Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/zK1A7f15sQSf81k4kEFU8lpHVT4.roa
File: zK1A7f15sQSf81k4kEFU8lpHVT4.roa (raw, json)
Hash identifier: kxk73wN8iKPLg1UjUuNKequvm4BwAtqJBUwzDD0OZ/o=
Subject key identifier: CC:AD:40:ED:FD:79:B1:04:9F:F3:59:38:90:41:54:F2:5A:47:55:3E
Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial: 01857169A0206005E19F387C526216AE459B
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/zK1A7f15sQSf81k4kEFU8lpHVT4.roa
Signing time: Mon 02 Jan 2023 07:37:05 +0000
ROA not before: Mon 02 Jan 2023 07:37:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6735
IP address blocks: 62.68.0.0/19 maxlen: 19
5.252.124.0/22 maxlen: 22
45.87.16.0/22 maxlen: 22
195.245.0.0/18 maxlen: 18
2a09:48c0::/29 maxlen: 29
2a0e:ed80::/29 maxlen: 29
2a0f:8040::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 31 Jan 2023 10:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:a0:20:60:05:e1:9f:38:7c:52:62:16:ae:45:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
Validity
Not Before: Jan 2 07:37:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccad40edfd79b1049ff35938904154f25a47553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:f4:84:ad:e6:95:10:2a:49:e3:3e:fa:fa:
4c:76:1c:51:bc:20:ac:20:6c:83:bb:c3:48:17:62:
5c:29:e9:bc:ab:8d:55:0a:3e:c7:8c:45:64:89:15:
1b:1c:dd:e7:fe:9f:36:7d:1b:d4:f4:ba:2c:9b:27:
05:03:e4:fb:da:ec:48:5d:31:a1:a1:57:c8:25:e3:
1e:69:79:29:d5:ff:d1:8b:6e:1a:fa:8c:d3:98:b1:
6d:6c:8b:37:ff:5b:5e:26:17:74:97:2c:b6:01:27:
60:2f:d6:5e:f4:32:61:4e:ec:a0:fc:f1:ae:c9:26:
b1:df:66:7e:2b:34:33:ef:d8:99:85:9e:eb:d1:4a:
74:6d:fa:b6:cd:f4:8e:4d:a5:11:db:e1:61:8d:a4:
29:a0:92:5b:bb:5d:83:b9:91:ee:81:1c:e6:98:68:
26:d1:4d:a6:fe:dc:32:43:12:36:aa:f6:23:1a:5d:
7b:5c:84:10:76:47:bc:d7:f3:c8:5e:c1:49:91:1b:
59:5c:d7:5a:15:3c:d3:d4:2c:6c:bd:9b:44:e3:bf:
66:b4:90:f5:49:f6:12:6d:25:45:51:50:7a:1f:89:
30:d7:d3:f8:05:97:9c:c8:c8:2d:59:f6:74:0e:e9:
d7:da:5a:a5:90:46:48:89:8f:b3:20:18:bf:1a:d6:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AD:40:ED:FD:79:B1:04:9F:F3:59:38:90:41:54:F2:5A:47:55:3E
X509v3 Authority Key Identifier:
keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/zK1A7f15sQSf81k4kEFU8lpHVT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.124.0/22
45.87.16.0/22
62.68.0.0/19
195.245.0.0/18
IPv6:
2a09:48c0::/29
2a0e:ed80::/29
2a0f:8040::/29
Signature Algorithm: sha256WithRSAEncryption
98:23:5b:0b:96:33:8f:26:82:07:9a:aa:72:93:f1:77:aa:59:
32:04:60:01:5d:c8:29:35:b3:04:28:86:ec:b7:bb:d8:97:49:
9b:26:78:d8:a6:25:da:99:24:df:ce:97:93:81:87:72:2e:c3:
44:56:c8:df:da:22:83:7c:3a:0c:89:50:0a:97:a2:4c:89:5e:
7b:67:1d:fa:7e:c5:d9:0f:c3:49:76:df:cc:86:ac:c9:70:38:
3c:74:7e:18:d5:e2:d7:d6:ae:98:92:bc:57:44:3a:2b:a5:e0:
22:5b:58:5d:b5:24:c8:d0:5e:54:d7:df:95:bf:88:79:0a:f2:
f1:25:af:65:dd:ef:a5:e9:ce:03:28:d5:7a:6e:b4:cb:b1:51:
ec:db:f7:fe:aa:c0:85:c9:3f:70:96:cd:86:f7:f2:e8:25:6d:
dd:2e:f5:8e:a1:df:c9:cb:c9:22:ec:0b:7e:35:59:84:26:12:
de:39:75:a1:12:92:fd:8c:88:75:d7:bd:b4:52:cb:da:6e:a5:
93:de:d7:96:cf:2d:8c:1e:04:46:ab:46:6e:99:a5:d5:d0:ed:
2f:ae:0d:eb:bb:1c:a4:07:f3:6a:5a:c5:c8:e1:76:1e:a8:81:
2d:e8:2b:e0:61:50:3f:43:e7:45:b5:6c:6c:c5:f4:b4:db:98:
5e:27:29:73
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYVxaaAgYAXhnzh8UmIWrkWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjY2Q1MmE2YTdmOTU3MTcxYjE1ZjdiZTVlMjA5MTY0Mjgz
Njk0MDEwHhcNMjMwMTAyMDczNzA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2FkNDBlZGZkNzliMTA0OWZmMzU5Mzg5MDQxNTRmMjVhNDc1NTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj070hK3mlRAqSeM++vpMdhxRvCCs
IGyDu8NIF2JcKem8q41VCj7HjEVkiRUbHN3n/p82fRvU9LosmycFA+T72uxIXTGh
oVfIJeMeaXkp1f/Ri24a+ozTmLFtbIs3/1teJhd0lyy2ASdgL9Ze9DJhTuyg/PGu
ySax32Z+KzQz79iZhZ7r0Up0bfq2zfSOTaUR2+FhjaQpoJJbu12DuZHugRzmmGgm
0U2m/twyQxI2qvYjGl17XIQQdke81/PIXsFJkRtZXNdaFTzT1CxsvZtE479mtJD1
SfYSbSVFUVB6H4kw19P4BZecyMgtWfZ0DunX2lqlkEZIiY+zIBi/GtbrXwIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFMytQO39ebEEn/NZOJBBVPJaR1U+MB8GA1UdIwQY
MBaAFLzNUqan+VcXGxX3vl4gkWQoNpQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUt
ZTgyM2UxN2JiNWNjLzEveksxQTdmMTVzUVNmODFrNGtFRlU4bHBIVlQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUtZTgyM2UxN2JiNWNj
LzEvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAeBAIAATAYAwQCBfx8AwQC
LVcQAwQFPkQAAwQGw/UAMBsEAgACMBUDBQMqCUjAAwUDKg7tgAMFAyoPgEAwDQYJ
KoZIhvcNAQELBQADggEBAJgjWwuWM48mggeaqnKT8XeqWTIEYAFdyCk1swQohuy3
u9iXSZsmeNimJdqZJN/Ol5OBh3Iuw0RWyN/aIoN8OgyJUAqXokyJXntnHfp+xdkP
w0l238yGrMlwODx0fhjV4tfWrpiSvFdEOiul4CJbWF21JMjQXlTX35W/iHkK8vEl
r2Xd76XpzgMo1XputMuxUezb9/6qwIXJP3CWzYb38uglbd0u9Y6h38nLySLsC341
WYQmEt45daESkv2MiHXXvbRSy9pupZPe15bPLYweBEarRm6ZpdXQ7S+uDeu7HKQH
82paxcjhdh6ogS3oK+BhUD9D50W1bGzF9LTbmF4nKXM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:05 2024 by rpki-client on console-fra.rpki-client.org