Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/zpLabUlvO-oHGJqrRUI9Pn2aDgI.roa
File: zpLabUlvO-oHGJqrRUI9Pn2aDgI.roa (raw, json)
Hash identifier: rjtcwDmBmwECqdhGAGLdjszksvaqiUKZtqST5MlxQxg=
Subject key identifier: CE:92:DA:6D:49:6F:3B:EA:07:18:9A:AB:45:42:3D:3E:7D:9A:0E:02
Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial: 01856D41B00344382A2D2F2928E5ED4C1507
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/zpLabUlvO-oHGJqrRUI9Pn2aDgI.roa
Signing time: Sun 01 Jan 2023 12:14:59 +0000
ROA not before: Sun 01 Jan 2023 12:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39392
IP address blocks: 46.234.96.0/19 maxlen: 19
95.168.192.0/19 maxlen: 19
46.234.121.0/24 maxlen: 24
37.235.96.0/20 maxlen: 20
95.168.223.0/24 maxlen: 24
88.86.96.0/19 maxlen: 19
2a01:28::/32 maxlen: 32
2a01:28:eeee::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:b0:03:44:38:2a:2d:2f:29:28:e5:ed:4c:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Validity
Not Before: Jan 1 12:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce92da6d496f3bea07189aab45423d3e7d9a0e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:23:59:75:05:12:96:3d:44:5d:35:67:a8:
8a:e0:1d:d9:81:2f:30:3b:18:4e:da:59:ad:95:90:
a9:48:d6:db:31:76:e2:33:b8:20:f8:86:31:a8:ab:
d6:97:bf:90:11:dc:3d:86:cf:40:01:bb:0d:e3:15:
49:a4:eb:c5:fa:dc:88:86:5b:87:94:f0:08:03:7e:
ae:99:32:8d:30:dc:b2:97:0c:c2:02:fd:b3:5b:e0:
32:c6:ba:81:25:ba:9f:f3:a3:a1:ed:38:2a:ee:ae:
46:f8:f2:f6:37:54:e2:df:a7:1e:b9:4f:3d:df:ef:
50:38:94:15:10:ad:6f:38:8f:07:26:82:44:43:8e:
c2:56:84:eb:a9:bc:66:c5:9a:e2:af:ea:05:1c:b4:
84:13:00:b5:bc:7c:58:61:59:79:75:7b:7e:0e:4b:
b1:70:0f:5e:ab:61:12:4c:b9:98:18:01:86:96:e2:
53:0a:a4:25:3a:4f:b8:df:12:91:98:0d:10:60:98:
5e:5e:59:38:97:43:c0:9b:2e:21:a5:98:3d:a8:95:
a6:a3:7b:57:f4:0a:66:19:2e:f5:6e:49:cc:14:26:
ae:ab:b9:3d:0b:d2:5a:c0:d8:e8:4a:b2:14:2e:8e:
e4:73:cd:d6:2b:a3:dd:df:42:cb:5c:d8:b9:8d:3f:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:92:DA:6D:49:6F:3B:EA:07:18:9A:AB:45:42:3D:3E:7D:9A:0E:02
X509v3 Authority Key Identifier:
keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/zpLabUlvO-oHGJqrRUI9Pn2aDgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.96.0/20
46.234.96.0/19
88.86.96.0/19
95.168.192.0/19
IPv6:
2a01:28::/32
Signature Algorithm: sha256WithRSAEncryption
21:d6:53:85:d0:d0:53:c3:08:20:4a:e7:19:a8:ce:98:76:f2:
ac:fc:70:39:ae:f1:27:75:83:30:74:fa:b6:a9:18:d2:b1:c9:
b5:12:82:b1:7f:c5:6d:44:46:f0:9b:2e:1e:ec:23:a2:12:40:
8d:d2:24:0c:08:3d:83:fd:14:a8:a1:a5:1e:06:5d:43:49:09:
b5:af:b3:e2:75:60:68:c5:eb:e9:6f:f8:3c:23:12:a8:ce:81:
6a:62:f0:89:2b:2a:1e:9b:fd:9e:0d:d6:b7:85:61:c7:31:f8:
02:f4:61:75:f8:b6:f4:2f:ef:ad:3c:45:28:d9:19:32:86:fe:
4b:9d:08:0f:20:8e:7a:b9:fa:21:3c:8b:01:40:c1:46:eb:ba:
d0:03:7f:51:5d:4b:49:59:94:9d:7a:11:c6:05:a4:b3:18:05:
d0:5a:e1:a8:de:8d:75:8d:86:56:e0:20:0e:df:18:d9:51:d8:
77:ed:4d:1a:e6:89:50:f2:30:22:27:d8:2b:84:3b:85:8c:fb:
88:2e:11:be:b3:7f:a4:d4:21:34:15:42:e5:11:ba:fd:90:c3:
ee:a9:bc:22:d2:a5:b7:02:9e:4f:98:be:27:ca:75:66:05:08:
b0:dc:79:34:4e:49:00:f4:09:a7:41:2e:a4:3c:b6:21:50:28:
7c:db:2e:c9
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVtQbADRDgqLS8pKOXtTBUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTRmNGE5YjZiN2ZkODJkZDZmMmZkYmYzOTNhYmVhZGQz
NDdmZDEwHhcNMjMwMTAxMTIxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTkyZGE2ZDQ5NmYzYmVhMDcxODlhYWI0NTQyM2QzZTdkOWEwZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAkjWXUFEpY9RF01Z6iK4B3ZgS8w
OxhO2lmtlZCpSNbbMXbiM7gg+IYxqKvWl7+QEdw9hs9AAbsN4xVJpOvF+tyIhluH
lPAIA36umTKNMNyylwzCAv2zW+AyxrqBJbqf86Oh7Tgq7q5G+PL2N1Ti36ceuU89
3+9QOJQVEK1vOI8HJoJEQ47CVoTrqbxmxZrir+oFHLSEEwC1vHxYYVl5dXt+Dkux
cA9eq2ESTLmYGAGGluJTCqQlOk+43xKRmA0QYJheXlk4l0PAmy4hpZg9qJWmo3tX
9ApmGS71bknMFCauq7k9C9JawNjoSrIULo7kc83WK6Pd30LLXNi5jT9xxQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFM6S2m1JbzvqBxiaq0VCPT59mg4CMB8GA1UdIwQY
MBaAFAWU9Km2t/2C3W8v2/OTq+rdNH/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEt
YjZjYzRkNTcxMTdlLzEvenBMYWJVbHZPLW9IR0pxclJVSTlQbjJhRGdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEtYjZjYzRkNTcxMTdl
LzEvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEJetgAwQF
LupgAwQFWFZgAwQFX6jAMA0EAgACMAcDBQAqAQAoMA0GCSqGSIb3DQEBCwUAA4IB
AQAh1lOF0NBTwwggSucZqM6YdvKs/HA5rvEndYMwdPq2qRjSscm1EoKxf8VtREbw
my4e7COiEkCN0iQMCD2D/RSooaUeBl1DSQm1r7PidWBoxevpb/g8IxKozoFqYvCJ
Kyoem/2eDda3hWHHMfgC9GF1+Lb0L++tPEUo2Rkyhv5LnQgPII56ufohPIsBQMFG
67rQA39RXUtJWZSdehHGBaSzGAXQWuGo3o11jYZW4CAO3xjZUdh37U0a5olQ8jAi
J9grhDuFjPuILhG+s3+k1CE0FULlEbr9kMPuqbwi0qW3Ap5PmL4nynVmBQiw3Hk0
TkkA9AmnQS6kPLYhUCh82y7J
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:31 2024 by rpki-client on console-fra.rpki-client.org