Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i2X6_OB1Lj9Pxg4sMnD22NsqVJk.roa
File: i2X6_OB1Lj9Pxg4sMnD22NsqVJk.roa (raw, json)
Hash identifier: UaWGQmydj2akCPDAWUiQ3F2PJZSrYmp8IT/8Nsv/rGI=
Subject key identifier: 8B:65:FA:FC:E0:75:2E:3F:4F:C6:0E:2C:32:70:F6:D8:DB:2A:54:99
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0191C7FAB7892D4087681E3F8E68D7A41AA8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i2X6_OB1Lj9Pxg4sMnD22NsqVJk.roa
Signing time: Fri 06 Sep 2024 15:36:22 +0000
ROA not before: Fri 06 Sep 2024 15:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.151.140.0/23 maxlen: 23
45.151.142.0/23 maxlen: 23
94.229.208.0/21 maxlen: 21
94.229.216.0/21 maxlen: 21
194.36.32.0/23 maxlen: 23
194.36.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 06 Sep 2024 15:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:fa:b7:89:2d:40:87:68:1e:3f:8e:68:d7:a4:1a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 6 15:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b65fafce0752e3f4fc60e2c3270f6d8db2a5499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:aa:a7:79:c4:02:e8:0c:17:1f:65:96:b4:
04:69:15:b4:4f:04:68:a7:11:74:86:19:d0:a0:89:
91:8c:ad:02:a5:ba:a5:6a:ea:60:09:22:8c:a6:7c:
a2:37:c2:ac:b3:09:6c:22:88:d7:fa:19:8c:4d:e7:
fd:fd:12:f1:36:29:ce:fe:08:6b:a8:a9:b6:64:56:
14:98:3e:c9:59:78:5b:03:ac:14:0c:0d:ad:3f:f0:
77:8d:b8:e6:da:06:42:c2:ee:50:40:55:2b:e5:4a:
8d:75:88:1d:a8:be:e7:f2:22:d9:48:0f:4d:1e:98:
87:f4:43:1b:fd:42:3c:88:a1:e6:13:5e:b6:b6:3e:
66:88:20:2d:4c:20:12:c7:7d:32:30:31:6f:9e:a8:
f2:95:c3:48:f6:26:4b:b9:c8:a0:04:c6:b1:08:60:
bc:f6:20:78:cc:bf:cb:54:1d:07:95:e0:34:cb:ea:
06:99:31:9b:48:c3:b3:1a:54:cd:54:92:e1:d3:80:
43:16:cf:30:3d:c4:31:76:82:b0:8b:9c:83:85:1a:
9a:b8:7f:e8:89:d4:fa:e8:f1:a7:e7:dd:a1:f8:86:
26:15:48:67:2d:1d:ee:b8:93:6e:e8:8f:1d:d3:5c:
e6:ad:08:89:78:12:86:ca:1e:c8:18:c3:9f:a1:18:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:65:FA:FC:E0:75:2E:3F:4F:C6:0E:2C:32:70:F6:D8:DB:2A:54:99
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i2X6_OB1Lj9Pxg4sMnD22NsqVJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/22
94.229.208.0/20
194.36.32.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:a2:f2:96:13:6a:98:9a:6f:93:bb:ca:a1:e2:38:25:c7:76:
72:22:f5:e0:0a:69:7a:1b:c0:94:2f:db:74:34:a8:4b:15:e7:
35:4b:dd:d3:05:54:fb:1b:e3:7d:bb:64:52:8d:3f:0b:24:49:
7c:5a:68:5a:88:55:04:fb:67:1c:34:51:9f:63:5d:4a:61:25:
69:7e:17:5f:5b:26:6f:55:f7:1a:ba:52:b7:07:4c:ce:4a:bd:
7f:31:1f:9c:14:cb:72:d8:4a:19:1d:58:6f:0c:85:c4:1a:f0:
3e:4c:07:93:f7:c6:06:c0:0f:59:04:47:39:12:23:14:1c:b3:
1e:5a:4a:15:f1:ce:1f:53:a4:c1:92:36:82:97:82:89:ed:e5:
15:f8:ca:b8:74:c3:5a:7f:47:4d:60:0f:0e:49:b2:d2:39:50:
a7:82:44:f2:e3:49:25:09:1c:08:f7:b8:2f:ad:1d:d3:9d:08:
e9:3a:8c:ef:08:3c:d8:ea:12:36:cf:8a:e5:2a:55:8e:60:84:
f5:53:84:bc:73:a8:7c:98:3d:80:bd:22:eb:05:f4:33:a4:4d:
44:52:d4:c9:4f:e1:6e:4c:84:10:b2:3d:50:27:33:63:d5:48:
cd:1d:f4:b9:4f:95:c1:ba:bd:da:51:62:ca:e0:f4:4e:d0:8a:
bc:67:4d:d1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZHH+reJLUCHaB4/jmjXpBqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQwOTA2MTUzNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjY1ZmFmY2UwNzUyZTNmNGZjNjBlMmMzMjcwZjZkOGRiMmE1NDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nuqp3nEAugMFx9llrQEaRW0TwRo
pxF0hhnQoImRjK0CpbqlaupgCSKMpnyiN8KsswlsIojX+hmMTef9/RLxNinO/ghr
qKm2ZFYUmD7JWXhbA6wUDA2tP/B3jbjm2gZCwu5QQFUr5UqNdYgdqL7n8iLZSA9N
HpiH9EMb/UI8iKHmE162tj5miCAtTCASx30yMDFvnqjylcNI9iZLucigBMaxCGC8
9iB4zL/LVB0HleA0y+oGmTGbSMOzGlTNVJLh04BDFs8wPcQxdoKwi5yDhRqauH/o
idT66PGn592h+IYmFUhnLR3uuJNu6I8d01zmrQiJeBKGyh7IGMOfoRgX+wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFItl+vzgdS4/T8YOLDJw9tjbKlSZMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvaTJYNl9PQjFMajlQeGc0c01uRDIyTnNxVkprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZeMAwQE
XuXQAwQCwiQgMA0GCSqGSIb3DQEBCwUAA4IBAQCrovKWE2qYmm+Tu8qh4jglx3Zy
IvXgCml6G8CUL9t0NKhLFec1S93TBVT7G+N9u2RSjT8LJEl8WmhaiFUE+2ccNFGf
Y11KYSVpfhdfWyZvVfcaulK3B0zOSr1/MR+cFMty2EoZHVhvDIXEGvA+TAeT98YG
wA9ZBEc5EiMUHLMeWkoV8c4fU6TBkjaCl4KJ7eUV+Mq4dMNaf0dNYA8OSbLSOVCn
gkTy40klCRwI97gvrR3TnQjpOozvCDzY6hI2z4rlKlWOYIT1U4S8c6h8mD2AvSLr
BfQzpE1EUtTJT+FuTIQQsj1QJzNj1UjNHfS5T5XBur3aUWLK4PRO0Iq8Z03R
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:47 2025 by rpki-client