Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/zv98hQIN-fKy_bouNomLsA8Xhw8.roa
File: zv98hQIN-fKy_bouNomLsA8Xhw8.roa (raw, json)
Hash identifier: s464Rvm/RAIMpBfn6tVzY20Ox6QUKBmvp4vU5eyet6c=
Subject key identifier: CE:FF:7C:85:02:0D:F9:F2:B2:FD:BA:2E:36:89:8B:B0:0F:17:87:0F
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018D0D8D67750B8C45603CCA53AB0A52118C
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/zv98hQIN-fKy_bouNomLsA8Xhw8.roa
Signing time: Mon 15 Jan 2024 14:36:27 +0000
ROA not before: Mon 15 Jan 2024 14:36:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 45.148.244.0/24 maxlen: 24
45.93.9.0/24 maxlen: 24
93.185.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 09:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:8d:67:75:0b:8c:45:60:3c:ca:53:ab:0a:52:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 15 14:36:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceff7c85020df9f2b2fdba2e36898bb00f17870f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:c7:8f:79:4f:52:01:03:9f:44:9d:d8:df:
d1:30:d6:7a:55:db:2b:c7:73:a5:5c:f7:71:c4:46:
61:dd:f9:54:92:34:c8:14:d5:2b:92:99:6f:17:92:
f4:2c:8d:23:5f:31:d3:ad:cc:08:cf:a1:4a:79:0a:
2d:24:10:02:c9:ee:08:2b:69:e6:f0:6a:47:55:2b:
88:a3:aa:33:6f:54:c6:9a:91:a1:4b:e3:5a:d1:f2:
96:9d:57:75:c4:13:4e:c9:24:0c:47:fa:4e:4f:3f:
d4:58:bb:3f:24:1c:d5:fc:ad:08:b3:43:74:39:dd:
4f:df:ac:42:5a:d5:c5:cb:2a:73:f6:47:9a:ff:37:
5e:4b:5a:02:fa:d6:9c:3d:3e:26:20:71:e4:58:05:
ce:0b:f4:c6:10:18:7e:df:64:e2:3f:7a:75:c2:41:
50:c2:92:ee:2b:fb:d9:89:75:ab:af:26:bc:3a:01:
2e:ed:dd:00:51:d0:f0:68:2e:ad:33:25:cc:a1:0d:
01:ac:71:ab:15:3f:46:64:a6:ae:6d:37:8d:d3:9a:
0e:b3:9d:9b:58:bf:73:88:03:19:3c:18:45:9b:10:
8a:5c:c7:49:ea:4f:99:b2:dc:3e:aa:1b:76:9d:4a:
65:4c:f6:5b:8f:8f:80:06:48:dd:04:4c:6e:4d:2b:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FF:7C:85:02:0D:F9:F2:B2:FD:BA:2E:36:89:8B:B0:0F:17:87:0F
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/zv98hQIN-fKy_bouNomLsA8Xhw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.9.0/24
45.148.244.0/24
93.185.167.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b1:27:ea:e9:59:47:bb:ba:5e:cc:f5:3a:23:83:b3:f1:b1:
de:1d:52:aa:61:bf:94:0d:f0:03:80:87:ae:e4:39:da:6c:30:
df:a5:ef:91:7e:24:98:8e:bc:49:29:19:d2:0d:ae:a2:be:9c:
c4:c9:e3:69:16:15:8d:6d:65:a9:63:cc:69:67:8f:f4:a1:02:
0f:3f:45:dc:71:77:9a:88:1c:fa:36:7f:46:16:50:d3:a8:ea:
21:68:d0:5b:d8:0b:39:24:d8:8c:0b:59:8d:ff:fe:89:e1:24:
f5:91:b1:f3:ea:72:27:90:f1:42:7e:24:66:ea:a7:ee:bf:1c:
6a:09:be:19:32:dd:7d:6a:68:10:a8:75:27:83:24:3d:59:e8:
bb:dd:e7:dd:60:0c:53:9c:83:74:39:36:3c:ad:ec:8b:02:5f:
75:d9:a0:f7:54:b3:bb:64:10:d0:44:5d:5d:28:77:b1:90:2f:
8d:a1:a2:45:74:49:24:91:88:58:58:5e:ed:50:d8:a1:7a:56:
96:0f:40:7f:b4:cf:39:17:5f:04:1f:f2:40:5c:43:83:1d:8d:
57:19:84:0e:98:fc:98:6c:d2:29:73:08:56:89:66:6a:7d:3e:
4b:46:af:86:17:19:22:08:0a:55:d9:f0:cd:db:68:ef:3b:1f:
9e:f2:65:20
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY0NjWd1C4xFYDzKU6sKUhGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjQwMTE1MTQzNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWZmN2M4NTAyMGRmOWYyYjJmZGJhMmUzNjg5OGJiMDBmMTc4NzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCvHj3lPUgEDn0Sd2N/RMNZ6Vdsr
x3OlXPdxxEZh3flUkjTIFNUrkplvF5L0LI0jXzHTrcwIz6FKeQotJBACye4IK2nm
8GpHVSuIo6ozb1TGmpGhS+Na0fKWnVd1xBNOySQMR/pOTz/UWLs/JBzV/K0Is0N0
Od1P36xCWtXFyypz9kea/zdeS1oC+tacPT4mIHHkWAXOC/TGEBh+32TiP3p1wkFQ
wpLuK/vZiXWrrya8OgEu7d0AUdDwaC6tMyXMoQ0BrHGrFT9GZKaubTeN05oOs52b
WL9ziAMZPBhFmxCKXMdJ6k+Zstw+qht2nUplTPZbj4+ABkjdBExuTSt6AwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM7/fIUCDfnysv26LjaJi7APF4cPMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvenY5OGhRSU4tZkt5X2JvdU5vbUxzQThYaHc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALV0JAwQA
LZT0AwQAXbmnMA0GCSqGSIb3DQEBCwUAA4IBAQBvsSfq6VlHu7pezPU6I4Oz8bHe
HVKqYb+UDfADgIeu5DnabDDfpe+RfiSYjrxJKRnSDa6ivpzEyeNpFhWNbWWpY8xp
Z4/0oQIPP0XccXeaiBz6Nn9GFlDTqOohaNBb2As5JNiMC1mN//6J4ST1kbHz6nIn
kPFCfiRm6qfuvxxqCb4ZMt19amgQqHUngyQ9Wei73efdYAxTnIN0OTY8reyLAl91
2aD3VLO7ZBDQRF1dKHexkC+NoaJFdEkkkYhYWF7tUNihelaWD0B/tM85F18EH/JA
XEODHY1XGYQOmPyYbNIpcwhWiWZqfT5LRq+GFxkiCApV2fDN22jvOx+e8mUg
-----END CERTIFICATE-----
Generated at Mon Jan 29 13:56:22 2024 by rpki-client on console-ams.rpki-client.org