Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/yYN8cxhXdkUu4usNxwa0nreWacw.roa
File: yYN8cxhXdkUu4usNxwa0nreWacw.roa (raw, json)
Hash identifier: Q/3gkie3EmdI6A86l32eu7fZUVLLyNcrliQ0x8wtYiQ=
Subject key identifier: C9:83:7C:73:18:57:76:45:2E:E2:EB:0D:C7:06:B4:9E:B7:96:69:CC
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0193C27CDA8DB3950C0437FE4529999DD809
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/yYN8cxhXdkUu4usNxwa0nreWacw.roa
Signing time: Sat 14 Dec 2024 00:06:22 +0000
ROA not before: Sat 14 Dec 2024 00:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.95.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Dec 2024 14:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c2:7c:da:8d:b3:95:0c:04:37:fe:45:29:99:9d:d8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Dec 14 00:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9837c73185776452ee2eb0dc706b49eb79669cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:77:9b:b5:22:10:26:69:04:b6:c3:38:71:
86:47:5d:88:7c:b5:4e:ba:6c:5f:1c:d6:43:d6:a4:
2e:88:c1:18:6e:03:49:12:b6:48:c5:b2:ed:20:b1:
d7:44:5d:7e:5a:8f:52:0b:49:ed:c8:32:3d:5f:ac:
66:d9:99:23:38:8b:8e:99:80:a6:4a:b1:14:23:a7:
1a:6a:e2:aa:f5:8b:8f:d0:f5:c4:4e:48:0b:58:a1:
c4:17:c0:83:3f:64:43:6a:78:ee:16:a8:cb:71:e1:
c7:88:2e:d3:3d:bf:3b:79:96:c1:d8:ca:2a:2f:75:
d4:53:80:69:bc:73:19:d4:1a:37:67:7b:38:77:5b:
48:d1:a0:1d:22:2c:fa:fe:17:0e:59:a5:6d:0d:99:
bc:49:ca:e1:ae:03:c3:6a:f6:40:1e:85:af:9b:10:
1c:18:1e:b9:f1:60:eb:95:a5:10:11:2f:d9:d4:00:
0d:77:55:52:59:ec:15:eb:78:2a:33:95:13:de:c3:
d6:29:87:46:28:6f:69:8f:10:bb:e9:62:8e:28:44:
2d:a7:2f:7c:e6:9e:c9:e1:e4:e5:53:ce:ef:61:1f:
8c:e0:e9:bb:9f:df:a2:ff:83:14:17:dc:86:19:10:
49:ab:53:8d:4e:67:62:94:cb:41:ef:33:3b:0a:5b:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:7C:73:18:57:76:45:2E:E2:EB:0D:C7:06:B4:9E:B7:96:69:CC
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/yYN8cxhXdkUu4usNxwa0nreWacw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7e:d0:f4:e9:6e:ac:25:84:b6:8a:69:8c:f6:33:dd:b2:12:
8d:34:25:bc:a3:82:25:58:63:50:4c:b6:ae:f7:f8:a3:10:f8:
a6:81:09:48:9e:cf:21:98:3d:68:87:fa:92:81:33:8c:0f:dd:
f5:1a:de:a7:40:42:e7:3b:f7:fa:3a:78:36:88:99:fc:21:fb:
6a:b1:20:5d:eb:5b:42:ea:b0:5c:38:3c:7f:65:51:f1:cf:2d:
16:d6:6d:f4:b9:d7:3b:3a:b9:89:53:b5:6a:f0:ee:b0:29:74:
10:26:d8:3e:d2:7d:da:8a:d8:7f:84:5f:a0:7b:96:79:cf:c3:
81:82:c1:9e:12:1b:98:9b:8c:05:95:c6:32:f8:cc:3c:54:40:
91:dc:ee:60:c6:b0:c1:46:60:55:96:e7:41:ec:74:44:f7:6e:
7d:cc:a6:23:75:ca:a3:8b:ad:76:68:3c:ed:04:01:52:42:5d:
1c:94:86:93:7d:be:3a:4a:c2:04:29:28:c1:5e:d8:83:2d:4a:
f0:fa:a4:46:2d:78:e9:f3:d2:79:7c:45:89:5d:40:df:b6:08:
c4:36:1b:5e:fb:de:87:90:3f:5c:1a:0d:fa:d4:d4:a3:99:ce:
0a:ad:4d:c5:80:97:ae:bb:d7:72:a7:89:a9:d2:dd:ad:af:bb:
03:a7:5f:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPCfNqNs5UMBDf+RSmZndgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjQxMjE0MDAwNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTgzN2M3MzE4NTc3NjQ1MmVlMmViMGRjNzA2YjQ5ZWI3OTY2OWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv713m7UiECZpBLbDOHGGR12IfLVO
umxfHNZD1qQuiMEYbgNJErZIxbLtILHXRF1+Wo9SC0ntyDI9X6xm2ZkjOIuOmYCm
SrEUI6caauKq9YuP0PXETkgLWKHEF8CDP2RDanjuFqjLceHHiC7TPb87eZbB2Moq
L3XUU4BpvHMZ1Bo3Z3s4d1tI0aAdIiz6/hcOWaVtDZm8ScrhrgPDavZAHoWvmxAc
GB658WDrlaUQES/Z1AANd1VSWewV63gqM5UT3sPWKYdGKG9pjxC76WKOKEQtpy98
5p7J4eTlU87vYR+M4Om7n9+i/4MUF9yGGRBJq1ONTmdilMtB7zM7CluPDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMmDfHMYV3ZFLuLrDccGtJ63lmnMMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEveVlOOGN4aFhka1V1NHVzTnh3YTBucmVXYWN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV/iMA0G
CSqGSIb3DQEBCwUAA4IBAQATftD06W6sJYS2immM9jPdshKNNCW8o4IlWGNQTLau
9/ijEPimgQlIns8hmD1oh/qSgTOMD931Gt6nQELnO/f6Ong2iJn8IftqsSBd61tC
6rBcODx/ZVHxzy0W1m30udc7OrmJU7Vq8O6wKXQQJtg+0n3aith/hF+ge5Z5z8OB
gsGeEhuYm4wFlcYy+Mw8VECR3O5gxrDBRmBVludB7HRE9259zKYjdcqji612aDzt
BAFSQl0clIaTfb46SsIEKSjBXtiDLUrw+qRGLXjp89J5fEWJXUDftgjENhte+96H
kD9cGg361NSjmc4KrU3FgJeuu9dyp4mp0t2tr7sDp1/5
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:06 2025 by rpki-client