Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZQ8-8wXgdXd_t_GtV4cNP-45Uvg.roa
File: ZQ8-8wXgdXd_t_GtV4cNP-45Uvg.roa (raw, json)
Hash identifier: SxW4bklkkZchMk/HbHqAkt52HCKC+UZCPACJyI0ObdQ=
Subject key identifier: 65:0F:3E:F3:05:E0:75:77:7F:B7:F1:AD:57:87:0D:3F:EE:39:52:F8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019029FF860A5D3539746E0C99ABD7A3F039
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZQ8-8wXgdXd_t_GtV4cNP-45Uvg.roa
Signing time: Tue 18 Jun 2024 06:18:50 +0000
ROA not before: Tue 18 Jun 2024 06:18:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147186
IP address blocks: 45.129.86.0/23 maxlen: 24
185.252.176.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 06:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:29:ff:86:0a:5d:35:39:74:6e:0c:99:ab:d7:a3:f0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 18 06:18:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=650f3ef305e075777fb7f1ad57870d3fee3952f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d9:db:92:de:52:66:b2:71:61:4b:91:e9:a6:
a5:aa:76:48:73:f2:7e:c8:4f:e0:73:5f:01:d8:3e:
81:73:01:84:6b:e8:5e:49:20:cd:f0:14:73:93:a7:
e5:53:c5:76:3c:b9:53:e6:24:61:fd:bd:be:d9:7d:
33:7c:3d:97:4f:66:85:29:5c:86:02:f6:3d:73:6c:
7e:31:eb:14:bc:df:3c:89:bf:e4:24:95:6f:8e:1e:
13:12:59:56:b8:e0:ac:4e:3d:4b:d0:5d:a6:40:c5:
59:dd:4a:71:a8:86:39:0a:82:e1:31:99:bc:20:df:
a5:dc:1e:6a:f9:72:db:99:a4:93:8a:f8:1c:98:93:
2a:34:fc:e5:88:60:48:b5:51:9f:b4:9f:a0:9e:3d:
48:67:dc:06:24:a7:4b:1e:87:4c:a9:a4:d0:df:f9:
85:b3:f3:f5:e2:31:b7:1c:3e:c1:bc:27:c0:23:41:
2f:10:67:c6:ad:2a:af:70:b8:66:60:2f:61:a1:44:
95:ae:0d:4e:fa:dc:5d:ac:07:45:4d:9b:47:68:13:
09:96:39:4f:ea:a3:8d:3e:b5:b8:5f:03:40:77:29:
19:69:de:47:a0:57:e7:d2:74:fb:0f:e7:5a:ff:88:
78:be:cf:5e:78:86:60:47:a5:3e:5f:38:b6:08:df:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0F:3E:F3:05:E0:75:77:7F:B7:F1:AD:57:87:0D:3F:EE:39:52:F8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZQ8-8wXgdXd_t_GtV4cNP-45Uvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.86.0/23
185.252.176.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
76:08:59:23:54:21:f4:08:d4:06:14:f7:c4:24:60:e1:3c:9d:
8b:ed:63:45:83:ed:f1:30:30:fb:82:b3:d6:94:f1:fe:18:ba:
78:06:16:2e:98:65:2d:07:e4:20:01:0a:b0:a0:b4:75:f8:36:
09:9e:d1:dc:12:a1:fe:64:6c:13:d7:ff:34:d9:73:1c:f7:f6:
a4:d0:d5:19:9b:bf:ea:f1:87:ff:66:1a:9f:39:64:1d:1c:80:
49:83:14:f1:d6:ee:0c:f9:43:59:65:db:7b:2e:4a:19:74:78:
70:40:a0:ac:f6:ad:4a:14:e3:23:db:3f:1f:fc:46:74:8a:84:
0c:c8:68:8c:17:f3:d1:6c:38:c1:4d:1b:67:09:d8:02:b2:9a:
d0:14:6a:f7:93:a6:12:0a:d8:7c:e3:57:3d:df:c4:32:07:2d:
94:15:e3:97:c0:b3:62:4f:57:0e:bd:c3:ed:e1:cd:b8:40:ed:
a1:c6:3a:cb:f5:32:74:c0:ee:cb:a2:ea:1d:cc:24:fb:b3:ac:
7b:7e:8a:fb:6b:3b:24:ad:6b:d5:b7:25:d3:25:12:22:a3:32:
78:d9:10:34:e1:f0:d9:78:38:da:52:74:65:77:00:5f:12:bc:
1b:28:78:30:55:b4:e1:7f:f0:62:69:8b:0c:e0:5a:e3:0e:5b:
99:7a:3f:e4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZAp/4YKXTU5dG4MmavXo/A5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjE4MDYxODUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTBmM2VmMzA1ZTA3NTc3N2ZiN2YxYWQ1Nzg3MGQzZmVlMzk1MmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtnbkt5SZrJxYUuR6aalqnZIc/J+
yE/gc18B2D6BcwGEa+heSSDN8BRzk6flU8V2PLlT5iRh/b2+2X0zfD2XT2aFKVyG
AvY9c2x+MesUvN88ib/kJJVvjh4TEllWuOCsTj1L0F2mQMVZ3UpxqIY5CoLhMZm8
IN+l3B5q+XLbmaSTivgcmJMqNPzliGBItVGftJ+gnj1IZ9wGJKdLHodMqaTQ3/mF
s/P14jG3HD7BvCfAI0EvEGfGrSqvcLhmYC9hoUSVrg1O+txdrAdFTZtHaBMJljlP
6qONPrW4XwNAdykZad5HoFfn0nT7D+da/4h4vs9eeIZgR6U+Xzi2CN+i0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGUPPvMF4HV3f7fxrVeHDT/uOVL4MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWlE4LTh3WGdkWGRfdF9HdFY0Y05QLTQ1VXZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLYFWAwQA
ufywAwQAwSMTMA0GCSqGSIb3DQEBCwUAA4IBAQB2CFkjVCH0CNQGFPfEJGDhPJ2L
7WNFg+3xMDD7grPWlPH+GLp4BhYumGUtB+QgAQqwoLR1+DYJntHcEqH+ZGwT1/80
2XMc9/ak0NUZm7/q8Yf/ZhqfOWQdHIBJgxTx1u4M+UNZZdt7LkoZdHhwQKCs9q1K
FOMj2z8f/EZ0ioQMyGiMF/PRbDjBTRtnCdgCsprQFGr3k6YSCth841c938QyBy2U
FeOXwLNiT1cOvcPt4c24QO2hxjrL9TJ0wO7LouodzCT7s6x7for7azskrWvVtyXT
JRIiozJ42RA04fDZeDjaUnRldwBfErwbKHgwVbThf/BiaYsM4FrjDluZej/k
-----END CERTIFICATE-----
Generated at Fri Jun 28 11:23:03 2024 by rpki-client on console-fra.rpki-client.org