Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ZxaZD9_KHXY5Szqo4cVdYlZeVXQ.roa
File: ZxaZD9_KHXY5Szqo4cVdYlZeVXQ.roa (raw, json)
Hash identifier: cEvcuMFDIM6xLDrFroTLe6W7GEEF2DGeg2N9K7dAdr8=
Subject key identifier: 67:16:99:0F:DF:CA:1D:76:39:4B:3A:A8:E1:C5:5D:62:56:5E:55:74
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01879ED2198FB8AD58271FDD81BBDFA74800
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ZxaZD9_KHXY5Szqo4cVdYlZeVXQ.roa
Signing time: Thu 20 Apr 2023 13:19:41 +0000
ROA not before: Thu 20 Apr 2023 13:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30848
IP address blocks: 45.130.116.0/23 maxlen: 24
45.83.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:d2:19:8f:b8:ad:58:27:1f:dd:81:bb:df:a7:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 20 13:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6716990fdfca1d76394b3aa8e1c55d62565e5574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:f5:93:9b:4a:75:95:a0:f3:2b:0e:3d:38:
eb:1b:d6:4b:8c:b5:43:19:d1:94:8e:05:51:22:a9:
3d:16:85:2c:dc:4a:e9:ac:b8:ee:0b:3a:7f:ea:1b:
b6:23:8c:98:9e:b9:08:d2:36:37:f7:49:f6:df:21:
97:ea:01:28:2b:ae:11:e6:11:be:6a:14:0d:10:d6:
75:c6:64:6b:a3:0b:5b:59:f5:74:4b:73:31:19:13:
87:ea:6f:57:9c:82:9f:5c:99:0d:69:94:df:4a:10:
f6:92:a0:ea:1c:b7:57:0a:e4:e3:d8:e9:90:36:56:
6b:cd:df:91:3e:83:a7:83:26:9b:63:6e:9e:e8:dc:
21:73:3a:ec:8e:b4:be:24:9e:93:bd:8a:01:ff:f4:
21:f5:6d:2d:57:61:18:52:c0:50:a9:f3:da:84:22:
9f:6b:d0:49:3f:ef:76:53:e1:07:9c:e4:85:3f:1f:
a0:fa:ec:4e:12:2b:6e:df:e0:18:52:a2:43:e2:ef:
5c:84:7d:4e:00:45:18:e8:86:62:80:99:6c:89:22:
6e:50:0b:74:68:b8:f1:f6:e1:db:5f:73:27:9f:49:
47:74:f4:6b:13:dc:7b:1d:4c:16:dd:95:13:f2:b5:
e6:bc:4a:72:3b:29:55:0f:2d:76:08:36:cd:74:5e:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:16:99:0F:DF:CA:1D:76:39:4B:3A:A8:E1:C5:5D:62:56:5E:55:74
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ZxaZD9_KHXY5Szqo4cVdYlZeVXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.204.0/24
45.130.116.0/23
Signature Algorithm: sha256WithRSAEncryption
06:b6:60:82:7d:77:39:d6:91:46:45:d6:75:7c:06:b3:0c:ec:
26:9e:bf:b2:4f:40:0d:70:50:77:fc:f5:54:10:f3:18:17:86:
4b:09:d1:cf:c0:4f:ea:e7:c8:a0:82:c9:70:30:9f:d6:df:0a:
62:f4:dd:91:84:56:d1:4a:2b:30:9c:97:17:b5:7d:57:04:23:
6a:09:49:08:76:06:95:7a:d7:a5:1c:cd:4c:ac:e7:73:84:4d:
48:0d:5d:7f:d4:64:7d:17:70:14:ab:ab:3f:47:2d:dc:e4:dd:
7c:c9:90:b7:00:d8:f6:5e:03:58:66:56:a5:c7:0e:a7:cc:ff:
87:cc:38:cd:3f:19:2b:6e:88:06:9f:eb:61:67:e6:fa:a2:6d:
59:8d:d9:60:2c:09:36:f2:a4:4a:17:c7:d3:90:36:86:9c:d3:
59:e7:5d:e0:d4:2f:9d:51:6b:2c:5e:77:1a:f0:a0:99:f0:32:
7e:ce:a9:32:df:4e:ed:d8:de:09:f8:46:4f:24:d3:96:f3:19:
f3:cf:82:5e:c8:37:1a:b4:b5:b5:c1:cc:89:16:6c:7f:6d:85:
1b:a6:bc:0e:6b:e0:87:b5:e2:77:8e:32:fc:12:72:60:ed:b5:
3b:34:b0:0f:d1:62:6d:34:7c:78:94:54:f7:ac:bf:d1:a3:60:
09:ba:87:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYee0hmPuK1YJx/dgbvfp0gAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwNDIwMTMxOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzE2OTkwZmRmY2ExZDc2Mzk0YjNhYThlMWM1NWQ2MjU2NWU1NTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqD1k5tKdZWg8ysOPTjrG9ZLjLVD
GdGUjgVRIqk9FoUs3ErprLjuCzp/6hu2I4yYnrkI0jY390n23yGX6gEoK64R5hG+
ahQNENZ1xmRrowtbWfV0S3MxGROH6m9XnIKfXJkNaZTfShD2kqDqHLdXCuTj2OmQ
NlZrzd+RPoOngyabY26e6NwhczrsjrS+JJ6TvYoB//Qh9W0tV2EYUsBQqfPahCKf
a9BJP+92U+EHnOSFPx+g+uxOEitu3+AYUqJD4u9chH1OAEUY6IZigJlsiSJuUAt0
aLjx9uHbX3Mnn0lHdPRrE9x7HUwW3ZUT8rXmvEpyOylVDy12CDbNdF5ntQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGcWmQ/fyh12OUs6qOHFXWJWXlV0MB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvWnhhWkQ5X0tIWFk1U3pxbzRjVmRZbFplVlhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVPMAwQB
LYJ0MA0GCSqGSIb3DQEBCwUAA4IBAQAGtmCCfXc51pFGRdZ1fAazDOwmnr+yT0AN
cFB3/PVUEPMYF4ZLCdHPwE/q58iggslwMJ/W3wpi9N2RhFbRSiswnJcXtX1XBCNq
CUkIdgaVetelHM1MrOdzhE1IDV1/1GR9F3AUq6s/Ry3c5N18yZC3ANj2XgNYZlal
xw6nzP+HzDjNPxkrbogGn+thZ+b6om1ZjdlgLAk28qRKF8fTkDaGnNNZ513g1C+d
UWssXnca8KCZ8DJ+zqky307t2N4J+EZPJNOW8xnzz4JeyDcatLW1wcyJFmx/bYUb
prwOa+CHteJ3jjL8EnJg7bU7NLAP0WJtNHx4lFT3rL/Ro2AJuodo
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org