Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/Z9m_f7MIaWf2Pa8arrAchASTBjI.roa
File: Z9m_f7MIaWf2Pa8arrAchASTBjI.roa (raw, json)
Hash identifier: 0AUCg8nPbUWInh0bGl7vUDPZlSBK1qVehsGe6+dIw4E=
Subject key identifier: 67:D9:BF:7F:B3:08:69:67:F6:3D:AF:1A:AE:B0:1C:84:04:93:06:32
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 018570FBB2F2CF2C8150E198472B8B2ABE68
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/Z9m_f7MIaWf2Pa8arrAchASTBjI.roa
Signing time: Mon 02 Jan 2023 05:37:01 +0000
ROA not before: Mon 02 Jan 2023 05:37:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44187
IP address blocks: 46.226.232.0/22 maxlen: 24
87.237.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:b2:f2:cf:2c:81:50:e1:98:47:2b:8b:2a:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Jan 2 05:37:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67d9bf7fb3086967f63daf1aaeb01c8404930632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:7f:6a:bb:96:af:d7:36:8e:28:e5:b0:95:
e7:d9:5b:20:38:c8:4f:25:4d:41:a6:31:b8:11:3f:
b5:5c:db:f3:b5:3a:7f:12:63:63:da:20:1b:22:d6:
a6:9b:53:86:ce:8d:1f:14:09:11:55:77:bc:5b:3b:
39:6e:ae:80:65:c1:17:c2:56:1a:bf:11:ea:54:61:
0a:be:f6:5b:f8:5a:b1:99:61:af:38:7d:ff:52:e9:
0c:94:c1:b3:29:78:ab:68:76:5c:0b:65:da:8f:e0:
f0:50:16:b8:d6:56:11:ec:a1:1d:61:02:51:4e:51:
6a:e7:d3:fd:d2:f7:e2:3a:ca:4d:25:0f:b4:74:85:
72:61:e4:89:cc:6e:95:79:c2:3a:4d:9b:24:60:db:
05:b7:e9:2c:20:73:1a:b1:32:03:ce:9d:9a:36:9b:
f9:1f:9f:ef:ec:bf:bb:55:eb:76:23:6a:df:a6:b3:
1f:46:67:e7:05:25:56:e5:1c:66:fc:b8:e2:8d:b3:
b5:8a:3a:aa:6c:31:c1:6a:91:a8:09:de:db:77:43:
c9:c9:23:c0:6c:fd:1f:17:f1:9b:f4:68:29:fe:9b:
d6:7a:81:fe:b0:eb:d3:65:9e:73:b2:5f:2e:de:1e:
70:83:c4:7a:28:49:45:3a:0f:eb:c3:e4:84:dc:d9:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:BF:7F:B3:08:69:67:F6:3D:AF:1A:AE:B0:1C:84:04:93:06:32
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/Z9m_f7MIaWf2Pa8arrAchASTBjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.232.0/22
87.237.24.0/21
Signature Algorithm: sha256WithRSAEncryption
87:d4:ac:fb:54:41:49:9b:d0:80:6b:bf:cd:50:29:c2:fa:6f:
8f:56:82:d5:d5:58:55:b6:7d:bd:00:be:0f:7d:13:8e:d1:b1:
a4:5b:50:cb:45:e5:58:96:d2:35:5d:9d:41:58:91:6b:86:a7:
1a:c0:eb:25:b8:27:91:89:f5:b2:50:71:dc:fe:fc:f9:10:21:
00:6e:99:e1:7f:26:bf:e3:03:4d:a9:56:09:44:23:5f:39:b6:
21:12:9b:6a:c4:4b:8c:de:4b:82:0e:c2:10:45:2e:d1:bf:99:
cb:d0:7d:0b:69:a2:09:af:81:04:84:d6:7f:4a:4e:fd:05:b1:
b9:67:c2:04:60:49:c0:44:06:48:51:2e:e4:eb:57:c7:1c:5a:
f1:1e:c1:22:a5:dd:73:6b:42:7d:e1:95:96:fa:1f:a4:df:b8:
82:18:c3:e4:40:92:a6:7b:0e:ae:be:21:85:a6:dd:fb:c9:91:
33:19:e0:d7:eb:3d:c7:19:40:ae:b2:b3:df:59:85:e8:47:b3:
fa:ae:13:28:55:ef:7f:57:d6:0c:db:43:92:4e:a2:b1:e0:79:
6d:86:b2:62:a3:2b:94:05:0e:99:d1:4f:0c:f6:d0:25:d7:cf:
28:09:c0:48:5c:9c:bb:98:88:5d:17:1f:0f:2e:65:0f:49:6a:
c6:c0:11:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw+7LyzyyBUOGYRyuLKr5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw
ZmRlNTIwHhcNMjMwMTAyMDUzNzAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2Q5YmY3ZmIzMDg2OTY3ZjYzZGFmMWFhZWIwMWM4NDA0OTMwNjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/R/aruWr9c2jijlsJXn2VsgOMhP
JU1BpjG4ET+1XNvztTp/EmNj2iAbItamm1OGzo0fFAkRVXe8Wzs5bq6AZcEXwlYa
vxHqVGEKvvZb+FqxmWGvOH3/UukMlMGzKXiraHZcC2Xaj+DwUBa41lYR7KEdYQJR
TlFq59P90vfiOspNJQ+0dIVyYeSJzG6VecI6TZskYNsFt+ksIHMasTIDzp2aNpv5
H5/v7L+7Vet2I2rfprMfRmfnBSVW5Rxm/LjijbO1ijqqbDHBapGoCd7bd0PJySPA
bP0fF/Gb9Ggp/pvWeoH+sOvTZZ5zsl8u3h5wg8R6KElFOg/rw+SE3Nl9twIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGfZv3+zCGln9j2vGq6wHIQEkwYyMB8GA1UdIwQY
MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt
OGNiZWY5MTNlMzQyLzEvWjltX2Y3TUlhV2YyUGE4YXJyQWNoQVNUQmpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy
LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLuLoAwQD
V+0YMA0GCSqGSIb3DQEBCwUAA4IBAQCH1Kz7VEFJm9CAa7/NUCnC+m+PVoLV1VhV
tn29AL4PfROO0bGkW1DLReVYltI1XZ1BWJFrhqcawOsluCeRifWyUHHc/vz5ECEA
bpnhfya/4wNNqVYJRCNfObYhEptqxEuM3kuCDsIQRS7Rv5nL0H0LaaIJr4EEhNZ/
Sk79BbG5Z8IEYEnARAZIUS7k61fHHFrxHsEipd1za0J94ZWW+h+k37iCGMPkQJKm
ew6uviGFpt37yZEzGeDX6z3HGUCusrPfWYXoR7P6rhMoVe9/V9YM20OSTqKx4Hlt
hrJioyuUBQ6Z0U8M9tAl188oCcBIXJy7mIhdFx8PLmUPSWrGwBEb
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:47 2024 by rpki-client on console-ams.rpki-client.org