Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/8nct86Tu8V_AHryCLCuK8tVXFyE.roa
File: 8nct86Tu8V_AHryCLCuK8tVXFyE.roa (raw, json)
Hash identifier: Pxqgobk/k4pfjRXUDCL5kB0wY5S3uVWGv5kU6jBROUo=
Subject key identifier: F2:77:2D:F3:A4:EE:F1:5F:C0:1E:BC:82:2C:2B:8A:F2:D5:57:17:21
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 0195474B1D8BD5F83F3F2B0534717E01D5D5
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/8nct86Tu8V_AHryCLCuK8tVXFyE.roa
Signing time: Thu 27 Feb 2025 12:04:19 +0000
ROA not before: Thu 27 Feb 2025 12:04:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 2.59.180.0/24 maxlen: 24
45.156.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 12:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:4b:1d:8b:d5:f8:3f:3f:2b:05:34:71:7e:01:d5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Feb 27 12:04:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2772df3a4eef15fc01ebc822c2b8af2d5571721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:be:e2:c8:7f:5d:6b:18:59:15:90:ae:f0:
a3:7f:22:73:4c:ef:dc:34:c8:69:cb:d2:5b:97:65:
42:81:cd:40:98:71:a2:5d:8a:9b:ea:d0:d1:2f:2e:
b8:7b:e0:a3:a0:c7:6c:20:59:a0:ed:c5:8a:4f:29:
fe:cf:51:70:39:20:8b:bd:3f:a1:e3:d5:21:90:16:
0f:99:eb:49:c0:5f:f0:8e:60:a3:f9:ee:3d:d3:1b:
4b:74:83:d2:d3:d4:c0:92:13:9e:19:0b:1c:b5:ee:
c0:36:aa:ff:10:ba:ce:f2:8b:7d:e5:95:92:8e:ca:
e4:1a:49:eb:00:90:6c:36:6c:74:db:1c:21:75:ec:
91:1c:22:0b:d1:dc:79:8f:3e:83:16:da:76:52:ae:
2d:df:f0:4c:6d:67:92:57:95:4d:7c:02:70:d6:2f:
6a:72:c8:ce:4d:68:fb:91:d9:bf:97:5a:8c:f2:3b:
fa:84:a5:9a:03:5e:ff:94:a4:79:31:92:47:6a:af:
70:87:05:42:29:06:2d:97:e9:ff:bf:e4:4f:5a:d9:
c9:4b:59:e8:12:cd:a1:2f:38:3c:32:ab:f3:b6:33:
eb:6d:2b:23:d9:27:cf:94:60:d8:df:1c:63:81:bf:
ae:41:d3:b1:b0:2d:de:2b:da:93:99:5a:15:82:93:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:2D:F3:A4:EE:F1:5F:C0:1E:BC:82:2C:2B:8A:F2:D5:57:17:21
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/8nct86Tu8V_AHryCLCuK8tVXFyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
45.156.144.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7f:50:7c:c9:64:c6:30:5e:f5:74:69:fd:a2:17:2a:f5:a4:
06:f0:39:06:12:35:8f:99:d2:68:34:86:f1:c6:3e:c1:4b:bb:
3c:bb:b4:f3:ec:2e:29:b2:53:8f:a2:c8:b9:83:55:17:52:8c:
dd:e3:7e:cd:92:4b:c2:3b:36:6b:cd:99:dc:83:cf:b0:97:96:
46:e0:c3:19:86:b4:08:4f:22:4a:a3:48:c4:e9:d2:43:21:13:
e5:34:36:cc:22:74:0c:e3:94:07:cd:f6:7a:c9:5c:e8:ad:20:
85:7c:05:25:23:7a:a9:6e:bb:51:bb:a6:c6:2e:b1:10:31:c6:
08:88:9d:7f:7b:36:c1:9b:72:84:da:e8:40:0c:60:1c:32:c2:
90:2f:f5:a0:ab:7b:ae:2c:57:55:09:56:58:5c:d8:e9:42:f0:
b2:aa:43:29:ec:4d:94:6a:b7:f8:65:52:8e:be:f2:e9:93:17:
80:98:c2:5e:d5:c5:85:ef:c1:57:8b:fc:bd:a1:26:0d:5e:7c:
80:67:db:5f:c5:cb:49:3b:d5:d7:bc:15:b6:ce:ee:d5:c2:0f:
2e:8a:0f:ac:b0:0d:35:de:32:51:5d:6b:f7:0f:7d:fe:e7:3a:
f4:91:3c:e7:62:1a:04:49:21:a4:a9:0b:94:5a:6c:7d:78:45:
2a:04:2f:c2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZVHSx2L1fg/PysFNHF+AdXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjUwMjI3MTIwNDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjc3MmRmM2E0ZWVmMTVmYzAxZWJjODIyYzJiOGFmMmQ1NTcxNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktK+4sh/XWsYWRWQrvCjfyJzTO/c
NMhpy9Jbl2VCgc1AmHGiXYqb6tDRLy64e+CjoMdsIFmg7cWKTyn+z1FwOSCLvT+h
49UhkBYPmetJwF/wjmCj+e490xtLdIPS09TAkhOeGQscte7ANqr/ELrO8ot95ZWS
jsrkGknrAJBsNmx02xwhdeyRHCIL0dx5jz6DFtp2Uq4t3/BMbWeSV5VNfAJw1i9q
csjOTWj7kdm/l1qM8jv6hKWaA17/lKR5MZJHaq9whwVCKQYtl+n/v+RPWtnJS1no
Es2hLzg8MqvztjPrbSsj2SfPlGDY3xxjgb+uQdOxsC3eK9qTmVoVgpNBTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPJ3LfOk7vFfwB68giwrivLVVxchMB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvOG5jdDg2VHU4Vl9BSHJ5Q0xDdUs4dFZYRnlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAju0AwQA
LZyQMA0GCSqGSIb3DQEBCwUAA4IBAQAjf1B8yWTGMF71dGn9ohcq9aQG8DkGEjWP
mdJoNIbxxj7BS7s8u7Tz7C4pslOPosi5g1UXUozd437NkkvCOzZrzZncg8+wl5ZG
4MMZhrQITyJKo0jE6dJDIRPlNDbMInQM45QHzfZ6yVzorSCFfAUlI3qpbrtRu6bG
LrEQMcYIiJ1/ezbBm3KE2uhADGAcMsKQL/Wgq3uuLFdVCVZYXNjpQvCyqkMp7E2U
arf4ZVKOvvLpkxeAmMJe1cWF78FXi/y9oSYNXnyAZ9tfxctJO9XXvBW2zu7Vwg8u
ig+ssA013jJRXWv3D33+5zr0kTznYhoESSGkqQuUWmx9eEUqBC/C
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:49 2025 by rpki-client