Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/hRsicCsLvqkj3Sw0BeowUg_EdkM.roa
File: hRsicCsLvqkj3Sw0BeowUg_EdkM.roa (raw, json)
Hash identifier: 0Mo/TZM8XCjZOR9iO2oyGrRUjfnIfWrNpxluJD7qqOU=
Subject key identifier: 85:1B:22:70:2B:0B:BE:A9:23:DD:2C:34:05:EA:30:52:0F:C4:76:43
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 01929869ED95A3A6E4007FCC2CA2E3E69549
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/hRsicCsLvqkj3Sw0BeowUg_EdkM.roa
Signing time: Thu 17 Oct 2024 02:58:51 +0000
ROA not before: Thu 17 Oct 2024 02:58:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd00::/29 maxlen: 48
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 17 Oct 2024 04:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:98:69:ed:95:a3:a6:e4:00:7f:cc:2c:a2:e3:e6:95:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 17 02:58:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=851b22702b0bbea923dd2c3405ea30520fc47643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:bc:66:93:d4:45:12:b0:f9:4a:b6:7a:c4:
d7:5e:b2:47:01:e5:59:58:34:71:0e:40:d0:ba:0d:
18:55:f1:e4:75:d2:ae:78:00:7b:8b:2e:e4:66:da:
6e:d7:ef:3c:4f:fe:ff:bf:c3:a9:03:63:8e:61:18:
b0:4e:3c:91:c4:79:f7:a8:7f:62:46:fd:96:65:2a:
e9:de:19:51:6b:f6:8c:2d:89:2c:89:65:ee:0c:44:
a9:2e:fb:b9:57:04:9c:a1:13:98:91:9c:af:ab:aa:
86:af:cb:86:d3:eb:5b:9a:6d:b4:5a:af:e7:15:a2:
da:28:f8:45:f9:43:b9:6f:1c:5f:cc:29:9a:97:4c:
d9:93:67:95:1e:a9:39:af:c1:82:0d:68:89:8b:cc:
a2:c7:26:96:57:a1:a5:f6:0a:35:28:5d:34:99:11:
12:5f:7b:41:b5:29:66:9c:b4:40:50:26:ec:00:61:
7f:2c:86:9a:b3:e8:2c:5b:bd:35:00:69:8e:2c:f9:
16:8d:b6:4b:e6:76:d4:4f:c2:84:c0:62:68:2b:d3:
df:b0:0d:e7:62:92:9b:26:d0:41:b0:9d:b0:98:3c:
3c:76:87:c6:db:f2:cc:47:b8:da:69:8a:9b:77:6c:
57:75:08:53:2d:f3:88:24:d2:7f:d0:87:10:9a:40:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1B:22:70:2B:0B:BE:A9:23:DD:2C:34:05:EA:30:52:0F:C4:76:43
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/hRsicCsLvqkj3Sw0BeowUg_EdkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
55:f0:2c:d6:c8:88:14:04:c1:be:72:04:c6:e0:b5:5b:48:cd:
7d:49:b1:68:82:9a:2e:3b:2f:52:1f:58:70:4e:e1:ce:3b:f4:
4c:67:71:77:28:57:55:5f:77:43:2c:f8:7b:d6:cb:88:56:66:
69:88:66:fe:e3:7a:61:4f:9c:24:a3:22:aa:13:55:b1:1b:cb:
98:25:db:8f:7e:53:9d:73:6d:89:f0:86:ba:90:ec:0e:44:7d:
15:70:c3:a0:30:8d:47:37:78:a6:fc:41:3e:a6:a0:c1:0e:3e:
d2:30:5a:5e:19:41:41:2a:1c:2a:ce:9d:8f:26:ea:2a:b9:45:
5c:49:60:7d:0d:94:04:fc:84:fc:1b:87:25:90:23:b5:8e:85:
7b:9d:d1:b6:fd:2c:31:13:be:2f:71:0a:51:29:76:a1:48:77:
c6:e6:f4:6c:32:06:9f:ba:ee:a8:85:93:4a:a6:ff:6b:28:f0:
2c:91:c9:01:f7:fb:a4:6f:2b:64:9c:66:e8:aa:3c:fa:8e:82:
8e:1a:ad:86:1b:ba:26:74:ca:4b:19:4c:f5:e6:c7:1b:cf:55:
18:ca:5e:b3:21:ff:62:fa:64:0e:aa:19:1b:52:04:46:28:07:
a7:cc:8e:52:73:41:ff:e2:3e:8b:de:8f:37:9c:d7:cc:8a:b5:
00:ec:46:b5
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZKYae2Vo6bkAH/MLKLj5pVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw
ZWZlMjUwHhcNMjQxMDE3MDI1ODUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTFiMjI3MDJiMGJiZWE5MjNkZDJjMzQwNWVhMzA1MjBmYzQ3NjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDe8ZpPURRKw+Uq2esTXXrJHAeVZ
WDRxDkDQug0YVfHkddKueAB7iy7kZtpu1+88T/7/v8OpA2OOYRiwTjyRxHn3qH9i
Rv2WZSrp3hlRa/aMLYksiWXuDESpLvu5VwScoROYkZyvq6qGr8uG0+tbmm20Wq/n
FaLaKPhF+UO5bxxfzCmal0zZk2eVHqk5r8GCDWiJi8yixyaWV6Gl9go1KF00mRES
X3tBtSlmnLRAUCbsAGF/LIaas+gsW701AGmOLPkWjbZL5nbUT8KEwGJoK9PfsA3n
YpKbJtBBsJ2wmDw8dofG2/LMR7jaaYqbd2xXdQhTLfOIJNJ/0IcQmkAnAwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFIUbInArC76pI90sNAXqMFIPxHZDMB8GA1UdIwQY
MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt
M2YzYTAyNzQ4YzJhLzEvaFJzaWNDc0x2cWtqM1N3MEJlb3dVZ19FZGtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh
LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCLYHgMBQE
AgACMA4DBQMqDlBAAwUDKg/9ADANBgkqhkiG9w0BAQsFAAOCAQEAVfAs1siIFATB
vnIExuC1W0jNfUmxaIKaLjsvUh9YcE7hzjv0TGdxdyhXVV93Qyz4e9bLiFZmaYhm
/uN6YU+cJKMiqhNVsRvLmCXbj35TnXNtifCGupDsDkR9FXDDoDCNRzd4pvxBPqag
wQ4+0jBaXhlBQSocKs6djybqKrlFXElgfQ2UBPyE/BuHJZAjtY6Fe53Rtv0sMRO+
L3EKUSl2oUh3xub0bDIGn7ruqIWTSqb/ayjwLJHJAff7pG8rZJxm6Ko8+o6Cjhqt
hhu6JnTKSxlM9ebHG89VGMpesyH/YvpkDqoZG1IERigHp8yOUnNB/+I+i96PN5zX
zIq1AOxGtQ==
-----END CERTIFICATE-----
Generated at Mon May 12 04:20:05 2025 by rpki-client