Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/zlUyDUAGQSS1oshsQ7s05pmFnG4.roa
File: zlUyDUAGQSS1oshsQ7s05pmFnG4.roa (raw, json)
Hash identifier: RGfQmpnN7SPsQ5nm+4ZekvG9wGLJi11D0PbVt06F22o=
Subject key identifier: CE:55:32:0D:40:06:41:24:B5:A2:C8:6C:43:BB:34:E6:99:85:9C:6E
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 01856CEF366542C31EA0D002850249D6CDFC
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/zlUyDUAGQSS1oshsQ7s05pmFnG4.roa
Signing time: Sun 01 Jan 2023 10:44:54 +0000
ROA not before: Sun 01 Jan 2023 10:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199571
IP address blocks: 37.9.136.0/21 maxlen: 21
185.219.228.0/22 maxlen: 22
2a02:e640::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:36:65:42:c3:1e:a0:d0:02:85:02:49:d6:cd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Jan 1 10:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce55320d40064124b5a2c86c43bb34e699859c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:19:29:e9:1e:2e:10:91:c0:3f:65:0b:4a:
7b:1a:c1:0f:f7:1f:d9:65:12:63:71:5a:6a:2b:1b:
de:ea:5e:79:f6:6e:5e:af:9b:4f:93:b0:a7:a2:95:
b7:cc:15:89:c9:6f:1a:f5:33:e4:06:0f:68:f0:44:
e6:80:53:7c:38:66:41:02:00:7c:cf:82:40:34:a3:
b0:59:82:1a:74:3a:75:29:cc:8b:65:66:89:72:26:
12:f4:70:34:d1:e7:40:d3:69:fb:a7:04:49:fe:d8:
75:b6:f7:2f:76:bd:40:39:a2:c5:61:a5:8d:c3:b5:
99:a6:e3:d6:76:76:6f:4b:50:6d:52:2a:61:36:4c:
1a:13:4c:de:03:b1:62:f8:25:b7:46:cf:5a:12:f3:
fa:4e:d1:d1:6b:9c:5a:ad:77:07:82:d3:49:83:44:
47:8b:f5:12:f5:ac:fd:7c:b8:19:1d:70:32:4a:4c:
0a:37:86:50:fc:47:a8:80:60:e2:bc:00:3c:a4:e3:
11:c1:65:a5:f5:9c:62:da:ab:18:fd:c1:b8:10:94:
6a:6b:31:57:61:ff:e3:16:25:17:d6:58:f2:bd:14:
35:5e:81:f0:4d:b3:ef:12:cd:fd:5e:e5:88:73:69:
72:2d:c6:96:ca:56:be:72:0b:e0:76:1c:44:10:d1:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:55:32:0D:40:06:41:24:B5:A2:C8:6C:43:BB:34:E6:99:85:9C:6E
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/zlUyDUAGQSS1oshsQ7s05pmFnG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.136.0/21
185.219.228.0/22
IPv6:
2a02:e640::/29
Signature Algorithm: sha256WithRSAEncryption
a7:38:7f:9f:c4:92:3a:53:9e:e0:d6:52:75:48:0a:10:81:88:
a2:2d:5d:a5:3b:7a:70:9b:d2:bd:92:ae:42:f2:8d:30:ed:6e:
06:5a:93:4b:fb:7d:f2:df:aa:dd:98:c7:69:d8:93:27:c8:88:
68:bf:2e:76:c2:43:de:d8:77:27:67:ba:0b:0b:8b:ec:07:16:
4b:92:a0:0d:50:65:08:ab:0c:f5:df:70:4c:36:0f:51:88:90:
4b:19:e1:0c:7e:5f:ac:ae:f9:e1:d9:b1:89:c3:34:f1:d3:5d:
69:d7:db:f7:91:04:b2:2b:97:57:ef:1d:19:49:df:70:ee:ef:
99:ad:d7:b5:11:f5:50:75:dc:38:72:6b:d2:38:b9:31:7d:e6:
31:1f:85:6c:fd:d7:ae:65:e3:41:a6:36:0d:8d:bc:ea:5b:58:
30:54:1c:69:42:e6:14:b8:6f:f1:6d:11:5d:de:bf:52:17:72:
a5:dd:db:bc:57:1a:20:b9:f2:7f:e5:a5:97:a1:37:48:c1:00:
04:df:f6:10:d8:1c:36:30:14:ca:46:3c:c2:91:dc:b0:0a:16:
ae:de:a5:9e:26:ac:e9:9e:be:f6:ff:af:31:5f:eb:f9:c2:60:
6e:0e:49:01:b8:d6:3a:e9:1b:6f:fb:6d:73:dd:45:81:0f:d5:
d0:0d:33:f5
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVs7zZlQsMeoNAChQJJ1s38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYTMzYzk2ZjAyYTlmMGJlZjI1Y2QzODA2YTI0NjdjYTE2
NTYzN2IwHhcNMjMwMTAxMTA0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTU1MzIwZDQwMDY0MTI0YjVhMmM4NmM0M2JiMzRlNjk5ODU5YzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXwZKekeLhCRwD9lC0p7GsEP9x/Z
ZRJjcVpqKxve6l559m5er5tPk7CnopW3zBWJyW8a9TPkBg9o8ETmgFN8OGZBAgB8
z4JANKOwWYIadDp1KcyLZWaJciYS9HA00edA02n7pwRJ/th1tvcvdr1AOaLFYaWN
w7WZpuPWdnZvS1BtUiphNkwaE0zeA7Fi+CW3Rs9aEvP6TtHRa5xarXcHgtNJg0RH
i/US9az9fLgZHXAySkwKN4ZQ/EeogGDivAA8pOMRwWWl9Zxi2qsY/cG4EJRqazFX
Yf/jFiUX1ljyvRQ1XoHwTbPvEs39XuWIc2lyLcaWyla+cgvgdhxEENEzJwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFM5VMg1ABkEktaLIbEO7NOaZhZxuMB8GA1UdIwQY
MBaAFOyjPJbwKp8L7yXNOAaiRnyhZWN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUt
MjVlZjI5OTBmMTY2LzEvemxVeURVQUdRU1Mxb3Noc1E3czA1cG1Gbkc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUtMjVlZjI5OTBmMTY2
LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJQmIAwQC
udvkMA0EAgACMAcDBQMqAuZAMA0GCSqGSIb3DQEBCwUAA4IBAQCnOH+fxJI6U57g
1lJ1SAoQgYiiLV2lO3pwm9K9kq5C8o0w7W4GWpNL+33y36rdmMdp2JMnyIhovy52
wkPe2HcnZ7oLC4vsBxZLkqANUGUIqwz133BMNg9RiJBLGeEMfl+srvnh2bGJwzTx
011p19v3kQSyK5dX7x0ZSd9w7u+Zrde1EfVQddw4cmvSOLkxfeYxH4Vs/deuZeNB
pjYNjbzqW1gwVBxpQuYUuG/xbRFd3r9SF3Kl3du8VxogufJ/5aWXoTdIwQAE3/YQ
2Bw2MBTKRjzCkdywChau3qWeJqzpnr72/68xX+v5wmBuDkkBuNY66Rtv+21z3UWB
D9XQDTP1
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:25 2024 by rpki-client on console-ams.rpki-client.org