Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/OaZdG5J0xjU425ZkDp8xB6bp7-I.roa
File: OaZdG5J0xjU425ZkDp8xB6bp7-I.roa (raw, json)
Hash identifier: 1VVIk0aY0PgrrMYN2zW9VJXbJsqG84EuTEnkGTZHS1c=
Subject key identifier: 39:A6:5D:1B:92:74:C6:35:38:DB:96:64:0E:9F:31:07:A6:E9:EF:E2
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0194F83EF3FD94A107C256DC5C2E649A3DEA
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/OaZdG5J0xjU425ZkDp8xB6bp7-I.roa
Signing time: Wed 12 Feb 2025 03:41:02 +0000
ROA not before: Wed 12 Feb 2025 03:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45650
IP address blocks: 45.139.190.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 02:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f8:3e:f3:fd:94:a1:07:c2:56:dc:5c:2e:64:9a:3d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 12 03:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39a65d1b9274c63538db96640e9f3107a6e9efe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:e1:50:0b:68:34:16:94:44:cc:e1:1c:99:
cf:8a:3b:14:c9:a0:24:3f:c0:96:05:01:7f:96:dc:
f8:88:84:0a:96:f6:9a:90:a3:26:36:92:0f:85:df:
d5:71:6a:d8:67:02:1b:7c:5b:08:13:2f:ee:dd:7f:
b4:b0:dd:7d:2f:8a:34:3d:d1:f3:91:59:9d:7f:2b:
56:18:03:78:61:b1:fb:fb:f2:70:9b:8b:c5:9b:ec:
b2:ef:96:7a:b4:cf:64:a4:de:82:01:3f:20:19:25:
e6:84:48:04:5d:0d:2f:ff:b3:73:e0:01:7f:65:9d:
31:57:cb:f9:d2:5e:2c:b1:d4:47:8e:00:f6:94:c1:
c1:33:2a:7b:2f:b2:ee:14:e7:80:76:77:0f:5c:4a:
76:4f:17:92:6d:06:dc:60:ec:b3:df:2a:ed:a2:13:
ef:d9:90:0b:9a:6b:f4:de:54:99:6d:0f:2e:ef:fd:
01:de:94:ee:ce:98:1e:75:02:6a:f2:1b:ac:16:24:
af:a6:3a:96:e8:f3:25:d2:38:62:ae:0b:84:a2:3a:
04:4d:c8:0c:9d:78:8e:a4:8f:c8:6e:3b:70:11:b5:
c3:e6:6e:d0:8d:60:ce:4b:70:19:5e:04:87:95:ba:
46:18:17:c0:22:91:c8:5c:f4:ad:35:55:a8:a7:0f:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:5D:1B:92:74:C6:35:38:DB:96:64:0E:9F:31:07:A6:E9:EF:E2
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/OaZdG5J0xjU425ZkDp8xB6bp7-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.190.0/23
Signature Algorithm: sha256WithRSAEncryption
68:82:12:da:5e:f4:a5:4c:d1:03:5c:c4:46:87:c4:da:a6:ce:
66:5b:db:d6:e9:90:36:60:41:1f:d9:5d:05:95:2a:d8:14:0f:
5c:bc:5f:16:b8:5d:48:2d:96:80:04:85:06:e4:70:1d:36:8a:
d9:08:fd:0e:0f:fa:46:1c:9b:4c:b3:5a:57:2f:31:50:ca:9b:
4f:e4:ad:88:80:e9:17:73:65:c9:d1:a6:99:56:d1:1a:52:e1:
14:c1:af:4f:34:72:f1:5c:b0:84:de:c4:fa:b0:d8:f5:39:1f:
38:0c:88:44:2c:69:18:10:4b:ae:2b:e9:90:18:11:7f:d7:6d:
2f:55:db:7e:87:5b:7f:ed:44:5f:e1:c0:18:d5:a5:a7:d3:2e:
2d:dd:d7:f6:92:ea:0f:fc:37:e0:d4:b8:cd:bb:fa:61:17:7a:
8d:a2:56:eb:74:a9:b3:f0:6e:b3:21:7d:b7:10:13:6c:9d:cf:
5a:a9:42:5b:11:74:fc:63:17:ec:d8:2f:69:77:76:68:4a:af:
0a:a8:09:53:d4:aa:d0:6f:72:7c:26:74:0a:99:28:c5:ef:ba:
54:61:d2:df:33:0a:12:57:ad:8a:a1:06:bd:01:73:0c:2d:0e:
3c:c7:ce:78:82:3f:9c:41:21:c1:1f:f9:b4:cb:c5:16:42:a8:
ee:28:fc:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZT4PvP9lKEHwlbcXC5kmj3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMjEyMDM0MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWE2NWQxYjkyNzRjNjM1MzhkYjk2NjQwZTlmMzEwN2E2ZTllZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYnhUAtoNBaURMzhHJnPijsUyaAk
P8CWBQF/ltz4iIQKlvaakKMmNpIPhd/VcWrYZwIbfFsIEy/u3X+0sN19L4o0PdHz
kVmdfytWGAN4YbH7+/Jwm4vFm+yy75Z6tM9kpN6CAT8gGSXmhEgEXQ0v/7Nz4AF/
ZZ0xV8v50l4ssdRHjgD2lMHBMyp7L7LuFOeAdncPXEp2TxeSbQbcYOyz3yrtohPv
2ZALmmv03lSZbQ8u7/0B3pTuzpgedQJq8husFiSvpjqW6PMl0jhirguEojoETcgM
nXiOpI/IbjtwEbXD5m7QjWDOS3AZXgSHlbpGGBfAIpHIXPStNVWopw/oBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDmmXRuSdMY1ONuWZA6fMQem6e/iMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvT2FaZEc1SjB4alU0MjVaa0RwOHhCNmJwNy1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYu+MA0G
CSqGSIb3DQEBCwUAA4IBAQBoghLaXvSlTNEDXMRGh8Taps5mW9vW6ZA2YEEf2V0F
lSrYFA9cvF8WuF1ILZaABIUG5HAdNorZCP0OD/pGHJtMs1pXLzFQyptP5K2IgOkX
c2XJ0aaZVtEaUuEUwa9PNHLxXLCE3sT6sNj1OR84DIhELGkYEEuuK+mQGBF/120v
Vdt+h1t/7URf4cAY1aWn0y4t3df2kuoP/Dfg1LjNu/phF3qNolbrdKmz8G6zIX23
EBNsnc9aqUJbEXT8Yxfs2C9pd3ZoSq8KqAlT1KrQb3J8JnQKmSjF77pUYdLfMwoS
V62KoQa9AXMMLQ48x854gj+cQSHBH/m0y8UWQqjuKPyF
-----END CERTIFICATE-----
Generated at Fri May 2 17:49:28 2025 by rpki-client