Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/1-1TtezD--YBfoBtSjffVKL4g0Lg.roa
File: 1-1TtezD--YBfoBtSjffVKL4g0Lg.roa (raw, json)
Hash identifier: cJkNePtBGMeeZVR1kC9Xk20bPonzSvKithT1bug1xjE=
Subject key identifier: FB:54:ED:7B:30:FE:F9:80:5F:A0:1B:52:8D:F7:D5:28:BE:20:D0:B8
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 01957CFCD7CD64BA59645CB146A3148AD085
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/1-1TtezD--YBfoBtSjffVKL4g0Lg.roa
Signing time: Sun 09 Mar 2025 22:18:19 +0000
ROA not before: Sun 09 Mar 2025 22:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 05:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7c:fc:d7:cd:64:ba:59:64:5c:b1:46:a3:14:8a:d0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Mar 9 22:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb54ed7b30fef9805fa01b528df7d528be20d0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:ee:fb:b1:4f:03:d5:8c:63:bf:af:e2:4c:
f5:c1:ea:da:b1:da:4d:02:0f:0e:ee:a5:a6:bb:5c:
cf:3f:7e:0d:b9:25:2d:61:25:8a:c8:8f:94:96:db:
cb:b0:dd:60:f2:61:da:29:69:0a:b4:0a:73:3a:98:
80:00:40:a6:55:ef:48:a6:ca:2c:42:8d:a5:64:74:
31:d7:1c:74:98:0a:34:87:53:7a:c4:7c:47:c0:6c:
2f:47:55:5c:74:55:ea:25:4b:15:62:fd:97:80:1e:
85:84:49:d0:2a:72:d2:b2:5a:34:51:19:d4:fe:1c:
32:60:81:cf:78:11:aa:5e:91:43:f3:15:e2:32:87:
c1:13:cb:c0:00:c5:22:08:12:54:97:0a:dd:7b:65:
75:75:67:05:08:c0:2b:71:b1:da:2a:e6:2f:a5:d5:
4d:b0:13:67:32:c7:fd:e1:13:13:b5:7e:0b:9e:61:
e3:62:63:b0:36:7f:a4:6e:14:30:4b:39:d1:6a:b9:
0e:7e:2d:d7:ec:fa:06:0d:57:fa:fa:50:38:19:81:
53:81:37:c4:3e:e3:0e:22:18:08:96:70:cc:1b:3e:
f2:cc:63:01:39:c4:be:ea:1d:9d:b8:2d:83:7c:d7:
9a:97:7c:6d:20:e8:2e:04:bd:af:a0:e8:61:20:a7:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:54:ED:7B:30:FE:F9:80:5F:A0:1B:52:8D:F7:D5:28:BE:20:D0:B8
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/1-1TtezD--YBfoBtSjffVKL4g0Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
35:63:17:21:7e:5b:6e:fd:a4:2b:e8:aa:83:18:97:f3:9e:41:
1f:6d:b9:7b:d8:99:69:51:92:d9:b7:73:1e:b7:96:e7:58:83:
7b:f4:e1:99:88:d8:5e:e5:fa:06:a1:46:b7:cd:b4:36:a5:2f:
3a:78:13:f8:8f:39:a0:47:1b:a1:aa:6e:a4:cd:76:c6:fb:79:
6c:85:8a:3b:f1:80:2b:b0:32:3d:25:ff:84:0f:88:6c:45:23:
07:88:b5:d5:13:20:3f:22:4c:03:6b:cd:a9:d1:49:34:a9:f6:
0d:04:89:83:11:e2:84:19:01:a4:bc:6a:71:b2:66:02:69:d4:
b4:4b:f2:4b:ff:5e:ef:37:a2:aa:1a:b3:7c:5e:8b:51:58:98:
9d:87:8e:74:c1:4f:bb:29:6a:11:87:34:46:55:36:b4:8c:19:
35:61:64:46:8c:30:d2:bb:aa:3f:16:82:a6:07:9c:12:64:f0:
97:a0:b8:d5:20:54:56:dd:24:f9:98:84:10:14:43:6c:09:18:
ff:66:f5:2e:c8:3d:5d:93:7d:74:92:09:5d:de:eb:cb:ee:c8:
b8:80:a2:b4:17:d6:9d:f1:eb:19:d0:d9:b9:c0:d6:d3:6c:43:
fd:ee:6b:fe:e3:f3:68:3f:af:26:0b:c3:0a:4c:e1:bc:65:37:
b6:02:93:41
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZV8/NfNZLpZZFyxRqMUitCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi
ODU3NGUwHhcNMjUwMzA5MjIxODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjU0ZWQ3YjMwZmVmOTgwNWZhMDFiNTI4ZGY3ZDUyOGJlMjBkMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7bu+7FPA9WMY7+v4kz1werasdpN
Ag8O7qWmu1zPP34NuSUtYSWKyI+UltvLsN1g8mHaKWkKtApzOpiAAECmVe9Ipsos
Qo2lZHQx1xx0mAo0h1N6xHxHwGwvR1VcdFXqJUsVYv2XgB6FhEnQKnLSslo0URnU
/hwyYIHPeBGqXpFD8xXiMofBE8vAAMUiCBJUlwrde2V1dWcFCMArcbHaKuYvpdVN
sBNnMsf94RMTtX4LnmHjYmOwNn+kbhQwSznRarkOfi3X7PoGDVf6+lA4GYFTgTfE
PuMOIhgIlnDMGz7yzGMBOcS+6h2duC2DfNeal3xtIOguBL2voOhhIKedMQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPtU7Xsw/vmAX6AbUo331Si+INC4MB8GA1UdIwQY
MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt
NGUyMjM5MTdiODYwLzEvMS0xVHRlekQtLVlCZm9CdFNqZmZWS0w0ZzBMZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzAvZTkyYzQ5LWJkNGEtNGU4ZC1iYmY2LTRlMjIzOTE3Yjg2
MC8xL0p4bEJLUmltWW4tWnpPVmNlc29Ua0ZlNFYwNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2VPjAN
BgkqhkiG9w0BAQsFAAOCAQEANWMXIX5bbv2kK+iqgxiX855BH225e9iZaVGS2bdz
HreW51iDe/ThmYjYXuX6BqFGt820NqUvOngT+I85oEcboapupM12xvt5bIWKO/GA
K7AyPSX/hA+IbEUjB4i11RMgPyJMA2vNqdFJNKn2DQSJgxHihBkBpLxqcbJmAmnU
tEvyS/9e7zeiqhqzfF6LUViYnYeOdMFPuylqEYc0RlU2tIwZNWFkRoww0ruqPxaC
pgecEmTwl6C41SBUVt0k+ZiEEBRDbAkY/2b1Lsg9XZN9dJIJXd7ry+7IuICitBfW
nfHrGdDZucDW02xD/e5r/uPzaD+vJgvDCkzhvGU3tgKTQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:03 2025 by rpki-client