Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/qeTHNKdJPbjE_PashwZCCCiB5FI.roa
File: qeTHNKdJPbjE_PashwZCCCiB5FI.roa (raw, json)
Hash identifier: lH2ZBfzX6wyH+Nxph6nW62MP2ck2TMNk2Kc8rpT9Mpw=
Subject key identifier: A9:E4:C7:34:A7:49:3D:B8:C4:FC:F6:AC:87:06:42:08:28:81:E4:52
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 0193BF2661B337B0B401BDAA886A60C862AE
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/qeTHNKdJPbjE_PashwZCCCiB5FI.roa
Signing time: Fri 13 Dec 2024 08:33:03 +0000
ROA not before: Fri 13 Dec 2024 08:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57793
IP address blocks: 45.83.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 09:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:26:61:b3:37:b0:b4:01:bd:aa:88:6a:60:c8:62:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Dec 13 08:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9e4c734a7493db8c4fcf6ac870642082881e452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:ac:fc:a5:cb:03:27:e9:df:be:f1:db:96:
76:76:9c:31:d5:50:96:4b:44:56:1a:9e:fe:f2:f7:
97:ec:55:cb:70:9c:4b:a1:7c:4f:0b:34:0a:dd:d4:
4b:af:79:ff:23:9a:33:3d:1a:38:ca:8e:6e:2c:23:
d4:ca:60:bd:67:0b:6e:ab:82:ec:c8:b4:ab:01:5a:
3c:d1:64:26:fc:1c:dc:67:13:a3:37:41:7b:11:11:
28:fc:82:6d:9e:ef:ff:e5:b0:ea:ac:1f:dc:68:d3:
20:7a:c0:a8:2d:7f:a7:31:49:f8:01:cc:81:27:ce:
ff:2a:45:db:a4:78:d1:36:f6:ce:eb:25:4d:04:b2:
08:71:b9:6d:90:48:39:95:aa:bd:ae:dd:5d:ce:52:
77:80:34:b1:ec:64:15:7a:cf:fb:45:9c:9a:1e:c8:
ca:2c:7c:93:5d:ef:50:f9:4b:4a:37:d9:b8:3a:b3:
62:64:73:f1:2f:5e:84:15:af:c6:19:cf:d1:78:41:
34:8f:55:3f:fd:4e:d1:6c:be:32:3e:6c:0a:a1:38:
6d:47:19:57:38:5a:a6:aa:4d:6d:bf:e6:2b:6e:3d:
f9:f0:58:ff:b7:74:9e:d0:96:e7:cb:43:fa:89:99:
7d:e5:8f:1f:79:35:70:c7:e8:df:1d:d2:6f:f4:d3:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E4:C7:34:A7:49:3D:B8:C4:FC:F6:AC:87:06:42:08:28:81:E4:52
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/qeTHNKdJPbjE_PashwZCCCiB5FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.168.0/22
Signature Algorithm: sha256WithRSAEncryption
54:b2:58:0b:0c:f2:22:70:47:2f:d6:17:a2:ea:79:4f:37:61:
5e:1c:94:52:93:f7:31:4d:c7:14:7d:8c:e8:9f:ae:a6:1b:22:
a0:50:9a:29:fe:8d:24:d8:50:ab:75:e2:a4:ba:76:66:97:d0:
f1:98:bf:db:97:99:85:77:61:39:2a:d3:16:86:f9:27:73:c0:
0e:34:36:7e:22:9c:dc:84:80:2f:27:d3:ff:7f:86:22:90:28:
04:d4:fd:32:99:be:2b:77:bd:cb:5c:1a:b8:2b:44:de:bb:e4:
2b:23:15:5d:27:4c:c2:0c:e8:71:43:08:98:70:b7:45:37:e5:
60:c1:ca:c2:95:c3:20:ac:e0:a9:ab:65:8b:43:8a:2b:2b:3a:
6f:06:08:21:10:97:1e:a0:bd:70:43:77:76:7b:5f:17:be:e4:
c9:50:de:14:c6:f6:c9:23:7a:2e:57:ae:a3:82:47:90:fe:49:
c7:59:d6:cc:c5:9e:1f:fc:69:56:50:2c:c8:85:47:68:c5:0a:
7a:41:bb:31:dd:78:00:ac:b7:17:75:74:e9:c9:4a:b1:34:94:
57:2c:78:84:8b:d0:5e:2e:ed:c9:75:eb:c8:22:6f:bf:16:61:
86:41:79:49:8c:84:49:f6:01:d3:26:a7:39:38:d2:a8:c5:c0:
63:5c:46:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO/JmGzN7C0Ab2qiGpgyGKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MWMyODFmNTc2YjQzYTFjYWI5NTNjOTIwNDFjZTk1OTky
NzBjNzgwHhcNMjQxMjEzMDgzMzAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWU0YzczNGE3NDkzZGI4YzRmY2Y2YWM4NzA2NDIwODI4ODFlNDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR2s/KXLAyfp377x25Z2dpwx1VCW
S0RWGp7+8veX7FXLcJxLoXxPCzQK3dRLr3n/I5ozPRo4yo5uLCPUymC9Zwtuq4Ls
yLSrAVo80WQm/BzcZxOjN0F7EREo/IJtnu//5bDqrB/caNMgesCoLX+nMUn4AcyB
J87/KkXbpHjRNvbO6yVNBLIIcbltkEg5laq9rt1dzlJ3gDSx7GQVes/7RZyaHsjK
LHyTXe9Q+UtKN9m4OrNiZHPxL16EFa/GGc/ReEE0j1U//U7RbL4yPmwKoThtRxlX
OFqmqk1tv+Yrbj358Fj/t3Se0Jbny0P6iZl95Y8feTVwx+jfHdJv9NMRVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKnkxzSnST24xPz2rIcGQggogeRSMB8GA1UdIwQY
MBaAFIUcKB9Xa0OhyrlTySBBzpWZJwx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFJ3b0gxZHJRNkhLdVZQSklFSE9sWmtuREhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80YTY4YTctZGMzMS00MGZhLWExMTAt
OTFkNTYyMDBiYWY0LzEvcWVUSE5LZEpQYmpFX1Bhc2h3WkNDQ2lCNUZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80YTY4YTctZGMzMS00MGZhLWExMTAtOTFkNTYyMDBiYWY0
LzEvaFJ3b0gxZHJRNkhLdVZQSklFSE9sWmtuREhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVOoMA0G
CSqGSIb3DQEBCwUAA4IBAQBUslgLDPIicEcv1hei6nlPN2FeHJRSk/cxTccUfYzo
n66mGyKgUJop/o0k2FCrdeKkunZml9DxmL/bl5mFd2E5KtMWhvknc8AONDZ+Ipzc
hIAvJ9P/f4YikCgE1P0ymb4rd73LXBq4K0Teu+QrIxVdJ0zCDOhxQwiYcLdFN+Vg
wcrClcMgrOCpq2WLQ4orKzpvBgghEJceoL1wQ3d2e18XvuTJUN4UxvbJI3ouV66j
gkeQ/knHWdbMxZ4f/GlWUCzIhUdoxQp6Qbsx3XgArLcXdXTpyUqxNJRXLHiEi9Be
Lu3JdevIIm+/FmGGQXlJjIRJ9gHTJqc5ONKoxcBjXEbP
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:43 2025 by rpki-client