Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZzBcoRXcgqOZRuRfvND-2SyYTLU.roa
File: ZzBcoRXcgqOZRuRfvND-2SyYTLU.roa (raw, json)
Hash identifier: e8Fuf51PazC3cfwtK+tk6Yv9L2/9tbnl2I2R7A6eQZ8=
Subject key identifier: 67:30:5C:A1:15:DC:82:A3:99:46:E4:5F:BC:D0:FE:D9:2C:98:4C:B5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01867858496734262C31EA6C9F4E885F7FB1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZzBcoRXcgqOZRuRfvND-2SyYTLU.roa
Signing time: Wed 22 Feb 2023 08:58:17 +0000
ROA not before: Wed 22 Feb 2023 08:58:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44103
IP address blocks: 178.18.155.0/24 maxlen: 32
178.18.154.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 31 Mar 2023 06:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:58:49:67:34:26:2c:31:ea:6c:9f:4e:88:5f:7f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 22 08:58:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67305ca115dc82a39946e45fbcd0fed92c984cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1e:db:da:78:78:d9:3d:9d:a4:82:a0:16:9f:
eb:33:e5:6d:c0:4a:e5:d2:95:91:74:6d:47:37:7a:
42:7c:3f:57:8d:35:55:52:c7:b0:35:2a:07:cb:9e:
37:5c:37:ca:29:1a:0b:d9:bc:4d:aa:d2:5b:2e:71:
9d:a4:9c:b4:c9:5d:9b:01:36:48:ca:09:7a:34:43:
d3:9e:40:5e:2b:df:80:55:23:2e:5f:81:69:65:73:
a3:69:fb:94:e9:43:46:68:fc:fe:98:09:81:b1:d3:
0b:cd:b9:b7:88:52:8b:42:4a:6a:51:ab:25:c3:29:
a5:49:7f:54:18:14:ac:96:fe:fe:20:0b:bf:0a:ee:
db:3e:45:2b:15:fc:ae:a5:0f:f9:d9:b0:71:7a:cb:
de:eb:bd:0e:df:db:97:db:4f:c8:ec:c8:ff:0e:52:
22:fa:45:be:23:eb:d8:7e:f2:c0:dd:6f:08:f8:81:
54:36:42:49:d7:b2:e9:3b:6d:2c:9c:11:0f:a7:f0:
3f:18:65:fa:aa:6d:61:4b:dd:6b:a1:53:48:1f:df:
76:06:78:e2:b1:8d:d4:38:a1:8a:a4:41:ea:02:e8:
7d:eb:70:4a:c7:68:be:c0:50:2a:45:c5:80:2c:9c:
34:04:b2:fe:29:aa:8c:20:f8:f4:4d:18:ac:91:3e:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:30:5C:A1:15:DC:82:A3:99:46:E4:5F:BC:D0:FE:D9:2C:98:4C:B5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZzBcoRXcgqOZRuRfvND-2SyYTLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.154.0/23
Signature Algorithm: sha256WithRSAEncryption
70:08:ee:e5:65:14:9c:b7:b1:70:25:8e:e1:7c:9e:77:f8:a4:
e6:bc:e7:93:66:a6:cd:ea:be:56:57:26:82:f5:7e:8d:8d:9c:
84:90:30:4a:51:e6:ab:21:62:97:7b:c9:ae:f8:98:e5:b5:dd:
b6:77:63:7b:54:9a:7c:91:82:a5:e8:39:ff:60:7e:2d:c2:b6:
cf:6f:1d:47:8e:8f:e1:74:85:b1:3f:5e:6d:6e:86:87:1f:39:
8a:74:10:d3:3b:ea:b7:54:64:fd:3a:7d:c7:4e:8f:b7:18:59:
45:95:df:d8:10:68:f7:cf:bf:16:c3:26:19:04:be:c5:34:5d:
86:6d:c9:93:44:6a:65:ba:61:76:0e:94:2f:de:cc:8b:fe:b2:
ec:74:59:91:c1:84:cc:2c:13:01:00:b6:5a:a8:05:9e:07:14:
6b:24:d2:10:77:d7:af:dd:9c:ea:c8:e2:91:0e:b9:92:a3:07:
7b:24:0a:a4:87:00:8d:4e:36:a9:82:47:a1:94:b6:2c:fd:49:
e2:a9:e3:c0:98:62:ea:bc:ca:ac:3a:17:45:f3:7e:e7:63:9d:
af:51:f3:c4:43:70:c0:f2:fc:98:26:d5:e8:28:96:2e:ea:65:
a2:f4:04:6d:dc:56:ce:9e:61:ed:30:1f:26:87:af:2d:1d:d1:
72:c2:3c:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ4WElnNCYsMepsn06IX3+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjMwMjIyMDg1ODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzMwNWNhMTE1ZGM4MmEzOTk0NmU0NWZiY2QwZmVkOTJjOTg0Y2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR7b2nh42T2dpIKgFp/rM+VtwErl
0pWRdG1HN3pCfD9XjTVVUsewNSoHy543XDfKKRoL2bxNqtJbLnGdpJy0yV2bATZI
ygl6NEPTnkBeK9+AVSMuX4FpZXOjafuU6UNGaPz+mAmBsdMLzbm3iFKLQkpqUasl
wymlSX9UGBSslv7+IAu/Cu7bPkUrFfyupQ/52bBxesve670O39uX20/I7Mj/DlIi
+kW+I+vYfvLA3W8I+IFUNkJJ17LpO20snBEPp/A/GGX6qm1hS91roVNIH992Bnji
sY3UOKGKpEHqAuh963BKx2i+wFAqRcWALJw0BLL+KaqMIPj0TRiskT5b7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcwXKEV3IKjmUbkX7zQ/tksmEy1MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvWnpCY29SWGNncU9aUnVSZnZORC0yU3lZVExVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBshKaMA0G
CSqGSIb3DQEBCwUAA4IBAQBwCO7lZRSct7FwJY7hfJ53+KTmvOeTZqbN6r5WVyaC
9X6NjZyEkDBKUearIWKXe8mu+Jjltd22d2N7VJp8kYKl6Dn/YH4twrbPbx1Hjo/h
dIWxP15tboaHHzmKdBDTO+q3VGT9On3HTo+3GFlFld/YEGj3z78WwyYZBL7FNF2G
bcmTRGplumF2DpQv3syL/rLsdFmRwYTMLBMBALZaqAWeBxRrJNIQd9ev3ZzqyOKR
DrmSowd7JAqkhwCNTjapgkehlLYs/UniqePAmGLqvMqsOhdF837nY52vUfPEQ3DA
8vyYJtXoKJYu6mWi9ARt3FbOnmHtMB8mh68tHdFywjwy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org