Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/xBeLUv83p6ZVvZvtz-JMFRnuwUE.roa
File: xBeLUv83p6ZVvZvtz-JMFRnuwUE.roa (raw, json)
Hash identifier: +Yq1/xf/LJeDU4XlPA8CT3fWlqqMKsySrQ7zhA/97BM=
Subject key identifier: C4:17:8B:52:FF:37:A7:A6:55:BD:9B:ED:CF:E2:4C:15:19:EE:C1:41
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C9142938F2B38A78378AEEDAA4710
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/xBeLUv83p6ZVvZvtz-JMFRnuwUE.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 45.155.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 07:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:91:42:93:8f:2b:38:a7:83:78:ae:ed:aa:47:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4178b52ff37a7a655bd9bedcfe24c1519eec141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:02:5f:bd:6f:9a:82:80:a8:92:ad:df:c4:
f5:f9:4d:0b:53:6b:c8:86:a2:63:1d:cb:63:a5:de:
71:e0:ec:6b:11:6b:59:4b:35:3f:ff:d8:8e:a0:46:
ed:b9:e1:73:d7:61:72:09:a7:1b:3a:37:70:a3:71:
9b:b2:8d:34:85:47:37:8b:06:ee:07:ae:be:4c:0d:
32:c9:9e:d0:82:e8:cf:74:31:14:21:5e:8b:01:b1:
d7:4e:06:e4:0d:21:d5:01:93:58:5b:bd:70:56:4f:
cc:7e:b5:fe:46:56:77:cd:95:71:00:8a:e4:50:49:
a5:29:9c:21:f8:c3:5b:6a:af:d2:eb:5f:59:0e:cd:
e0:a5:57:e1:f3:b6:1f:d4:57:2b:33:46:96:3b:87:
14:e8:29:c6:1b:18:39:3e:7a:94:d0:36:dd:04:bc:
93:f6:f5:58:19:46:eb:df:a0:aa:07:f5:37:5e:aa:
d1:20:6d:e6:29:c9:15:66:fe:f6:e3:77:33:c7:b1:
5f:8f:99:2a:1d:c5:ff:6b:c8:97:83:e6:d6:8b:01:
3a:cb:7d:6e:89:4f:4a:56:65:1c:43:d1:1d:d5:54:
bb:3f:59:14:a2:bf:d2:88:df:54:ee:cb:1c:db:26:
85:b5:c1:57:3b:e9:6c:e1:19:48:73:9d:88:fe:db:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:17:8B:52:FF:37:A7:A6:55:BD:9B:ED:CF:E2:4C:15:19:EE:C1:41
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/xBeLUv83p6ZVvZvtz-JMFRnuwUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.243.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f3:b6:31:69:e7:d9:46:54:c9:e2:8f:f9:d8:d8:a7:fe:92:
2a:79:77:c5:58:40:37:5e:a9:1d:44:de:76:ba:bd:ee:42:dd:
79:37:4b:63:14:4d:1a:fb:2d:b2:75:95:64:0a:a4:0b:5a:2e:
b4:fb:6c:f8:aa:ae:e9:ef:08:6c:62:bb:90:12:a5:0f:8d:06:
a3:cc:00:4e:c0:16:e5:9d:4e:1e:ee:04:f0:f2:b9:5e:1d:43:
86:99:9c:be:6f:62:73:c9:2a:86:9b:f5:f4:50:ee:9d:14:cb:
65:f9:c2:4d:e0:b3:46:13:f5:56:04:9b:11:74:61:14:2f:fe:
68:03:35:38:41:62:29:d7:09:0d:0a:e1:15:54:f7:e7:a7:05:
a4:bf:38:29:b9:bd:b2:07:e3:3c:9a:c2:4f:2c:cb:46:b3:de:
d7:d4:f1:be:91:f0:18:bd:28:33:fc:bb:25:45:4b:35:7d:22:
3d:ef:ea:d0:ac:7f:69:fc:a2:50:b1:8a:2d:61:7c:0d:bf:a3:
ba:67:7c:85:88:23:b2:8c:6b:90:c3:4f:d3:7c:43:27:72:36:
a1:0b:e1:f7:9e:95:de:70:86:9e:bf:2d:a7:7f:c1:23:5a:dd:
8a:cf:d6:54:bf:61:5e:67:54:b9:be:af:25:d8:06:6c:26:65:
f0:51:de:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJFCk48rOKeDeK7tqkcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwMTAxMDE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDE3OGI1MmZmMzdhN2E2NTViZDliZWRjZmUyNGMxNTE5ZWVjMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgYCX71vmoKAqJKt38T1+U0LU2vI
hqJjHctjpd5x4OxrEWtZSzU//9iOoEbtueFz12FyCacbOjdwo3Gbso00hUc3iwbu
B66+TA0yyZ7QgujPdDEUIV6LAbHXTgbkDSHVAZNYW71wVk/MfrX+RlZ3zZVxAIrk
UEmlKZwh+MNbaq/S619ZDs3gpVfh87Yf1FcrM0aWO4cU6CnGGxg5PnqU0DbdBLyT
9vVYGUbr36CqB/U3XqrRIG3mKckVZv7243czx7Ffj5kqHcX/a8iXg+bWiwE6y31u
iU9KVmUcQ9Ed1VS7P1kUor/SiN9U7ssc2yaFtcFXO+ls4RlIc52I/ttFrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMQXi1L/N6emVb2b7c/iTBUZ7sFBMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEveEJlTFV2ODNwNlpWdlp2dHotSk1GUm51d1VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZvzMA0G
CSqGSIb3DQEBCwUAA4IBAQAu87YxaefZRlTJ4o/52Nin/pIqeXfFWEA3XqkdRN52
ur3uQt15N0tjFE0a+y2ydZVkCqQLWi60+2z4qq7p7whsYruQEqUPjQajzABOwBbl
nU4e7gTw8rleHUOGmZy+b2JzySqGm/X0UO6dFMtl+cJN4LNGE/VWBJsRdGEUL/5o
AzU4QWIp1wkNCuEVVPfnpwWkvzgpub2yB+M8msJPLMtGs97X1PG+kfAYvSgz/Lsl
RUs1fSI97+rQrH9p/KJQsYotYXwNv6O6Z3yFiCOyjGuQw0/TfEMncjahC+H3npXe
cIaevy2nf8EjWt2Kz9ZUv2FeZ1S5vq8l2AZsJmXwUd66
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:13:26 2025 by rpki-client