Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/7aRQV_TmrLsTpqYxvvpzmRJCqB0.roa
File: 7aRQV_TmrLsTpqYxvvpzmRJCqB0.roa (raw, json)
Hash identifier: VS8YsYzRUFMQxxgKDj4KHDhHWuIFKNCnmc4aAjXRfSg=
Subject key identifier: ED:A4:50:57:F4:E6:AC:BB:13:A6:A6:31:BE:FA:73:99:12:42:A8:1D
Certificate issuer: /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Certificate serial: 018D552DC864CDF90A845F8FA8A703935CEA
Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/7aRQV_TmrLsTpqYxvvpzmRJCqB0.roa
Signing time: Mon 29 Jan 2024 12:24:40 +0000
ROA not before: Mon 29 Jan 2024 12:24:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208058
IP address blocks: 45.145.39.0/24 maxlen: 24
2a13:5a40::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:2d:c8:64:cd:f9:0a:84:5f:8f:a8:a7:03:93:5c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Validity
Not Before: Jan 29 12:24:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eda45057f4e6acbb13a6a631befa73991242a81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:80:9b:0c:19:71:d2:c8:c2:db:45:99:93:
04:dd:a7:a8:c4:f1:9f:d8:33:16:3c:af:df:9f:f2:
37:93:3f:d7:e1:63:9b:cf:75:ca:b7:ce:33:8b:34:
c0:cc:df:5e:47:df:4b:a2:63:c8:76:2b:ea:b7:c7:
b7:d3:0a:99:2b:b2:d0:f2:ad:22:35:2d:41:97:74:
6e:67:18:66:09:13:92:52:f5:8e:c9:94:39:90:15:
b1:b7:4e:d5:ea:7b:2f:b2:b8:4f:a8:02:2f:df:81:
95:1b:02:0a:a2:91:3d:80:5a:d0:48:d4:bf:67:d5:
4f:bd:fe:eb:14:7c:34:6d:40:9b:dd:1a:16:2e:b0:
35:c6:78:c2:72:8a:ae:d2:31:b2:2f:5e:3a:41:d9:
b5:6e:1f:b4:cd:43:26:2f:9e:ea:b0:1e:9e:0a:e1:
a9:0a:12:a2:1a:f8:94:83:1f:36:92:de:cc:51:1b:
82:12:26:00:08:2b:7f:94:57:71:c6:3c:79:d6:e1:
ad:47:4f:dd:48:f1:7b:5d:99:91:4f:24:79:6a:4a:
1d:9b:d6:c3:87:2d:8e:d7:d4:6c:5a:ae:67:e4:46:
f6:ef:b8:1b:0b:c4:f3:4a:5b:87:40:b8:28:42:4b:
97:ac:ce:5c:4b:ca:d9:db:22:c1:ac:ee:aa:3e:a2:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A4:50:57:F4:E6:AC:BB:13:A6:A6:31:BE:FA:73:99:12:42:A8:1D
X509v3 Authority Key Identifier:
keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/7aRQV_TmrLsTpqYxvvpzmRJCqB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.39.0/24
IPv6:
2a13:5a40::/29
Signature Algorithm: sha256WithRSAEncryption
1d:a0:71:61:6b:1c:13:f5:80:0a:f2:71:fb:95:0d:df:90:e8:
31:69:8d:68:39:fc:6f:4a:a6:ae:a8:a0:f5:79:27:da:c2:b2:
6e:5f:d5:e0:e6:73:7a:c7:94:30:64:8a:84:16:09:cb:50:93:
34:59:f9:f4:51:4a:d3:7b:99:ca:62:6b:f3:5d:10:4d:3a:c2:
9b:b3:49:e7:06:90:5f:18:4b:c7:6d:b6:57:ee:f6:34:8a:5e:
fc:00:19:dc:b6:9e:75:59:9d:83:16:87:6c:5e:b5:7a:ff:2b:
d0:60:ed:13:a3:56:44:07:b0:1e:d3:f5:40:fe:66:ff:25:27:
4b:0e:67:07:36:89:c5:3c:6c:6c:0c:24:69:2c:12:5f:35:86:
79:7d:9b:c5:8d:b2:1e:d8:a2:ad:3b:99:17:71:98:c0:da:56:
cf:0c:4a:16:4a:e3:f1:64:dd:ca:df:33:78:72:7f:5f:48:bf:
8a:b9:5e:71:1a:29:b2:fe:f5:f8:c5:41:2e:01:43:af:ce:68:
e3:bb:3a:8d:e5:94:dc:1b:73:07:8a:f7:7e:39:75:0a:f6:55:
6a:28:62:7e:e5:0e:4f:34:73:f0:be:17:70:23:1b:d5:36:8d:
e7:72:d3:ae:f0:97:f2:41:62:4f:3d:8d:a2:d2:a4:5e:d4:1b:
16:01:27:6f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY1VLchkzfkKhF+PqKcDk1zqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NWNmODllZTU2Mjc5N2U3NzVhYTRkMWQxZjdlNDVmNDY2
YTczYzMwHhcNMjQwMTI5MTIyNDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGE0NTA1N2Y0ZTZhY2JiMTNhNmE2MzFiZWZhNzM5OTEyNDJhODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCaAmwwZcdLIwttFmZME3aeoxPGf
2DMWPK/fn/I3kz/X4WObz3XKt84zizTAzN9eR99LomPIdivqt8e30wqZK7LQ8q0i
NS1Bl3RuZxhmCROSUvWOyZQ5kBWxt07V6nsvsrhPqAIv34GVGwIKopE9gFrQSNS/
Z9VPvf7rFHw0bUCb3RoWLrA1xnjCcoqu0jGyL146Qdm1bh+0zUMmL57qsB6eCuGp
ChKiGviUgx82kt7MURuCEiYACCt/lFdxxjx51uGtR0/dSPF7XZmRTyR5akodm9bD
hy2O19RsWq5n5Eb277gbC8TzSluHQLgoQkuXrM5cS8rZ2yLBrO6qPqK27wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFO2kUFf05qy7E6amMb76c5kSQqgdMB8GA1UdIwQY
MBaAFKVc+J7lYnl+d1qk0dH35F9GanPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAt
YWJjYjFlNzU4MmIzLzEvN2FSUVZfVG1yTHNUcHFZeHZ2cHptUkpDcUIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAtYWJjYjFlNzU4MmIz
LzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALZEnMA0E
AgACMAcDBQMqE1pAMA0GCSqGSIb3DQEBCwUAA4IBAQAdoHFhaxwT9YAK8nH7lQ3f
kOgxaY1oOfxvSqauqKD1eSfawrJuX9Xg5nN6x5QwZIqEFgnLUJM0Wfn0UUrTe5nK
YmvzXRBNOsKbs0nnBpBfGEvHbbZX7vY0il78ABnctp51WZ2DFodsXrV6/yvQYO0T
o1ZEB7Ae0/VA/mb/JSdLDmcHNonFPGxsDCRpLBJfNYZ5fZvFjbIe2KKtO5kXcZjA
2lbPDEoWSuPxZN3K3zN4cn9fSL+KuV5xGimy/vX4xUEuAUOvzmjjuzqN5ZTcG3MH
ivd+OXUK9lVqKGJ+5Q5PNHPwvhdwIxvVNo3nctOu8JfyQWJPPY2i0qRe1BsWASdv
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:56 2025 by rpki-client