Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ZFVE1Pn-ZAv5DL6cOFzelPK6G9g.roa
File: ZFVE1Pn-ZAv5DL6cOFzelPK6G9g.roa (raw, json)
Hash identifier: qB6pztrCY6YbQEqw9HF9ha1OpoMRCTjuS6bfogDgLY8=
Subject key identifier: 64:55:44:D4:F9:FE:64:0B:F9:0C:BE:9C:38:5C:DE:94:F2:BA:1B:D8
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 0187EBE5E841830C1D492ECD15B62B5C1E56
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ZFVE1Pn-ZAv5DL6cOFzelPK6G9g.roa
Signing time: Fri 05 May 2023 12:32:05 +0000
ROA not before: Fri 05 May 2023 12:32:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31050
IP address blocks: 185.101.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:e5:e8:41:83:0c:1d:49:2e:cd:15:b6:2b:5c:1e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: May 5 12:32:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645544d4f9fe640bf90cbe9c385cde94f2ba1bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:43:46:53:b8:d0:9a:99:6a:52:ac:5b:d8:
5e:64:e3:3c:84:f7:84:42:ac:75:5b:d9:10:31:73:
02:c0:4b:00:6e:a9:8f:0c:63:58:35:8d:9a:76:b8:
1b:b5:45:a4:d5:f2:cc:23:a2:44:cb:c5:53:47:ef:
b2:b5:7d:30:e7:2b:d8:67:6c:5d:91:94:fb:74:7a:
01:bd:40:94:3d:30:c6:e9:08:7f:64:6a:c9:44:c6:
85:9d:8f:67:e0:5c:1f:b6:c2:fa:5e:72:c8:d4:e1:
5f:66:f4:ef:3a:40:db:95:84:ba:26:e0:75:f1:71:
16:8d:41:c0:c3:f1:0b:cb:98:be:16:e4:be:42:99:
8d:e4:ba:24:c4:ad:82:9b:d8:ab:38:7f:df:88:73:
14:11:80:c1:ad:ff:af:5a:87:68:32:34:51:f6:02:
d4:85:4d:40:97:3c:55:7c:7b:a9:06:01:94:db:c8:
d4:81:a6:8f:5a:a3:98:4e:6d:a0:af:50:17:fa:2a:
49:a4:9a:b3:80:97:3b:12:85:86:ae:9c:cc:8c:d6:
e5:36:88:7d:eb:06:7b:28:bd:73:2a:b5:30:2e:fa:
7b:ab:9a:4a:24:92:60:f6:ff:40:75:d6:9b:f2:5d:
a4:62:94:cd:16:db:c4:39:75:6d:0b:d8:47:e2:0b:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:55:44:D4:F9:FE:64:0B:F9:0C:BE:9C:38:5C:DE:94:F2:BA:1B:D8
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ZFVE1Pn-ZAv5DL6cOFzelPK6G9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:66:68:5e:56:b6:2b:8e:40:79:2e:27:9e:aa:26:93:fd:f9:
f0:5b:86:1f:75:7e:d7:27:94:83:9f:18:aa:bd:25:ac:23:98:
76:b8:a6:89:6e:76:ee:bc:b9:1f:3f:31:c9:4f:54:49:ec:60:
48:67:33:56:72:95:2c:c4:5c:c6:41:52:3e:74:4e:d3:c6:49:
0e:9d:3c:4b:af:74:4c:f8:59:bb:d9:fb:58:05:10:3c:f3:aa:
ec:72:31:f1:00:69:fd:5e:90:ce:50:36:61:43:a0:5b:ae:8f:
26:2a:b0:cb:a2:5f:56:ee:18:74:bf:4a:0e:1d:12:31:2b:27:
03:85:cb:16:bc:f0:79:07:09:4b:99:b6:0b:a9:0d:ea:41:a4:
a1:f3:5c:3f:c6:fb:32:8b:8d:3d:be:9a:f3:0e:ed:44:83:9d:
41:ae:26:0f:79:97:b4:68:b5:e4:03:55:03:72:1d:98:73:d5:
82:43:ae:54:52:df:13:a5:42:7d:1f:e7:63:50:ee:1b:ec:98:
ba:98:a4:11:f9:14:e1:7b:64:d8:42:85:72:cb:ea:86:35:b8:
d1:d8:7d:fc:4c:e6:ca:f8:17:37:f0:ab:2b:b6:68:37:43:80:
e5:fd:de:c8:9d:74:f4:db:de:28:4e:ed:be:ea:ca:92:9a:d4:
f2:78:54:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfr5ehBgwwdSS7NFbYrXB5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh
MTExYjEwHhcNMjMwNTA1MTIzMjA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDU1NDRkNGY5ZmU2NDBiZjkwY2JlOWMzODVjZGU5NGYyYmExYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArINDRlO40JqZalKsW9heZOM8hPeE
Qqx1W9kQMXMCwEsAbqmPDGNYNY2adrgbtUWk1fLMI6JEy8VTR++ytX0w5yvYZ2xd
kZT7dHoBvUCUPTDG6Qh/ZGrJRMaFnY9n4FwftsL6XnLI1OFfZvTvOkDblYS6JuB1
8XEWjUHAw/ELy5i+FuS+QpmN5LokxK2Cm9irOH/fiHMUEYDBrf+vWodoMjRR9gLU
hU1AlzxVfHupBgGU28jUgaaPWqOYTm2gr1AX+ipJpJqzgJc7EoWGrpzMjNblNoh9
6wZ7KL1zKrUwLvp7q5pKJJJg9v9Addab8l2kYpTNFtvEOXVtC9hH4gt2qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRVRNT5/mQL+Qy+nDhc3pTyuhvYMB8GA1UdIwQY
MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt
N2JmMDM1NmE2YmFiLzEvWkZWRTFQbi1aQXY1REw2Y09GemVsUEs2RzlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi
LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWUMMA0G
CSqGSIb3DQEBCwUAA4IBAQClZmheVrYrjkB5LieeqiaT/fnwW4YfdX7XJ5SDnxiq
vSWsI5h2uKaJbnbuvLkfPzHJT1RJ7GBIZzNWcpUsxFzGQVI+dE7TxkkOnTxLr3RM
+Fm72ftYBRA886rscjHxAGn9XpDOUDZhQ6Bbro8mKrDLol9W7hh0v0oOHRIxKycD
hcsWvPB5BwlLmbYLqQ3qQaSh81w/xvsyi409vprzDu1Eg51BriYPeZe0aLXkA1UD
ch2Yc9WCQ65UUt8TpUJ9H+djUO4b7Ji6mKQR+RThe2TYQoVyy+qGNbjR2H38TObK
+Bc38Ksrtmg3Q4Dl/d7InXT0294oTu2+6sqSmtTyeFQ3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:47 2024 by rpki-client on console-fra.rpki-client.org