Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zimVfEpt4JrHC82afEAq3FYurKA.roa
File: zimVfEpt4JrHC82afEAq3FYurKA.roa (raw, json)
Hash identifier: cSUl+c9B4ZenGeKtCljoktuXIhzInTDmAhukIMzbYLc=
Subject key identifier: CE:29:95:7C:4A:6D:E0:9A:C7:0B:CD:9A:7C:40:2A:DC:56:2E:AC:A0
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CEAA6E9CEEDB267F2D636D660725D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zimVfEpt4JrHC82afEAq3FYurKA.roa
Signing time: Mon 02 Jan 2023 03:36:01 +0000
ROA not before: Mon 02 Jan 2023 03:36:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212732
IP address blocks: 46.61.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:ea:a6:e9:ce:ed:b2:67:f2:d6:36:d6:60:72:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:36:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce29957c4a6de09ac70bcd9a7c402adc562eaca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:f9:81:4c:be:f7:ad:af:87:61:a4:85:a8:
1f:e6:3b:d6:f7:df:83:1a:03:93:10:da:d1:34:93:
49:f1:45:3f:37:4f:64:0f:d7:82:a8:02:5a:22:cd:
15:2f:5c:11:54:95:8e:c1:23:c4:9f:5e:49:f3:d1:
07:5b:e1:20:f2:5d:ca:b3:10:62:31:68:5d:5f:16:
54:ae:0a:2a:d4:2a:d4:bd:da:39:ee:46:f5:e8:52:
e8:ea:7d:32:92:ec:5c:67:42:18:01:28:5d:ba:cc:
32:db:05:6f:1f:45:b7:8d:2d:43:e9:fe:71:ec:6e:
15:84:55:31:ea:c8:ab:63:e6:6f:0a:d4:cf:0b:17:
65:c8:1d:2e:30:10:ea:d3:d8:d0:f3:c7:32:c2:31:
d0:03:97:aa:63:1b:ca:62:14:e7:e4:7d:aa:38:f3:
7c:09:a3:8a:93:5c:7c:ce:db:1e:de:3c:73:ea:de:
36:00:1c:1b:2b:fb:ba:96:4a:97:0b:3d:b0:0c:43:
73:34:50:b4:1f:9d:a4:9a:39:be:67:f8:e0:6f:78:
21:f0:8e:25:f4:15:2d:fa:d5:03:82:cf:c6:12:7f:
1f:ad:6c:d3:6a:80:47:23:c4:2c:2d:7a:93:48:ef:
58:44:a3:5e:c7:7c:f9:36:ea:89:1e:46:dd:d8:16:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:95:7C:4A:6D:E0:9A:C7:0B:CD:9A:7C:40:2A:DC:56:2E:AC:A0
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zimVfEpt4JrHC82afEAq3FYurKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.61.181.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:cd:e2:87:50:45:ab:27:af:e8:34:f7:25:a2:53:44:0a:be:
c6:9e:f5:5d:79:38:9b:94:34:f2:4d:92:0d:1b:f5:34:63:23:
cb:17:d2:2d:44:c0:06:60:78:5e:e5:e3:a8:a6:79:5e:8b:50:
bb:96:3b:b9:25:51:a4:a2:42:3d:f8:a6:d8:a2:a9:e1:62:dd:
eb:a3:ec:4a:08:54:20:be:2b:89:d9:e7:3c:d0:d6:25:a2:fd:
cc:c9:9c:f4:d9:d1:c6:6f:71:2c:ba:74:1e:cd:f8:c4:2b:39:
82:47:a1:6b:69:20:17:e2:27:5e:5f:36:df:ab:62:fc:58:c1:
52:fa:59:9d:5c:b1:39:92:4b:cf:ca:a7:68:1c:c0:49:40:87:
ab:5c:b1:d8:6f:30:ec:40:be:65:55:95:0d:99:d5:9f:79:8c:
06:79:ec:dc:0d:a5:57:f1:91:fc:3a:82:9d:7c:8c:15:55:98:
c8:41:b3:61:c7:32:56:20:da:f6:26:75:81:e3:da:b3:d0:ff:
5c:58:8a:b8:15:f8:d6:e2:63:93:4a:7a:97:98:31:f8:25:bc:
5e:5a:fd:2e:b5:fb:66:62:5b:03:ef:e4:9b:19:8e:7e:01:f4:
46:95:b1:4c:53:ef:ee:59:8b:de:3b:88:fc:0e:51:35:7e:c3:
b0:e1:05:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjOqm6c7tsmfy1jbWYHJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjMwMTAyMDMzNjAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTI5OTU3YzRhNmRlMDlhYzcwYmNkOWE3YzQwMmFkYzU2MmVhY2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8X5gUy+962vh2Gkhagf5jvW99+D
GgOTENrRNJNJ8UU/N09kD9eCqAJaIs0VL1wRVJWOwSPEn15J89EHW+Eg8l3KsxBi
MWhdXxZUrgoq1CrUvdo57kb16FLo6n0ykuxcZ0IYAShduswy2wVvH0W3jS1D6f5x
7G4VhFUx6sirY+ZvCtTPCxdlyB0uMBDq09jQ88cywjHQA5eqYxvKYhTn5H2qOPN8
CaOKk1x8ztse3jxz6t42ABwbK/u6lkqXCz2wDENzNFC0H52kmjm+Z/jgb3gh8I4l
9BUt+tUDgs/GEn8frWzTaoBHI8QsLXqTSO9YRKNex3z5NuqJHkbd2BYHuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM4plXxKbeCaxwvNmnxAKtxWLqygMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvemltVmZFcHQ0SnJIQzgyYWZFQXEzRll1cktBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALj21MA0G
CSqGSIb3DQEBCwUAA4IBAQAvzeKHUEWrJ6/oNPclolNECr7GnvVdeTiblDTyTZIN
G/U0YyPLF9ItRMAGYHhe5eOopnlei1C7lju5JVGkokI9+KbYoqnhYt3ro+xKCFQg
viuJ2ec80NYlov3MyZz02dHGb3EsunQezfjEKzmCR6FraSAX4ideXzbfq2L8WMFS
+lmdXLE5kkvPyqdoHMBJQIerXLHYbzDsQL5lVZUNmdWfeYwGeezcDaVX8ZH8OoKd
fIwVVZjIQbNhxzJWINr2JnWB49qz0P9cWIq4FfjW4mOTSnqXmDH4JbxeWv0utftm
YlsD7+SbGY5+AfRGlbFMU+/uWYveO4j8DlE1fsOw4QWm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:27 2024 by rpki-client on console-ams.rpki-client.org