Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/ZI4QW2u6AhigRZolQ9eCujADUCk.roa
File: ZI4QW2u6AhigRZolQ9eCujADUCk.roa (raw, json)
Hash identifier: JPzMMSwFvRwbFcm4cTs0RVTi0S9GYNGEozZ5umXEUk4=
Subject key identifier: 64:8E:10:5B:6B:BA:02:18:A0:45:9A:25:43:D7:82:BA:30:03:50:29
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 01856FC29D585A544C24AFF99B9734A67DB0
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/ZI4QW2u6AhigRZolQ9eCujADUCk.roa
Signing time: Sun 01 Jan 2023 23:55:03 +0000
ROA not before: Sun 01 Jan 2023 23:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39356
IP address blocks: 185.215.44.0/24 maxlen: 24
185.215.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 10:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:9d:58:5a:54:4c:24:af:f9:9b:97:34:a6:7d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jan 1 23:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=648e105b6bba0218a0459a2543d782ba30035029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:25:68:b5:e7:83:87:48:43:b5:96:30:b2:
5e:02:4a:49:e1:51:e7:01:84:56:81:38:b2:7d:f5:
1e:ba:91:fe:bf:b6:87:30:67:17:83:9c:d2:52:53:
57:a4:2a:66:b7:45:f8:8a:85:b6:99:cf:86:91:83:
d9:7c:b2:a8:71:86:82:7d:17:be:26:67:6e:d2:b8:
2c:e6:da:ab:6a:ce:90:39:13:05:58:8b:71:6f:66:
86:31:81:07:7c:ae:da:03:1f:a7:52:9c:f4:99:db:
21:c0:7c:da:ad:3e:08:a5:b5:9e:af:e0:a5:5d:d7:
e1:5e:17:52:f1:48:6d:ec:62:7c:88:12:02:2b:0a:
95:65:04:01:a9:97:50:08:3a:27:2e:ae:70:b3:9e:
3b:8c:43:6d:c0:f4:b2:72:d2:f6:5b:26:87:d6:20:
a4:6d:5e:8f:1e:ba:77:46:d8:e1:3e:69:c0:c2:ad:
7a:81:99:49:36:5f:19:a0:04:ac:61:2c:15:66:8c:
ae:b7:d0:75:0b:89:cd:5c:5f:db:d2:1c:85:83:88:
6c:37:eb:1a:56:71:b8:48:eb:8e:03:c4:d0:e1:37:
9e:fc:ae:22:5c:66:32:97:34:a1:12:3a:75:73:18:
6c:82:7b:c6:d9:02:75:52:2c:48:28:51:1e:c4:03:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8E:10:5B:6B:BA:02:18:A0:45:9A:25:43:D7:82:BA:30:03:50:29
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/ZI4QW2u6AhigRZolQ9eCujADUCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.44.0/24
185.215.47.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e5:84:76:f4:4e:eb:c3:e5:c0:ed:0e:f9:ae:25:41:79:8e:
67:68:7c:b4:a8:1b:6c:ce:de:c5:01:03:10:23:1e:bc:2d:cf:
f6:89:9d:43:e2:37:ec:19:15:a8:45:c5:32:8a:63:8c:fa:a7:
a0:74:a3:b5:14:f8:fd:6e:e4:60:a9:97:d3:62:49:19:f1:05:
2a:33:ae:5d:a0:88:39:1b:cc:20:30:48:bc:e8:19:0f:53:64:
30:a1:61:f7:53:08:a1:51:8d:60:55:32:a1:e2:02:fd:17:67:
ab:c8:29:1c:a0:bf:15:e8:29:39:61:e4:7e:29:a6:cc:db:dd:
93:c9:e8:0c:30:f4:cb:b0:20:4f:c8:5e:ae:9a:5a:0b:25:93:
18:5e:34:49:c5:c4:87:ac:5f:83:36:54:03:8a:15:0a:b6:61:
89:ea:15:61:96:c3:07:0a:64:74:95:86:21:22:c1:7a:1f:1e:
44:a7:00:b9:f9:df:99:63:3a:1c:13:88:44:87:94:37:f9:83:
18:b1:6f:84:e5:04:cf:1c:2d:73:c0:24:ca:20:65:74:95:c8:
07:c4:6c:57:d1:41:92:38:fb:55:71:81:65:1c:3a:8a:6c:b1:
ed:6d:00:01:72:7f:55:c5:5c:f9:08:3d:60:fb:60:32:76:77:
0d:06:13:a9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvwp1YWlRMJK/5m5c0pn2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTRlOTVkMmY0Y2MzNGE3Mzc2YjczYzBmMDM5YjNlMTU4
ZjUxNTIwHhcNMjMwMTAxMjM1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDhlMTA1YjZiYmEwMjE4YTA0NTlhMjU0M2Q3ODJiYTMwMDM1MDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01QlaLXng4dIQ7WWMLJeAkpJ4VHn
AYRWgTiyffUeupH+v7aHMGcXg5zSUlNXpCpmt0X4ioW2mc+GkYPZfLKocYaCfRe+
Jmdu0rgs5tqras6QORMFWItxb2aGMYEHfK7aAx+nUpz0mdshwHzarT4IpbWer+Cl
XdfhXhdS8Uht7GJ8iBICKwqVZQQBqZdQCDonLq5ws547jENtwPSyctL2WyaH1iCk
bV6PHrp3RtjhPmnAwq16gZlJNl8ZoASsYSwVZoyut9B1C4nNXF/b0hyFg4hsN+sa
VnG4SOuOA8TQ4Tee/K4iXGYylzShEjp1cxhsgnvG2QJ1UixIKFEexAOw+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGSOEFtrugIYoEWaJUPXgrowA1ApMB8GA1UdIwQY
MBaAFJ2k6V0vTMNKc3a3PA8Dmz4Vj1FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1Zjgt
NTk1OTEzODllMjQyLzEvWkk0UVcydTZBaGlnUlpvbFE5ZUN1akFEVUNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1ZjgtNTk1OTEzODllMjQy
LzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudcsAwQA
udcvMA0GCSqGSIb3DQEBCwUAA4IBAQAR5YR29E7rw+XA7Q75riVBeY5naHy0qBts
zt7FAQMQIx68Lc/2iZ1D4jfsGRWoRcUyimOM+qegdKO1FPj9buRgqZfTYkkZ8QUq
M65doIg5G8wgMEi86BkPU2QwoWH3UwihUY1gVTKh4gL9F2eryCkcoL8V6Ck5YeR+
KabM292TyegMMPTLsCBPyF6umloLJZMYXjRJxcSHrF+DNlQDihUKtmGJ6hVhlsMH
CmR0lYYhIsF6Hx5EpwC5+d+ZYzocE4hEh5Q3+YMYsW+E5QTPHC1zwCTKIGV0lcgH
xGxX0UGSOPtVcYFlHDqKbLHtbQABcn9VxVz5CD1g+2AydncNBhOp
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:44 2024 by rpki-client on console-ams.rpki-client.org