Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/zPoypFoYdmD2iMdP_yAwMBYKyZY.roa
File: zPoypFoYdmD2iMdP_yAwMBYKyZY.roa (raw, json)
Hash identifier: 8dfDXUG1tdOLAb38wtbRkyjv0ToAUVJyzw8PkvnbEdI=
Subject key identifier: CC:FA:32:A4:5A:18:76:60:F6:88:C7:4F:FF:20:30:30:16:0A:C9:96
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 01856D54072AA6CFF4E1A430EE40EB97A37C
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/zPoypFoYdmD2iMdP_yAwMBYKyZY.roa
Signing time: Sun 01 Jan 2023 12:35:01 +0000
ROA not before: Sun 01 Jan 2023 12:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49697
IP address blocks: 46.251.230.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:07:2a:a6:cf:f4:e1:a4:30:ee:40:eb:97:a3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Jan 1 12:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccfa32a45a187660f688c74fff203030160ac996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:4f:49:4b:70:4e:9b:5e:dc:92:84:38:9f:
28:d0:40:8f:70:96:99:1b:75:41:9a:f1:e1:27:12:
83:dd:a5:23:47:cf:9e:ea:65:c8:0f:1d:dd:8d:75:
25:e2:68:5f:12:63:95:e9:8a:94:ac:bf:3e:3f:b3:
51:d9:1a:8b:29:a5:46:f0:83:73:55:6f:b0:22:78:
50:03:1c:7b:48:4c:e4:65:a2:77:8f:e5:4b:4f:70:
80:9f:50:51:a5:56:2e:c3:cd:b1:cb:b3:af:67:63:
87:8e:52:40:7f:f7:9d:82:11:72:0a:2e:c2:31:3c:
23:0c:07:2c:88:a4:22:74:5c:dd:5b:30:42:fa:d6:
2a:65:08:01:da:2e:93:cf:25:e6:f5:c2:89:1f:0a:
08:b2:c6:24:3c:fb:c6:c4:1d:54:14:e0:ae:cc:90:
1b:36:02:36:76:82:3b:bb:a4:7d:97:87:c2:d7:9c:
d1:20:40:0a:ad:0c:fd:bf:0a:f6:f3:5f:4b:63:1a:
e2:f0:68:69:59:99:51:a1:c2:ea:27:5c:26:48:a9:
39:ea:5b:af:cb:8c:d7:48:b7:a0:2b:e0:1d:a3:d8:
2d:10:72:dc:35:cc:60:57:64:66:fc:5a:0e:c5:02:
e4:43:e0:08:c4:4c:4c:11:8d:1b:ea:6f:67:e4:d4:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FA:32:A4:5A:18:76:60:F6:88:C7:4F:FF:20:30:30:16:0A:C9:96
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/zPoypFoYdmD2iMdP_yAwMBYKyZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:39:93:b2:95:2e:7b:a9:d8:94:a0:74:ab:64:bd:bf:54:49:
dd:17:36:ca:94:eb:70:95:56:f1:5d:70:bb:61:a7:78:6f:ab:
43:71:f5:f5:74:8f:80:28:47:75:2b:fd:11:8c:11:9b:06:9a:
7a:d6:7b:a7:8c:ca:3a:f7:fd:11:33:85:4c:be:48:a3:6a:6f:
25:c3:ad:1c:2c:5b:6e:71:4d:fa:a4:56:68:8e:f8:f0:df:3c:
11:e4:03:11:8e:b8:25:f0:c0:35:82:6a:df:7a:05:cd:3f:f8:
dc:80:bf:83:f4:f9:2e:95:43:90:68:86:72:2e:1c:65:a9:fb:
c9:ec:5f:f5:6e:2c:c2:1e:00:8c:65:21:da:22:b5:c8:f9:6a:
3d:5c:5e:41:70:55:3d:81:9b:3f:94:d6:bf:40:9c:f9:00:6d:
71:bd:64:88:31:73:18:9e:28:b8:7f:3c:96:87:67:51:ae:4d:
0e:05:11:60:0a:48:ae:30:93:b3:06:83:9f:5d:6b:2f:eb:c0:
2b:a5:ea:ed:57:14:39:ce:69:ad:61:68:ae:ca:78:06:47:8e:
56:ee:9b:31:52:64:b5:5e:3b:2c:23:61:8e:e5:27:bd:2a:61:
68:84:a0:81:27:3e:99:52:77:d6:ff:16:de:c5:b9:24:86:61:
68:44:3d:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtVAcqps/04aQw7kDrl6N8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTZkNTYwYTA4YTAxM2YzZmUwZTY2ZGFkYWY2ZmQwMmJl
YWY0M2YwHhcNMjMwMTAxMTIzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2ZhMzJhNDVhMTg3NjYwZjY4OGM3NGZmZjIwMzAzMDE2MGFjOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGtPSUtwTpte3JKEOJ8o0ECPcJaZ
G3VBmvHhJxKD3aUjR8+e6mXIDx3djXUl4mhfEmOV6YqUrL8+P7NR2RqLKaVG8INz
VW+wInhQAxx7SEzkZaJ3j+VLT3CAn1BRpVYuw82xy7OvZ2OHjlJAf/edghFyCi7C
MTwjDAcsiKQidFzdWzBC+tYqZQgB2i6TzyXm9cKJHwoIssYkPPvGxB1UFOCuzJAb
NgI2doI7u6R9l4fC15zRIEAKrQz9vwr2819LYxri8GhpWZlRocLqJ1wmSKk56luv
y4zXSLegK+Ado9gtEHLcNcxgV2Rm/FoOxQLkQ+AIxExMEY0b6m9n5NSTAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMz6MqRaGHZg9ojHT/8gMDAWCsmWMB8GA1UdIwQY
MBaAFC7m1WCgigE/P+Dmba2vb9Ar6vQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2It
NzM0OTVmYzA4ZmM0LzEvelBveXBGb1lkbUQyaU1kUF95QXdNQllLeVpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2ItNzM0OTVmYzA4ZmM0
LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvvmMA0G
CSqGSIb3DQEBCwUAA4IBAQAMOZOylS57qdiUoHSrZL2/VEndFzbKlOtwlVbxXXC7
Yad4b6tDcfX1dI+AKEd1K/0RjBGbBpp61nunjMo69/0RM4VMvkijam8lw60cLFtu
cU36pFZojvjw3zwR5AMRjrgl8MA1gmrfegXNP/jcgL+D9PkulUOQaIZyLhxlqfvJ
7F/1bizCHgCMZSHaIrXI+Wo9XF5BcFU9gZs/lNa/QJz5AG1xvWSIMXMYnii4fzyW
h2dRrk0OBRFgCkiuMJOzBoOfXWsv68ArpertVxQ5zmmtYWiuyngGR45W7psxUmS1
XjssI2GO5Se9KmFohKCBJz6ZUnfW/xbexbkkhmFoRD0r
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:19 2024 by rpki-client on console-ams.rpki-client.org