Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/c9Jts2N8oVf9lHj72KVgQUT-w24.roa
File: c9Jts2N8oVf9lHj72KVgQUT-w24.roa (raw, json)
Hash identifier: dLBoiGpxX0zfd9VEWIKaOMzf588NvdadO+Yi3scDtGU=
Subject key identifier: 73:D2:6D:B3:63:7C:A1:57:FD:94:78:FB:D8:A5:60:41:44:FE:C3:6E
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 0192941E616472B8CCF428B4414052980FC8
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/c9Jts2N8oVf9lHj72KVgQUT-w24.roa
Signing time: Wed 16 Oct 2024 06:57:51 +0000
ROA not before: Wed 16 Oct 2024 06:57:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd00::/29 maxlen: 48
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 08:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:1e:61:64:72:b8:cc:f4:28:b4:41:40:52:98:0f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 16 06:57:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73d26db3637ca157fd9478fbd8a5604144fec36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:af:0c:ee:68:a4:7f:fd:73:8f:a8:2b:07:
d0:3e:06:18:cd:dd:4f:1a:dc:09:dd:43:d0:10:56:
5c:78:fc:c5:4f:00:3a:53:41:a9:d8:8f:09:f7:09:
12:6b:eb:1e:aa:30:8d:ca:66:bd:93:13:77:89:01:
97:2b:15:4f:9f:3a:35:37:18:6d:2b:d7:d1:97:7f:
c8:19:b4:00:70:ca:48:34:68:a9:c8:6a:b0:b2:29:
6f:42:88:cc:6f:1b:c9:ab:fd:51:25:c9:4b:a1:34:
14:bd:a2:30:12:ed:cb:39:d5:a5:a4:9e:6d:f9:7d:
b6:f1:51:0f:20:c6:06:e4:89:53:db:ae:b7:d9:20:
9d:ca:ad:d1:6d:51:f0:e2:fe:4a:b3:17:34:cc:83:
32:88:96:ef:67:eb:85:82:dd:7a:05:d2:e6:b7:e5:
9b:31:4b:e7:2e:1c:05:00:d1:ad:f6:f7:73:c6:10:
00:df:3b:1c:97:5c:d1:34:fd:02:a0:90:58:3f:69:
4d:13:9e:47:72:06:e1:6d:dc:0d:82:70:37:06:fc:
a3:cd:8d:0a:6b:54:aa:23:0b:fa:31:f6:7d:1e:86:
e7:ce:5d:47:fe:5b:cd:79:65:b8:dd:0f:f3:0d:b4:
9c:44:6a:c8:70:9f:84:eb:2f:fb:de:3b:69:ae:6e:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D2:6D:B3:63:7C:A1:57:FD:94:78:FB:D8:A5:60:41:44:FE:C3:6E
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/c9Jts2N8oVf9lHj72KVgQUT-w24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
5d:cd:e1:be:51:ad:31:18:fa:3f:a9:35:e7:2a:97:6c:82:df:
29:79:f0:35:1a:67:9c:52:b6:91:45:23:cb:90:6b:6b:6e:26:
23:0b:a4:8e:a6:3a:f1:a3:5d:4d:00:8d:02:ff:01:b2:b1:5b:
02:33:d4:81:dd:37:a4:cc:aa:76:50:9f:94:5f:ea:a3:0c:68:
1d:d1:ea:40:f2:7f:f4:55:64:9c:f8:6e:58:f1:1f:be:9d:3f:
4a:d7:30:84:ad:2c:b4:3f:61:28:0b:40:77:9f:59:2b:4b:55:
4b:a8:0c:04:72:a7:05:89:24:c4:53:41:25:e8:e7:3a:e0:10:
c1:70:08:5e:1b:0a:53:87:39:a3:9e:c4:64:80:dd:48:5d:af:
b5:de:4e:05:b9:a2:8a:65:35:f9:66:89:82:63:07:ab:4c:10:
03:e5:02:12:9b:e6:61:9d:35:4e:65:cb:3c:b9:0f:68:af:d5:
af:1a:0c:b3:fb:87:9a:cf:bf:1e:a2:b3:bb:e7:27:2f:49:f1:
f0:2a:8a:25:5b:14:a2:ce:98:ba:11:7d:9c:15:0f:83:19:ee:
37:b6:d0:5d:78:0b:47:a6:76:16:28:dd:3c:45:0e:2d:27:57:
f1:59:69:e7:b3:af:1a:56:0e:a6:f3:de:d5:01:7a:2b:c3:10:
2c:5f:2f:4e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZKUHmFkcrjM9Ci0QUBSmA/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw
ZWZlMjUwHhcNMjQxMDE2MDY1NzUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2QyNmRiMzYzN2NhMTU3ZmQ5NDc4ZmJkOGE1NjA0MTQ0ZmVjMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkyvDO5opH/9c4+oKwfQPgYYzd1P
GtwJ3UPQEFZcePzFTwA6U0Gp2I8J9wkSa+seqjCNyma9kxN3iQGXKxVPnzo1Nxht
K9fRl3/IGbQAcMpINGipyGqwsilvQojMbxvJq/1RJclLoTQUvaIwEu3LOdWlpJ5t
+X228VEPIMYG5IlT26632SCdyq3RbVHw4v5Ksxc0zIMyiJbvZ+uFgt16BdLmt+Wb
MUvnLhwFANGt9vdzxhAA3zscl1zRNP0CoJBYP2lNE55HcgbhbdwNgnA3BvyjzY0K
a1SqIwv6MfZ9Hobnzl1H/lvNeWW43Q/zDbScRGrIcJ+E6y/73jtprm4qBwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFHPSbbNjfKFX/ZR4+9ilYEFE/sNuMB8GA1UdIwQY
MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt
M2YzYTAyNzQ4YzJhLzEvYzlKdHMyTjhvVmY5bEhqNzJLVmdRVVQtdzI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh
LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCLYHgMBQE
AgACMA4DBQMqDlBAAwUDKg/9ADANBgkqhkiG9w0BAQsFAAOCAQEAXc3hvlGtMRj6
P6k15yqXbILfKXnwNRpnnFK2kUUjy5Bra24mIwukjqY68aNdTQCNAv8BsrFbAjPU
gd03pMyqdlCflF/qowxoHdHqQPJ/9FVknPhuWPEfvp0/StcwhK0stD9hKAtAd59Z
K0tVS6gMBHKnBYkkxFNBJejnOuAQwXAIXhsKU4c5o57EZIDdSF2vtd5OBbmiimU1
+WaJgmMHq0wQA+UCEpvmYZ01TmXLPLkPaK/VrxoMs/uHms+/HqKzu+cnL0nx8CqK
JVsUos6YuhF9nBUPgxnuN7bQXXgLR6Z2FijdPEUOLSdX8Vlp57OvGlYOpvPe1QF6
K8MQLF8vTg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:53:55 2025 by rpki-client