Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/cI7mAijeB8NFCY1OkUS7c1XJsEU.roa
File: cI7mAijeB8NFCY1OkUS7c1XJsEU.roa (raw, json)
Hash identifier: 4BHgXSI0oXP1SRuExy2FR3RSf6oDM9ziWIa3jIL3qyk=
Subject key identifier: 70:8E:E6:02:28:DE:07:C3:45:09:8D:4E:91:44:BB:73:55:C9:B0:45
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C9046813932CEC1985C3A1A72A828
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/cI7mAijeB8NFCY1OkUS7c1XJsEU.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 45.155.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 07:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:90:46:81:39:32:ce:c1:98:5c:3a:1a:72:a8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=708ee60228de07c345098d4e9144bb7355c9b045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:4f:0a:f4:33:c9:c3:c3:9a:93:c5:cb:70:
c8:50:80:59:27:7c:c4:40:55:d4:f9:6b:3d:a0:f2:
4f:b5:f6:1c:b5:82:4a:e2:27:e2:b3:f6:a6:5a:5f:
c1:07:31:cf:b1:b9:d0:4f:fe:38:7d:41:16:19:96:
16:cb:a0:1d:26:d1:cf:03:44:a1:77:f8:d9:d9:31:
9f:e0:b0:af:5b:c9:8e:c5:16:70:12:48:d7:7e:fd:
62:17:98:7b:34:e8:ef:d3:14:95:ed:af:f7:90:64:
70:9b:f0:a8:ee:9d:1b:67:47:da:c9:75:0b:c9:40:
9b:bf:62:9d:0b:5d:83:51:25:47:d0:20:08:e5:a1:
27:2a:9d:8a:24:0c:cb:3e:07:e3:ca:75:7f:29:d1:
02:df:96:f1:67:b7:01:12:48:a3:9e:23:da:ae:ab:
bd:7a:8c:7d:49:58:45:2f:2b:87:96:49:c7:b7:c7:
86:25:0f:32:2c:89:86:d7:f2:2d:75:e1:0c:f4:4f:
f9:dc:cb:df:9f:3c:bf:64:9f:ed:48:99:fd:bc:d0:
ae:fe:f6:26:85:d4:29:86:f6:95:d9:0c:ad:76:6f:
4c:b9:0b:22:f8:d0:00:41:f4:ca:86:c5:62:75:91:
9d:aa:c2:7b:0e:01:5d:26:63:57:e4:d7:3e:79:ea:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8E:E6:02:28:DE:07:C3:45:09:8D:4E:91:44:BB:73:55:C9:B0:45
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/cI7mAijeB8NFCY1OkUS7c1XJsEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.243.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7e:d2:c5:d9:13:da:77:ef:f5:9a:e8:99:85:97:9b:09:a5:
a7:20:c0:47:bc:b2:e7:96:70:88:af:22:68:c0:0d:86:b4:03:
c9:73:2d:26:49:5a:1d:93:51:c8:e1:e4:82:39:93:8a:10:40:
9a:e3:97:77:b3:7c:75:f6:aa:e9:dc:86:21:e8:42:4f:88:b0:
9c:dd:19:27:30:a5:66:cf:05:38:b4:25:84:85:4a:8d:fb:b6:
c5:e9:72:cb:50:47:b2:2b:ab:35:c8:bb:a8:5e:52:f2:6e:22:
69:64:3c:a7:0b:31:f1:87:82:fa:1c:d0:f7:69:c5:91:3b:57:
32:e6:92:00:a5:68:33:d5:f6:ba:be:e4:f1:04:4b:4f:cb:65:
20:83:65:4f:60:bd:13:f7:4c:73:f1:1f:44:ea:c6:5d:07:d8:
77:13:65:1e:04:e4:bb:fd:42:61:16:aa:37:17:75:b1:27:08:
74:50:ad:3a:0c:d1:e9:67:8a:b4:b9:3f:5c:df:51:c9:ab:58:
5b:93:bb:8f:22:7d:16:8a:c4:9f:99:fa:6f:d3:2f:0a:14:86:
fb:13:af:9b:db:1f:31:08:7b:b0:1b:9d:00:c4:7f:d4:30:c0:
a2:bf:15:2c:5d:8c:01:d2:8f:88:7f:d1:ed:32:6b:14:31:77:
10:16:fa:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJBGgTkyzsGYXDoacqgoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwMTAxMDE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDhlZTYwMjI4ZGUwN2MzNDUwOThkNGU5MTQ0YmI3MzU1YzliMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCNPCvQzycPDmpPFy3DIUIBZJ3zE
QFXU+Ws9oPJPtfYctYJK4ifis/amWl/BBzHPsbnQT/44fUEWGZYWy6AdJtHPA0Sh
d/jZ2TGf4LCvW8mOxRZwEkjXfv1iF5h7NOjv0xSV7a/3kGRwm/Co7p0bZ0fayXUL
yUCbv2KdC12DUSVH0CAI5aEnKp2KJAzLPgfjynV/KdEC35bxZ7cBEkijniParqu9
eox9SVhFLyuHlknHt8eGJQ8yLImG1/ItdeEM9E/53Mvfnzy/ZJ/tSJn9vNCu/vYm
hdQphvaV2Qytdm9MuQsi+NAAQfTKhsVidZGdqsJ7DgFdJmNX5Nc+eerjbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHCO5gIo3gfDRQmNTpFEu3NVybBFMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvY0k3bUFpamVCOE5GQ1kxT2tVUzdjMVhKc0VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZvzMA0G
CSqGSIb3DQEBCwUAA4IBAQBCftLF2RPad+/1muiZhZebCaWnIMBHvLLnlnCIryJo
wA2GtAPJcy0mSVodk1HI4eSCOZOKEECa45d3s3x19qrp3IYh6EJPiLCc3RknMKVm
zwU4tCWEhUqN+7bF6XLLUEeyK6s1yLuoXlLybiJpZDynCzHxh4L6HND3acWRO1cy
5pIApWgz1fa6vuTxBEtPy2Ugg2VPYL0T90xz8R9E6sZdB9h3E2UeBOS7/UJhFqo3
F3WxJwh0UK06DNHpZ4q0uT9c31HJq1hbk7uPIn0WisSfmfpv0y8KFIb7E6+b2x8x
CHuwG50AxH/UMMCivxUsXYwB0o+If9HtMmsUMXcQFvq5
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:36:12 2025 by rpki-client