Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZlifX2GJHred4uTa8grPHd_4L24.roa
File: ZlifX2GJHred4uTa8grPHd_4L24.roa (raw, json)
Hash identifier: Pr60/yCAAk/4ntGhFHSqJaBo+I0ZIOwiNJFx85tissA=
Subject key identifier: 66:58:9F:5F:61:89:1E:B7:9D:E2:E4:DA:F2:0A:CF:1D:DF:F8:2F:6E
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEC6E3E58479624E0BD03C776DD56D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZlifX2GJHred4uTa8grPHd_4L24.roa
Signing time: Sun 01 Jan 2023 06:04:48 +0000
ROA not before: Sun 01 Jan 2023 06:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199442
IP address blocks: 178.16.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c6:e3:e5:84:79:62:4e:0b:d0:3c:77:6d:d5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66589f5f61891eb79de2e4daf20acf1ddff82f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:46:32:53:01:5f:25:a9:b1:d8:f5:1c:65:fe:
8d:f5:9d:88:fc:9a:90:e0:8b:70:cc:67:c6:76:37:
4d:f7:d2:09:de:eb:0f:a4:d4:b1:b9:e0:f3:cb:c2:
ce:76:21:37:ca:29:80:c0:89:5a:72:3d:90:7b:fc:
d0:bb:63:dc:f1:33:18:a8:ce:93:ff:3d:db:57:09:
8d:56:b3:b8:d2:e8:de:46:28:4d:90:61:86:2e:23:
2c:fd:08:98:2c:55:9a:a4:bb:19:3e:ed:83:1e:52:
c2:94:83:02:33:c8:7f:1c:f8:5a:16:5b:19:95:83:
25:df:6a:2f:a9:02:b2:07:fe:b6:a4:39:cd:3e:69:
4f:62:eb:c4:45:6c:8e:b8:84:4f:4c:87:d6:a4:82:
4b:c5:05:17:57:7a:d6:e8:5c:1c:ec:6a:70:b4:3a:
a9:6d:04:29:cd:0a:24:df:46:cb:0e:62:5f:04:f0:
03:f5:3c:de:de:3f:b5:2b:67:eb:75:e8:d5:37:7c:
3e:9e:b6:56:b1:3f:9e:b6:42:84:d3:fd:60:02:cb:
80:df:6a:bd:a7:8b:aa:86:2d:9d:b0:28:b8:e1:18:
f3:51:0c:c9:52:22:62:c1:84:86:ba:9a:f7:d8:a2:
fd:85:60:ba:e9:03:47:91:3c:d9:2e:f9:45:ca:f4:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:58:9F:5F:61:89:1E:B7:9D:E2:E4:DA:F2:0A:CF:1D:DF:F8:2F:6E
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZlifX2GJHred4uTa8grPHd_4L24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a2:34:b8:94:98:a6:50:4a:38:6b:6f:f0:40:b1:3b:34:0a:
94:a0:c2:83:22:68:00:a9:c8:23:2b:c5:4e:40:81:80:5f:20:
92:05:c4:68:14:56:21:81:85:d8:cc:71:19:81:e7:e8:11:12:
f7:c3:08:f5:45:25:14:78:d4:af:ad:08:0f:38:9d:b5:c2:7e:
b7:e7:bd:37:fd:60:86:62:fd:80:41:0e:5f:0b:60:bf:da:37:
36:11:a7:9b:5f:3a:0f:b6:35:60:44:6a:91:3d:a0:e7:5b:0a:
45:50:6c:76:c6:ee:45:04:48:20:e1:b8:23:a7:0f:4d:f0:ba:
52:2e:f5:97:39:e2:93:57:bd:95:3c:12:bf:ed:86:9e:11:51:
cd:d4:0e:ae:f3:d3:ea:a9:9b:4b:79:83:6a:b9:d2:8c:9a:ea:
fa:d5:1a:50:be:75:20:a6:86:09:5e:c0:8a:ff:6c:3c:61:96:
37:b5:bb:95:da:4e:ce:25:d2:52:7c:50:74:42:ed:04:c7:6c:
0f:08:84:b3:cb:af:68:7a:6e:b2:52:c4:0b:53:c4:8f:87:dc:
7a:db:a2:a4:12:e4:72:dc:cc:b2:14:13:0e:f7:dc:d8:15:ea:
6c:4b:62:94:f3:b9:1d:7f:6c:39:3b:01:62:b1:c7:5f:71:02:
02:e3:72:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7sbj5YR5Yk4L0Dx3bdVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjU4OWY1ZjYxODkxZWI3OWRlMmU0ZGFmMjBhY2YxZGRmZjgyZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkYyUwFfJamx2PUcZf6N9Z2I/JqQ
4ItwzGfGdjdN99IJ3usPpNSxueDzy8LOdiE3yimAwIlacj2Qe/zQu2Pc8TMYqM6T
/z3bVwmNVrO40ujeRihNkGGGLiMs/QiYLFWapLsZPu2DHlLClIMCM8h/HPhaFlsZ
lYMl32ovqQKyB/62pDnNPmlPYuvERWyOuIRPTIfWpIJLxQUXV3rW6Fwc7GpwtDqp
bQQpzQok30bLDmJfBPAD9Tze3j+1K2frdejVN3w+nrZWsT+etkKE0/1gAsuA32q9
p4uqhi2dsCi44RjzUQzJUiJiwYSGupr32KL9hWC66QNHkTzZLvlFyvRjkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGZYn19hiR63neLk2vIKzx3f+C9uMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvWmxpZlgyR0pIcmVkNHVUYThnclBIZF80TDI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshBzMA0G
CSqGSIb3DQEBCwUAA4IBAQBtojS4lJimUEo4a2/wQLE7NAqUoMKDImgAqcgjK8VO
QIGAXyCSBcRoFFYhgYXYzHEZgefoERL3wwj1RSUUeNSvrQgPOJ21wn635703/WCG
Yv2AQQ5fC2C/2jc2EaebXzoPtjVgRGqRPaDnWwpFUGx2xu5FBEgg4bgjpw9N8LpS
LvWXOeKTV72VPBK/7YaeEVHN1A6u89PqqZtLeYNqudKMmur61RpQvnUgpoYJXsCK
/2w8YZY3tbuV2k7OJdJSfFB0Qu0Ex2wPCISzy69oem6yUsQLU8SPh9x626KkEuRy
3MyyFBMO99zYFepsS2KU87kdf2w5OwFiscdfcQIC43IL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org