Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/ZOwRrcNBCzuJjp7MOALOiTngBaU.roa
File: ZOwRrcNBCzuJjp7MOALOiTngBaU.roa (raw, json)
Hash identifier: IoW+4UKvU2gTifNdojfKPAqgbEFIainYM0+hAKHpFaU=
Subject key identifier: 64:EC:11:AD:C3:41:0B:3B:89:8E:9E:CC:38:02:CE:89:39:E0:05:A5
Certificate issuer: /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Certificate serial: 01856F3918DB47B17832DDA984106FB38D42
Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/ZOwRrcNBCzuJjp7MOALOiTngBaU.roa
Signing time: Sun 01 Jan 2023 21:24:50 +0000
ROA not before: Sun 01 Jan 2023 21:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201535
IP address blocks: 185.71.164.0/22 maxlen: 22
2a05:34c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:18:db:47:b1:78:32:dd:a9:84:10:6f:b3:8d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Validity
Not Before: Jan 1 21:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64ec11adc3410b3b898e9ecc3802ce8939e005a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:e5:09:a1:00:9a:9f:6b:e4:83:59:95:e4:
1d:58:41:ce:b9:b6:5a:8f:3d:ea:ab:c5:8e:f1:ef:
cd:ed:1c:d2:86:f3:8c:85:ec:82:e9:0e:c1:2d:dc:
db:0e:c6:84:a4:5d:a7:d4:98:1e:ee:d2:e8:93:01:
3f:e2:81:e5:64:f0:85:d2:0b:f0:29:41:06:08:89:
73:b3:b7:78:ca:46:a4:e4:b6:c0:00:45:11:03:c0:
d8:03:28:b5:26:13:25:0b:bd:dd:48:e4:a2:ce:c4:
b2:4f:7d:07:c1:cc:de:d4:8a:9f:cd:76:ad:80:be:
66:38:63:b2:e4:74:90:9b:43:75:14:ee:ec:ef:4c:
30:8e:1b:8e:e8:c0:29:f0:cf:bc:95:36:47:da:8d:
78:91:31:ee:ff:f0:f2:c7:53:1a:48:f8:72:e3:58:
c0:a7:73:dd:f4:9d:04:3c:7d:2f:42:e2:1e:6b:a9:
bf:e8:40:41:70:15:86:09:c6:76:58:4e:5c:9b:de:
3d:f5:85:8b:b1:d8:96:d4:a8:12:b2:32:6f:69:0d:
af:bc:7e:b3:7e:f7:6a:1d:85:e2:3d:a9:c5:cd:d2:
77:0a:04:42:e1:14:5a:96:c6:93:93:38:b6:42:be:
5a:81:9f:9d:9a:51:25:b2:14:63:62:54:f1:2d:02:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EC:11:AD:C3:41:0B:3B:89:8E:9E:CC:38:02:CE:89:39:E0:05:A5
X509v3 Authority Key Identifier:
keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/ZOwRrcNBCzuJjp7MOALOiTngBaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.164.0/22
IPv6:
2a05:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
67:d5:9c:a5:59:a3:8c:cd:c5:c0:6e:b9:70:af:3b:ae:7e:f2:
b7:9b:e1:98:89:81:f5:71:68:f7:e0:75:22:f5:d7:d7:5f:2d:
21:90:30:c3:39:4d:a5:49:e6:66:b0:5b:c8:d2:18:1c:95:d5:
3f:da:35:ef:ba:31:70:51:c4:80:b9:a2:84:f1:0d:9a:c0:9d:
1d:31:14:e5:47:93:c6:4d:db:07:88:4e:3a:9f:da:7a:1d:c0:
3a:eb:7a:bf:10:be:18:b9:90:b4:e3:a1:64:12:c8:eb:87:85:
1d:80:c1:2a:f1:26:03:bd:94:53:45:d6:24:26:70:d5:89:79:
a3:74:a4:0d:eb:f8:e0:65:2d:e1:45:c5:bc:13:31:dc:d6:c6:
e2:07:38:14:34:9b:e4:5e:88:87:ba:ed:f2:84:f1:d1:f4:9d:
91:cf:f3:65:7b:22:ff:2e:bf:7c:10:af:92:40:a0:59:58:35:
7b:ac:7b:80:dc:d6:71:7e:04:2b:78:65:0a:96:07:70:a4:0e:
50:95:4e:ca:b3:fa:b0:0c:a3:4f:fa:08:9a:25:bd:81:7c:75:
00:9f:b4:61:f6:55:9a:87:c8:e5:c0:09:ff:95:8f:7c:e9:3d:
29:20:aa:9f:b8:9c:3b:ec:71:30:3c:27:b3:64:d8:c3:8c:98:
93:4a:f0:ec
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvORjbR7F4Mt2phBBvs41CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjZmMzViYWM2MWEwYWJmNzFkMThkNmIxMDYzZDVjOTMz
YTI0YWIwHhcNMjMwMTAxMjEyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGVjMTFhZGMzNDEwYjNiODk4ZTllY2MzODAyY2U4OTM5ZTAwNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFHlCaEAmp9r5INZleQdWEHOubZa
jz3qq8WO8e/N7RzShvOMheyC6Q7BLdzbDsaEpF2n1Jge7tLokwE/4oHlZPCF0gvw
KUEGCIlzs7d4ykak5LbAAEURA8DYAyi1JhMlC73dSOSizsSyT30Hwcze1IqfzXat
gL5mOGOy5HSQm0N1FO7s70wwjhuO6MAp8M+8lTZH2o14kTHu//Dyx1MaSPhy41jA
p3Pd9J0EPH0vQuIea6m/6EBBcBWGCcZ2WE5cm9499YWLsdiW1KgSsjJvaQ2vvH6z
fvdqHYXiPanFzdJ3CgRC4RRalsaTkzi2Qr5agZ+dmlElshRjYlTxLQIsCwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGTsEa3DQQs7iY6ezDgCzok54AWlMB8GA1UdIwQY
MBaAFKNm81usYaCr9x0Y1rEGPVyTOiSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJielc2eGhvS3YzSFJqV3NRWTlYSk02SktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80Y2Y4MTQtNzliNS00Nzg2LWFjNTEt
MzE5MDc5NWU4NjNiLzEvWk93UnJjTkJDenVKanA3TU9BTE9pVG5nQmFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80Y2Y4MTQtNzliNS00Nzg2LWFjNTEtMzE5MDc5NWU4NjNi
LzEvbzJielc2eGhvS3YzSFJqV3NRWTlYSk02SktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUekMA0E
AgACMAcDBQMqBTTAMA0GCSqGSIb3DQEBCwUAA4IBAQBn1ZylWaOMzcXAbrlwrzuu
fvK3m+GYiYH1cWj34HUi9dfXXy0hkDDDOU2lSeZmsFvI0hgcldU/2jXvujFwUcSA
uaKE8Q2awJ0dMRTlR5PGTdsHiE46n9p6HcA663q/EL4YuZC046FkEsjrh4UdgMEq
8SYDvZRTRdYkJnDViXmjdKQN6/jgZS3hRcW8EzHc1sbiBzgUNJvkXoiHuu3yhPHR
9J2Rz/NleyL/Lr98EK+SQKBZWDV7rHuA3NZxfgQreGUKlgdwpA5QlU7Ks/qwDKNP
+giaJb2BfHUAn7Rh9lWah8jlwAn/lY986T0pIKqfuJw77HEwPCezZNjDjJiTSvDs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:48 2024 by rpki-client on console-fra.rpki-client.org