Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z4Tj2tfOfP4vthZ6TuG_1lFUUxI.roa
File: Z4Tj2tfOfP4vthZ6TuG_1lFUUxI.roa (raw, json)
Hash identifier: rYVU4L40a0+glpe3jbasulTXSDZLcKHksj+1uWbrn0I=
Subject key identifier: 67:84:E3:DA:D7:CE:7C:FE:2F:B6:16:7A:4E:E1:BF:D6:51:54:53:12
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF255B4B313936A752CE837BDF8A0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z4Tj2tfOfP4vthZ6TuG_1lFUUxI.roa
Signing time: Tue 02 Jan 2024 06:29:32 +0000
ROA not before: Tue 02 Jan 2024 06:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 45.14.164.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
2.59.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 16:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f2:55:b4:b3:13:93:6a:75:2c:e8:37:bd:f8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6784e3dad7ce7cfe2fb6167a4ee1bfd651545312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c2:8a:b7:ec:b0:ed:2c:ef:56:f5:85:c3:a4:
1d:6a:bf:9e:2b:27:28:ec:f3:45:7a:44:86:23:9e:
c0:5e:d3:3f:41:ed:51:f0:4c:01:e3:81:f4:65:69:
17:d2:fc:70:35:67:c8:8e:75:c6:33:8e:87:a2:2e:
55:8b:f5:84:33:c2:fe:e9:29:53:4e:72:ba:fc:13:
2c:c3:f6:4d:3d:a2:4c:76:a5:5c:ae:51:8f:69:db:
eb:69:7e:33:95:64:b8:bf:15:1b:73:4e:7e:d5:ef:
cb:d8:b7:aa:f9:4a:a3:5f:fe:b6:bb:58:15:c4:e4:
b5:8b:fb:3a:6d:bb:b9:a4:5e:16:5d:cf:5d:20:f5:
80:e5:5b:48:fe:4a:35:57:a1:44:11:34:23:f0:ce:
c1:6c:12:e8:3f:96:32:fe:8e:a0:7d:f1:98:f8:13:
da:7b:17:41:73:41:0c:2d:9e:c5:68:c2:e9:06:6f:
67:27:67:e3:be:10:5a:b4:27:54:f3:8c:d2:fe:66:
c6:dd:87:69:e8:81:18:11:00:06:e3:68:4f:43:29:
a9:bd:bf:9a:73:9a:a7:4f:8c:05:8d:bf:5e:b5:40:
9b:e0:62:af:9a:ec:ad:7a:a4:7d:4f:f3:fe:28:f0:
4f:4e:2f:3e:32:2d:3f:d0:fe:df:8f:7d:db:41:62:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:84:E3:DA:D7:CE:7C:FE:2F:B6:16:7A:4E:E1:BF:D6:51:54:53:12
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z4Tj2tfOfP4vthZ6TuG_1lFUUxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
45.9.157.0/24
45.14.164.0/24
45.149.233.0/24
Signature Algorithm: sha256WithRSAEncryption
40:45:e6:b6:fe:cf:e5:08:a0:8c:d0:0a:1d:02:40:be:b1:7e:
51:c5:41:1e:92:54:04:8e:6e:23:7e:05:0a:e1:92:a1:95:5d:
47:12:53:09:fd:78:1d:e2:0a:93:4d:d3:01:16:49:c8:74:76:
44:21:a8:b1:c4:f0:ad:d5:03:52:3d:d0:a2:d1:59:67:ba:69:
58:c5:88:ea:1c:7b:87:23:67:dc:c0:4e:20:0c:6f:19:2f:4d:
e8:e9:f9:8d:02:86:16:43:69:59:23:10:58:b0:60:3b:c1:51:
38:fa:8b:d2:cd:c7:d8:a6:87:c1:76:2d:fb:6a:71:d7:8f:06:
27:cd:47:60:3a:41:aa:a5:ff:f0:fa:d8:c8:52:0b:14:1e:11:
10:c2:4b:d7:e7:25:1f:03:cd:27:fc:70:a9:f1:8b:53:30:44:
2b:ea:18:22:48:b6:42:3b:b7:51:6f:12:f8:89:ae:e8:be:8e:
13:d7:26:47:b5:a6:78:20:08:dc:4d:82:6c:e4:ec:c4:c9:1f:
fa:46:13:bb:0e:e4:00:6d:19:2e:6b:c1:3b:59:54:2d:c0:e2:
3a:b9:f9:67:46:0f:f8:4f:de:77:70:10:ef:d5:6f:d8:2c:a7:
5c:dd:03:8d:07:c3:e5:4e:27:03:c3:8b:68:53:e8:77:f4:c6:
4e:ca:90:08
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzI3PJVtLMTk2p1LOg3vfigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Nzg0ZTNkYWQ3Y2U3Y2ZlMmZiNjE2N2E0ZWUxYmZkNjUxNTQ1MzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMKKt+yw7SzvVvWFw6Qdar+eKyco
7PNFekSGI57AXtM/Qe1R8EwB44H0ZWkX0vxwNWfIjnXGM46Hoi5Vi/WEM8L+6SlT
TnK6/BMsw/ZNPaJMdqVcrlGPadvraX4zlWS4vxUbc05+1e/L2Leq+UqjX/62u1gV
xOS1i/s6bbu5pF4WXc9dIPWA5VtI/ko1V6FEETQj8M7BbBLoP5Yy/o6gffGY+BPa
exdBc0EMLZ7FaMLpBm9nJ2fjvhBatCdU84zS/mbG3Ydp6IEYEQAG42hPQympvb+a
c5qnT4wFjb9etUCb4GKvmuyteqR9T/P+KPBPTi8+Mi0/0P7fj33bQWInmQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGeE49rXznz+L7YWek7hv9ZRVFMSMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWjRUajJ0Zk9mUDR2dGhaNlR1R18xbEZVVXhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAAjv8AwQA
LQmdAwQALQ6kAwQALZXpMA0GCSqGSIb3DQEBCwUAA4IBAQBARea2/s/lCKCM0Aod
AkC+sX5RxUEeklQEjm4jfgUK4ZKhlV1HElMJ/Xgd4gqTTdMBFknIdHZEIaixxPCt
1QNSPdCi0VlnumlYxYjqHHuHI2fcwE4gDG8ZL03o6fmNAoYWQ2lZIxBYsGA7wVE4
+ovSzcfYpofBdi37anHXjwYnzUdgOkGqpf/w+tjIUgsUHhEQwkvX5yUfA80n/HCp
8YtTMEQr6hgiSLZCO7dRbxL4ia7ovo4T1yZHtaZ4IAjcTYJs5OzEyR/6RhO7DuQA
bRkua8E7WVQtwOI6uflnRg/4T953cBDv1W/YLKdc3QONB8PlTicDw4toU+h39MZO
ypAI
-----END CERTIFICATE-----
Generated at Wed Feb 21 19:06:50 2024 by rpki-client on console-ams.rpki-client.org