Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/ZeouH9PQAGJwjgt3vJrtYgVT6MI.roa
File: ZeouH9PQAGJwjgt3vJrtYgVT6MI.roa (raw, json)
Hash identifier: 5MyhMFBCKMuPi+SEShe5WrrqpNngYe+ub+yAK3mYwEg=
Subject key identifier: 65:EA:2E:1F:D3:D0:00:62:70:8E:0B:77:BC:9A:ED:62:05:53:E8:C2
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 018F83414764699FE3DE45018A928651392E
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/ZeouH9PQAGJwjgt3vJrtYgVT6MI.roa
Signing time: Thu 16 May 2024 21:14:04 +0000
ROA not before: Thu 16 May 2024 21:14:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36184
IP address blocks: 194.126.150.0/23 maxlen: 24
217.10.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 13:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:83:41:47:64:69:9f:e3:de:45:01:8a:92:86:51:39:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: May 16 21:14:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65ea2e1fd3d00062708e0b77bc9aed620553e8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:40:dc:f6:e0:f9:be:d5:91:f8:b9:08:23:
0a:d0:ff:09:b5:d3:c9:dc:de:12:88:44:44:cd:80:
fc:13:f1:76:92:21:9b:e8:a9:09:d3:1d:d2:93:c3:
0e:b3:c7:2d:a5:35:6d:a2:5e:a7:df:4d:56:13:75:
d1:50:7d:e8:9e:04:da:25:75:e8:9e:88:01:af:af:
58:b0:09:7e:09:07:41:72:81:a2:26:0e:20:21:81:
6c:1d:a0:1e:1b:60:6e:e4:62:4d:17:48:41:80:fe:
9d:86:19:ee:06:94:bd:ff:f4:58:c5:b6:d0:bb:aa:
5b:df:7c:a7:6b:6e:ce:ab:84:3b:f5:7b:97:93:4f:
21:a9:51:a1:28:b9:2b:a2:04:bf:73:7a:41:51:f6:
d5:7a:15:dc:5f:d5:72:8d:72:bf:1c:08:c4:46:d0:
c9:98:21:0f:2f:53:25:74:ed:e0:59:c6:da:24:36:
d8:73:f3:71:17:58:ae:1b:04:86:b4:52:f2:21:2c:
5d:d6:63:18:07:e0:62:d9:04:7b:0a:61:1d:72:2a:
f1:1c:63:00:91:1f:8d:8d:c6:2b:5f:29:45:5b:d0:
bf:96:a0:03:a9:cb:dd:9a:44:0e:0c:a8:be:f8:22:
0f:65:fe:c6:68:b6:69:3a:c5:c6:a7:4f:58:3d:8c:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EA:2E:1F:D3:D0:00:62:70:8E:0B:77:BC:9A:ED:62:05:53:E8:C2
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/ZeouH9PQAGJwjgt3vJrtYgVT6MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.150.0/23
217.10.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:55:6e:88:b7:aa:92:83:97:45:46:58:c7:39:5b:c7:2a:9e:
40:5a:03:95:c1:bd:de:5e:2f:77:89:2f:eb:c5:03:ef:12:7e:
d5:a0:63:1c:91:95:bd:ec:0f:9a:63:6e:26:b0:44:78:17:e6:
e6:98:91:a3:37:b6:01:4b:ce:00:81:38:0a:18:ac:73:81:89:
d1:40:02:99:f7:62:20:42:f2:16:2f:50:3e:16:06:67:6f:8e:
f6:20:78:07:7f:6a:88:62:2b:54:bd:21:3c:29:60:98:8f:70:
84:4c:40:43:1a:fc:11:3c:10:99:76:a2:ea:48:71:01:55:c3:
4f:1f:f9:04:fa:21:3a:d7:d6:45:7e:ee:36:4b:f1:49:fa:0d:
6a:57:d5:71:d6:77:c4:ab:a0:b7:ce:0c:5a:da:07:ad:50:8c:
d0:9c:79:31:34:0d:47:48:7d:f7:77:8f:3b:7c:3e:00:64:9c:
4c:43:de:16:ff:88:65:f0:08:de:e6:b4:69:5f:04:2d:5e:f5:
0d:10:14:1c:22:4e:8d:22:c2:8c:19:96:01:64:32:e6:b8:f2:
ec:39:4f:12:01:2e:ac:48:e8:5f:7b:13:5e:27:34:85:9a:f5:
3c:5e:e1:0e:6b:73:c1:4b:f4:00:ef:f7:27:e1:5f:e3:60:ec:
bb:a6:ea:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+DQUdkaZ/j3kUBipKGUTkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNDFjODViNDc0ZThiNmMwMDg5MWQ5NTQxMjRmZjBjODEy
MDBkOGMwHhcNMjQwNTE2MjExNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWVhMmUxZmQzZDAwMDYyNzA4ZTBiNzdiYzlhZWQ2MjA1NTNlOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VdA3Pbg+b7Vkfi5CCMK0P8JtdPJ
3N4SiEREzYD8E/F2kiGb6KkJ0x3Sk8MOs8ctpTVtol6n301WE3XRUH3ongTaJXXo
nogBr69YsAl+CQdBcoGiJg4gIYFsHaAeG2Bu5GJNF0hBgP6dhhnuBpS9//RYxbbQ
u6pb33yna27Oq4Q79XuXk08hqVGhKLkrogS/c3pBUfbVehXcX9VyjXK/HAjERtDJ
mCEPL1MldO3gWcbaJDbYc/NxF1iuGwSGtFLyISxd1mMYB+Bi2QR7CmEdcirxHGMA
kR+NjcYrXylFW9C/lqADqcvdmkQODKi++CIPZf7GaLZpOsXGp09YPYwaewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGXqLh/T0ABicI4Ld7ya7WIFU+jCMB8GA1UdIwQY
MBaAFOBByFtHTotsAIkdlUEk/wyBIA2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NDllNGQtOGRlZS00NTliLTkyODMt
NDZiYjNmYTI4YjAwLzEvWmVvdUg5UFFBR0p3amd0M3ZKcnRZZ1ZUNk1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NDllNGQtOGRlZS00NTliLTkyODMtNDZiYjNmYTI4YjAw
LzEvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwn6WAwQA
2QrhMA0GCSqGSIb3DQEBCwUAA4IBAQBrVW6It6qSg5dFRljHOVvHKp5AWgOVwb3e
Xi93iS/rxQPvEn7VoGMckZW97A+aY24msER4F+bmmJGjN7YBS84AgTgKGKxzgYnR
QAKZ92IgQvIWL1A+FgZnb472IHgHf2qIYitUvSE8KWCYj3CETEBDGvwRPBCZdqLq
SHEBVcNPH/kE+iE619ZFfu42S/FJ+g1qV9Vx1nfEq6C3zgxa2getUIzQnHkxNA1H
SH33d487fD4AZJxMQ94W/4hl8Aje5rRpXwQtXvUNEBQcIk6NIsKMGZYBZDLmuPLs
OU8SAS6sSOhfexNeJzSFmvU8XuEOa3PBS/QA7/cn4V/jYOy7puqQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:04 2024 by rpki-client on console-fra.rpki-client.org