Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/ED5YNe_ISzMm-7_eZZEkQ1mZUr8.roa
File: ED5YNe_ISzMm-7_eZZEkQ1mZUr8.roa (raw, json)
Hash identifier: /TIWhB3pFee6Y9mhZECbL2RS7N3izW8k+LTlpjVIHak=
Subject key identifier: 10:3E:58:35:EF:C8:4B:33:26:FB:BF:DE:65:91:24:43:59:99:52:BF
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 01929711B0695C1D4AE2C2D2BEDCE7B2F61A
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/ED5YNe_ISzMm-7_eZZEkQ1mZUr8.roa
Signing time: Wed 16 Oct 2024 20:42:51 +0000
ROA not before: Wed 16 Oct 2024 20:42:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 21:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:97:11:b0:69:5c:1d:4a:e2:c2:d2:be:dc:e7:b2:f6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 16 20:42:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=103e5835efc84b3326fbbfde65912443599952bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:93:02:c4:af:7c:50:9b:d4:08:fc:1c:f1:2a:
ac:c3:7a:82:f3:da:7f:74:e2:7d:d8:b4:e2:9b:02:
f8:c9:76:7d:de:6f:55:f3:6a:b3:f4:e2:5f:df:5a:
b4:99:f6:04:41:e3:7c:e5:f7:6b:2e:3a:9b:09:d1:
27:d3:0f:6a:2d:fc:52:b0:69:f3:82:e9:cc:45:eb:
d5:15:f5:9b:55:1f:17:49:2d:ee:21:5a:41:fa:f9:
76:13:47:83:58:8c:47:44:8b:31:7b:c7:fc:3c:f3:
22:6a:9b:1a:60:ad:1c:62:a1:bb:5c:f6:2a:e5:82:
4d:7e:2a:ad:b1:c2:d6:89:f9:dd:0b:1b:bf:32:82:
23:02:52:1a:12:11:ab:13:53:4f:41:42:2c:07:f8:
0d:30:54:59:44:72:2e:5e:db:c8:ae:1f:88:64:3d:
42:2a:89:44:b4:2e:2d:f9:b1:cf:be:b8:b1:31:b8:
4d:a1:0c:1e:ce:27:ed:ee:ab:a6:b9:aa:4a:63:b4:
15:bc:5f:06:cd:89:51:19:09:32:37:73:ae:81:fe:
54:cd:86:c3:c5:58:7a:a7:fb:bf:cc:79:05:2e:32:
a7:e0:68:d4:32:bf:46:08:5e:51:9b:f4:7a:2e:8e:
c4:2b:3c:9f:5c:fd:2e:3e:d7:79:8e:17:02:7d:25:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3E:58:35:EF:C8:4B:33:26:FB:BF:DE:65:91:24:43:59:99:52:BF
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/ED5YNe_ISzMm-7_eZZEkQ1mZUr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd03::/32
Signature Algorithm: sha256WithRSAEncryption
7e:13:c3:df:71:8b:35:9e:f4:41:22:9b:6b:29:f9:f5:0b:d9:
8f:1e:d9:bd:88:c1:7d:c7:35:22:eb:13:a4:5d:a6:f7:26:e2:
50:2d:b5:63:e9:2b:2f:b0:43:17:0e:03:ab:59:d7:b6:71:3f:
71:79:1b:3d:08:c2:4c:6e:88:1a:6b:af:3e:bb:e1:ea:99:11:
f5:a1:8c:cc:df:5b:99:e3:70:45:98:53:ff:a7:d9:7c:e0:3d:
06:ea:b2:98:8d:b0:31:a1:3c:95:4b:20:c4:e9:31:0a:f8:b0:
95:09:17:e3:54:0b:0b:9d:97:9b:42:7e:79:85:c3:72:24:cb:
03:63:04:a0:aa:ea:1e:b8:45:2c:15:55:0d:f7:5e:78:8a:65:
40:ae:1c:ac:7f:ff:4a:b9:bc:cd:01:c4:33:98:d2:3b:f9:67:
88:80:ce:c4:19:a6:af:a6:80:00:62:67:c0:9e:11:11:25:d5:
d3:34:10:9e:2b:cb:80:e4:88:8f:cf:4c:33:c2:5b:f7:3d:63:
3c:a5:ed:06:19:e4:27:a0:ba:fb:29:3b:6d:98:c2:2e:71:0d:
32:53:d5:4a:66:a2:ba:eb:50:76:04:a0:2b:d0:b6:f1:1e:ed:
03:df:d9:ac:70:5c:0c:bf:91:7c:42:db:fc:24:c5:ac:e7:d1:
81:9a:95:cc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZKXEbBpXB1K4sLSvtznsvYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw
ZWZlMjUwHhcNMjQxMDE2MjA0MjUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDNlNTgzNWVmYzg0YjMzMjZmYmJmZGU2NTkxMjQ0MzU5OTk1MmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JMCxK98UJvUCPwc8Sqsw3qC89p/
dOJ92LTimwL4yXZ93m9V82qz9OJf31q0mfYEQeN85fdrLjqbCdEn0w9qLfxSsGnz
gunMRevVFfWbVR8XSS3uIVpB+vl2E0eDWIxHRIsxe8f8PPMiapsaYK0cYqG7XPYq
5YJNfiqtscLWifndCxu/MoIjAlIaEhGrE1NPQUIsB/gNMFRZRHIuXtvIrh+IZD1C
KolEtC4t+bHPvrixMbhNoQwezift7qumuapKY7QVvF8GzYlRGQkyN3Ougf5UzYbD
xVh6p/u/zHkFLjKn4GjUMr9GCF5Rm/R6Lo7EKzyfXP0uPtd5jhcCfSW9EwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFBA+WDXvyEszJvu/3mWRJENZmVK/MB8GA1UdIwQY
MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt
M2YzYTAyNzQ4YzJhLzEvRUQ1WU5lX0lTek1tLTdfZVpaRWtRMW1aVXI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh
LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCLYHgMBQE
AgACMA4DBQMqDlBAAwUAKg/9AzANBgkqhkiG9w0BAQsFAAOCAQEAfhPD33GLNZ70
QSKbayn59QvZjx7ZvYjBfcc1IusTpF2m9ybiUC21Y+krL7BDFw4Dq1nXtnE/cXkb
PQjCTG6IGmuvPrvh6pkR9aGMzN9bmeNwRZhT/6fZfOA9BuqymI2wMaE8lUsgxOkx
CviwlQkX41QLC52Xm0J+eYXDciTLA2MEoKrqHrhFLBVVDfdeeIplQK4crH//Srm8
zQHEM5jSO/lniIDOxBmmr6aAAGJnwJ4RESXV0zQQnivLgOSIj89MM8Jb9z1jPKXt
BhnkJ6C6+yk7bZjCLnENMlPVSmaiuutQdgSgK9C28R7tA9/ZrHBcDL+RfELb/CTF
rOfRgZqVzA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:26 2025 by rpki-client