Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/HSUCHWanzBwcVuI7vksUIR2ORao.roa
File: HSUCHWanzBwcVuI7vksUIR2ORao.roa (raw, json)
Hash identifier: OgQtF0D7yJYNoPyT6yjV5dHlw54J4tYPfP+mhfkcnh4=
Subject key identifier: 1D:25:02:1D:66:A7:CC:1C:1C:56:E2:3B:BE:4B:14:21:1D:8E:45:AA
Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial: 018CC94E40D1B1F0774E5322708E438A9F9C
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/HSUCHWanzBwcVuI7vksUIR2ORao.roa
Signing time: Tue 02 Jan 2024 08:33:17 +0000
ROA not before: Tue 02 Jan 2024 08:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200222
IP address blocks: 45.129.104.0/24 maxlen: 24
45.129.107.0/24 maxlen: 24
2a0e:47c7:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:40:d1:b1:f0:77:4e:53:22:70:8e:43:8a:9f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Validity
Not Before: Jan 2 08:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d25021d66a7cc1c1c56e23bbe4b14211d8e45aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:d1:e5:8b:e1:9f:c8:62:f4:82:fc:76:a4:
d9:6c:a4:f7:03:09:06:cc:2c:aa:07:50:6a:c1:29:
36:77:4b:5b:a6:cf:4f:38:79:4a:ea:6b:5f:00:e7:
c3:99:26:02:03:ac:89:2e:0a:0e:6d:91:32:0a:25:
01:d9:9c:6f:8a:3d:ee:01:55:06:df:56:f1:7d:eb:
25:b8:3d:6a:7e:84:68:2e:d6:bd:bf:4d:47:09:c1:
b4:5e:2e:91:e4:7e:75:4a:b0:43:33:07:b5:ea:30:
28:3b:02:4c:1c:0b:98:0f:58:16:82:38:44:71:59:
c5:ec:08:08:71:6c:fd:da:bd:3d:05:e2:aa:23:53:
7c:7a:bc:16:6e:b5:45:d8:d7:6f:6e:fa:a0:28:d8:
d8:e4:e1:26:74:7f:bc:07:8a:32:ee:6c:25:6a:1d:
84:9b:8c:3d:0e:d1:26:d3:f9:09:88:df:f2:b4:a0:
5b:3f:ee:91:97:f5:55:ba:a2:65:10:9a:c0:e7:c0:
a8:b6:61:58:6c:04:2c:3f:96:b0:be:27:53:22:13:
8f:f9:89:b2:2f:31:c4:f2:51:05:00:b0:44:fc:ef:
04:60:28:59:8c:87:d6:bb:81:2d:10:6b:fd:83:ff:
c0:a4:8a:c7:dc:dd:49:23:79:4a:fe:da:45:8b:bf:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:25:02:1D:66:A7:CC:1C:1C:56:E2:3B:BE:4B:14:21:1D:8E:45:AA
X509v3 Authority Key Identifier:
keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/HSUCHWanzBwcVuI7vksUIR2ORao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.104.0/24
45.129.107.0/24
IPv6:
2a0e:47c7:1000::/48
Signature Algorithm: sha256WithRSAEncryption
09:fc:73:26:31:2d:a4:ee:00:0e:0f:40:d0:2d:69:45:02:7e:
52:11:11:d1:8e:5a:ee:e3:0a:05:6b:bf:0b:4a:a7:d1:02:16:
e1:da:06:3f:30:ca:c4:9c:58:93:2b:f0:e0:de:fc:d8:91:ed:
71:bc:24:63:1c:de:19:ba:02:d8:b2:a7:59:25:f6:55:d6:aa:
ea:b5:d3:d7:4b:bd:59:f8:3c:56:c7:f6:44:6e:ef:b3:d0:e4:
f3:13:b6:8b:ef:ae:37:50:0a:7e:81:54:08:84:66:cb:91:d2:
45:e7:10:31:12:50:31:6f:a1:cb:7e:b2:9d:79:bb:4d:76:97:
47:60:89:c8:ed:60:fd:37:0f:69:a7:54:24:41:50:aa:24:dd:
02:a0:f9:02:18:0f:9b:12:f7:85:fb:bc:52:b3:44:d1:1e:1f:
6a:c2:d3:fb:ea:34:84:34:0d:69:80:38:77:a4:2f:85:67:62:
c1:96:c7:b1:79:04:f9:75:7c:5e:49:67:b2:3c:29:69:20:ca:
ae:18:79:17:7e:06:f8:59:e8:40:13:ce:0c:0e:3b:ea:61:b7:
90:99:45:94:0a:e9:b2:1c:02:34:28:31:92:e9:73:95:0b:9e:
c3:1f:ff:8a:58:c5:b3:e9:83:9b:b5:9e:3d:31:dd:e8:56:6e:
6a:d3:6d:5d
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzJTkDRsfB3TlMicI5Dip+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OGMwNDc3MWUyYmZhYzhmNjBmMWI0YzljYmQwOTNhYWZl
YTk3NGUwHhcNMjQwMTAyMDgzMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDI1MDIxZDY2YTdjYzFjMWM1NmUyM2JiZTRiMTQyMTFkOGU0NWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobbR5Yvhn8hi9IL8dqTZbKT3AwkG
zCyqB1BqwSk2d0tbps9POHlK6mtfAOfDmSYCA6yJLgoObZEyCiUB2Zxvij3uAVUG
31bxfesluD1qfoRoLta9v01HCcG0Xi6R5H51SrBDMwe16jAoOwJMHAuYD1gWgjhE
cVnF7AgIcWz92r09BeKqI1N8erwWbrVF2NdvbvqgKNjY5OEmdH+8B4oy7mwlah2E
m4w9DtEm0/kJiN/ytKBbP+6Rl/VVuqJlEJrA58CotmFYbAQsP5awvidTIhOP+Ymy
LzHE8lEFALBE/O8EYChZjIfWu4EtEGv9g//ApIrH3N1JI3lK/tpFi78dXwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFB0lAh1mp8wcHFbiO75LFCEdjkWqMB8GA1UdIwQY
MBaAFOiMBHceK/rI9g8bTJy9CTqv6pdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUt
YmE2NDVmMTk5MTVhLzEvSFNVQ0hXYW56QndjVnVJN3Zrc1VJUjJPUmFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUtYmE2NDVmMTk5MTVh
LzEvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALYFoAwQA
LYFrMA8EAgACMAkDBwAqDkfHEAAwDQYJKoZIhvcNAQELBQADggEBAAn8cyYxLaTu
AA4PQNAtaUUCflIREdGOWu7jCgVrvwtKp9ECFuHaBj8wysScWJMr8ODe/NiR7XG8
JGMc3hm6Atiyp1kl9lXWquq109dLvVn4PFbH9kRu77PQ5PMTtovvrjdQCn6BVAiE
ZsuR0kXnEDESUDFvoct+sp15u012l0dgicjtYP03D2mnVCRBUKok3QKg+QIYD5sS
94X7vFKzRNEeH2rC0/vqNIQ0DWmAOHekL4VnYsGWx7F5BPl1fF5JZ7I8KWkgyq4Y
eRd+BvhZ6EATzgwOO+pht5CZRZQK6bIcAjQoMZLpc5ULnsMf/4pYxbPpg5u1nj0x
3ehWbmrTbV0=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:00 2025 by rpki-client