Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/4aL9fx5me2cg-tsKopfjVd2m0Ls.roa
File: 4aL9fx5me2cg-tsKopfjVd2m0Ls.roa (raw, json)
Hash identifier: rSkIk1CIRj0q0nS5m2XlStYjeZ124V96uhcrYHX/o8A=
Subject key identifier: E1:A2:FD:7F:1E:66:7B:67:20:FA:DB:0A:A2:97:E3:55:DD:A6:D0:BB
Certificate issuer: /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial: 0193AA6ABEC9F1DB66EFFE4337EF386E0A65
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/4aL9fx5me2cg-tsKopfjVd2m0Ls.roa
Signing time: Mon 09 Dec 2024 07:55:42 +0000
ROA not before: Mon 09 Dec 2024 07:55:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206381
IP address blocks: 45.88.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 11:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:6a:be:c9:f1:db:66:ef:fe:43:37:ef:38:6e:0a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Validity
Not Before: Dec 9 07:55:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1a2fd7f1e667b6720fadb0aa297e355dda6d0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:c0:a8:4f:6e:8d:f2:ee:05:c8:11:e0:e6:
d0:81:ae:be:58:ba:c5:44:70:dc:d6:79:15:87:5a:
ae:a1:73:2b:21:7c:d8:f5:0d:62:fd:5b:20:88:92:
cb:46:51:35:83:49:c6:0d:01:6c:82:5d:21:df:7a:
56:9c:0a:4c:8d:26:1d:d7:9b:15:53:2d:01:89:93:
71:d1:90:dd:a7:5c:1e:0d:72:da:3e:d3:a5:7b:e0:
d1:0b:64:ac:28:27:aa:f2:2c:fc:51:f1:9f:ff:35:
d0:d0:a6:ff:0c:47:85:0e:e6:7c:cd:6d:3a:71:99:
99:bc:94:af:17:32:42:92:dc:55:24:35:9f:0d:5f:
4c:fb:f3:d8:87:6e:f1:99:c8:b9:19:d3:bb:93:a5:
36:30:f5:34:e5:55:e5:e7:ee:e6:91:97:c6:2d:1e:
0b:55:cd:8b:0e:be:47:42:50:fc:c6:25:21:59:56:
16:fb:c8:5e:66:fb:dc:25:56:75:21:d6:e3:d2:76:
d0:68:9f:9b:bf:55:b6:c6:53:17:de:ea:85:0e:59:
d5:4d:8a:44:f0:23:1a:8d:93:4e:d1:c8:74:e6:bd:
73:2b:f1:f3:4a:b2:8d:9c:a0:c9:b6:27:f4:ca:03:
32:3e:76:0f:fc:4c:25:ed:1c:b6:7e:d0:97:49:35:
96:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A2:FD:7F:1E:66:7B:67:20:FA:DB:0A:A2:97:E3:55:DD:A6:D0:BB
X509v3 Authority Key Identifier:
keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/4aL9fx5me2cg-tsKopfjVd2m0Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7c:5c:5e:cf:1a:20:7c:2b:e6:8e:c4:4d:bf:c3:13:4c:26:
98:20:86:d5:58:46:c2:d6:60:4e:26:97:8f:01:54:b3:ed:98:
06:e1:58:b1:ef:cf:be:e9:95:7b:3b:fc:f2:62:6f:33:f4:3b:
a0:98:67:21:af:1f:f0:0b:72:de:e7:62:95:02:8c:29:5c:f4:
a4:66:20:64:b7:99:35:f4:dc:52:62:27:ba:9e:1c:d4:c5:91:
e8:c5:b0:f1:a5:47:47:8a:11:51:f8:47:70:1c:f2:6a:ff:5b:
30:e5:d9:7e:0d:56:5d:d3:02:37:49:4b:74:8e:49:11:8e:3e:
5f:f1:5a:af:28:18:c0:42:8e:f7:1e:01:65:51:07:ab:cc:85:
1f:5c:34:20:0e:dc:12:95:69:84:5d:b3:90:1a:bc:c0:43:bb:
53:e2:c5:ee:47:b9:3f:15:05:4f:f8:50:8e:f9:28:5a:e1:8d:
57:a6:19:aa:e1:69:91:ab:e5:9c:7e:9e:ff:a5:d5:d0:9d:0b:
4c:5c:ae:f8:d9:72:de:4d:d3:d2:ca:65:76:98:a7:c4:db:44:
26:16:c4:fb:ee:cb:94:16:42:21:0a:8f:fc:83:a9:32:53:00:
fb:35:cc:aa:79:60:09:3e:c6:3d:e3:a7:21:9b:05:cd:5a:f3:
dc:e5:6e:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOqar7J8dtm7/5DN+84bgplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNDk3YjRlZmRiOGJjY2E1NDYwZDE4OWQ3NjE4ZjZiOGFj
NjhiMDkwHhcNMjQxMjA5MDc1NTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWEyZmQ3ZjFlNjY3YjY3MjBmYWRiMGFhMjk3ZTM1NWRkYTZkMGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozvAqE9ujfLuBcgR4ObQga6+WLrF
RHDc1nkVh1quoXMrIXzY9Q1i/VsgiJLLRlE1g0nGDQFsgl0h33pWnApMjSYd15sV
Uy0BiZNx0ZDdp1weDXLaPtOle+DRC2SsKCeq8iz8UfGf/zXQ0Kb/DEeFDuZ8zW06
cZmZvJSvFzJCktxVJDWfDV9M+/PYh27xmci5GdO7k6U2MPU05VXl5+7mkZfGLR4L
Vc2LDr5HQlD8xiUhWVYW+8heZvvcJVZ1Idbj0nbQaJ+bv1W2xlMX3uqFDlnVTYpE
8CMajZNO0ch05r1zK/HzSrKNnKDJtif0ygMyPnYP/Ewl7Ry2ftCXSTWWcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOGi/X8eZntnIPrbCqKX41XdptC7MB8GA1UdIwQY
MBaAFMFJe079uLzKVGDRiddhj2uKxosJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hODFkZjktZTg0ZS00ZDk0LWFkYTkt
YzRjZGVjMTA0NjY3LzEvNGFMOWZ4NW1lMmNnLXRzS29wZmpWZDJtMExzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hODFkZjktZTg0ZS00ZDk0LWFkYTktYzRjZGVjMTA0NjY3
LzEvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVjjMA0G
CSqGSIb3DQEBCwUAA4IBAQANfFxezxogfCvmjsRNv8MTTCaYIIbVWEbC1mBOJpeP
AVSz7ZgG4Vix78++6ZV7O/zyYm8z9DugmGchrx/wC3Le52KVAowpXPSkZiBkt5k1
9NxSYie6nhzUxZHoxbDxpUdHihFR+EdwHPJq/1sw5dl+DVZd0wI3SUt0jkkRjj5f
8VqvKBjAQo73HgFlUQerzIUfXDQgDtwSlWmEXbOQGrzAQ7tT4sXuR7k/FQVP+FCO
+Sha4Y1Xphmq4WmRq+Wcfp7/pdXQnQtMXK742XLeTdPSymV2mKfE20QmFsT77suU
FkIhCo/8g6kyUwD7NcyqeWAJPsY946chmwXNWvPc5W6V
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:51:08 2025 by rpki-client