXEAwUAKg4ahAMHACoO9gAAXwMHACoPPYALrAMFACoP
PYIDBwAqD30AAAEDBwAqD7wAocQDBQAqEuzCAwUAKhMYwwMFAyoTK0AwDQYJKoZI
hvcNAQELBQADggEBACN0VAMt2TFm0mr+4YOJsljNckeK6KDu7KMIBo7ojQobncT1
mC6C8fKmBaItnDoDcW1naXUBISb0n8VHr1lYMsyZMHR2WR4pmqaI5+NOe/2YbbMY
hEBjptVIQysDwhIO1b1E2vFUL1inPDR++SFbEObzz0IX67Kdoxv3TvbujqRWuTHP
+tbKlAidVwWmyuyAg3TLvPOfGFmjfG3T+82c2UuNR7g9IJ12LS2oZubugeaYW9Z2
WI/LZndV2cOpBkvLNJOadlZEoas94op8Jir3OSp4NlF1brxTxRVBBXcv8z4/MzFq
cMmPsYMAO5P7Mnmoijn8M/y3J30IA8I/hRyDATY=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:25 2025 by rpki-client