Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/zG7tOKk90ia9Qi6ZM_TvaCqtE44.roa
File: zG7tOKk90ia9Qi6ZM_TvaCqtE44.roa (raw, json)
Hash identifier: I3QOMVr/+tbVaBcfcIgwP/P1w4sOlSHfiFwnCsMkKh4=
Subject key identifier: CC:6E:ED:38:A9:3D:D2:26:BD:42:2E:99:33:F4:EF:68:2A:AD:13:8E
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 01856B0A33B3EC9FB3D052F68B933831C88A
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/zG7tOKk90ia9Qi6ZM_TvaCqtE44.roa
Signing time: Sun 01 Jan 2023 01:55:08 +0000
ROA not before: Sun 01 Jan 2023 01:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 193.202.84.0/22 maxlen: 22
45.145.128.0/23 maxlen: 23
193.202.8.0/22 maxlen: 22
193.202.12.0/22 maxlen: 22
193.187.92.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:0a:33:b3:ec:9f:b3:d0:52:f6:8b:93:38:31:c8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 1 01:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc6eed38a93dd226bd422e9933f4ef682aad138e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:45:33:cf:c4:0d:ce:d4:5b:97:62:f0:57:60:
15:ae:6f:ff:c5:9f:69:bf:84:66:78:88:95:14:a0:
2d:5f:9e:d7:76:b8:62:37:19:3d:92:8c:cb:cd:15:
6f:72:4d:f4:39:92:e8:7c:ae:ef:56:a5:be:49:01:
2b:d7:6f:2b:a2:a0:7b:e5:16:16:95:a4:87:05:08:
0a:f0:f5:26:3d:82:3a:08:0d:10:d8:a8:cc:cb:75:
4b:72:6b:4c:c0:c5:1b:ad:a6:0e:27:02:33:f1:cc:
7b:33:00:c5:91:75:5e:ed:49:42:39:24:1f:f2:52:
8f:08:fd:dd:ab:36:3e:88:ad:12:23:7c:79:6f:88:
09:34:2d:8d:f0:82:25:13:47:f8:43:fc:69:fa:1e:
aa:ed:ed:84:cf:83:e5:b2:aa:b8:21:ad:42:e5:3f:
9a:17:e9:60:47:eb:35:03:96:cd:8a:80:f8:8b:fa:
4f:41:e2:0c:a5:6f:24:f8:a1:ad:83:bf:11:d6:d3:
d4:75:56:a7:06:62:19:59:18:fb:1d:94:60:da:c2:
e4:70:c1:11:fc:e6:b2:c8:fa:db:8a:39:01:b3:aa:
5c:3c:3f:fd:a0:92:5c:a2:31:f5:06:22:69:54:32:
1e:62:47:9d:1c:96:61:c2:e1:56:b3:22:91:78:43:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6E:ED:38:A9:3D:D2:26:BD:42:2E:99:33:F4:EF:68:2A:AD:13:8E
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/zG7tOKk90ia9Qi6ZM_TvaCqtE44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.128.0/23
193.187.92.0/22
193.202.8.0/21
193.202.84.0/22
Signature Algorithm: sha256WithRSAEncryption
25:46:37:ed:40:f6:a4:33:d7:7d:04:14:9c:c0:d4:e7:1b:10:
57:55:0a:f2:a3:49:d9:9e:ca:f4:c0:49:53:1d:a3:52:7f:22:
15:b0:12:2e:d8:ad:8c:5f:c2:d3:78:b2:da:0d:02:90:1f:3d:
35:f8:61:38:a6:d4:ca:bd:b3:b0:f9:12:1f:42:01:6d:7a:e4:
de:8f:6e:9a:5a:20:cc:76:9a:8e:0a:5a:4a:0a:72:de:36:8b:
7d:2c:6e:d5:69:4a:84:09:d9:85:ba:c2:f8:cc:d2:a7:32:c1:
39:3f:00:68:b0:f3:6e:bd:9d:7c:42:6d:ac:8b:27:d9:08:f4:
db:35:27:a6:6a:0a:92:af:2f:e2:c1:65:7a:6c:81:08:89:62:
27:1c:c3:90:82:bb:5c:b3:99:2d:2a:fd:29:b5:00:da:1b:7d:
c2:b4:0b:6c:cd:5c:2a:50:50:ce:93:e7:e8:b5:7e:66:17:ab:
ba:4a:aa:56:6e:9e:9c:75:8a:60:25:5e:5d:4a:1c:42:e4:28:
dd:c1:57:0e:de:04:7f:b8:27:51:ec:21:35:c4:1d:5e:8d:49:
69:bf:2b:4e:27:d2:57:32:37:c1:c3:72:7f:c3:f1:2d:b4:0a:
3f:f6:f8:70:6b:01:e4:1a:a5:25:a6:88:8a:7c:ea:1e:5f:76:
be:8e:27:9f
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVrCjOz7J+z0FL2i5M4MciKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjMwMTAxMDE1NTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzZlZWQzOGE5M2RkMjI2YmQ0MjJlOTkzM2Y0ZWY2ODJhYWQxMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkUzz8QNztRbl2LwV2AVrm//xZ9p
v4RmeIiVFKAtX57XdrhiNxk9kozLzRVvck30OZLofK7vVqW+SQEr128roqB75RYW
laSHBQgK8PUmPYI6CA0Q2KjMy3VLcmtMwMUbraYOJwIz8cx7MwDFkXVe7UlCOSQf
8lKPCP3dqzY+iK0SI3x5b4gJNC2N8IIlE0f4Q/xp+h6q7e2Ez4Plsqq4Ia1C5T+a
F+lgR+s1A5bNioD4i/pPQeIMpW8k+KGtg78R1tPUdVanBmIZWRj7HZRg2sLkcMER
/OayyPrbijkBs6pcPD/9oJJcojH1BiJpVDIeYkedHJZhwuFWsyKReEOH6QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMxu7TipPdImvUIumTP072gqrROOMB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xL3pHN3RPS2s5MGlhOVFpNlpNX1R2YUNxdEU0NC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2
Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAEtkYAD
BALBu1wDBAPByggDBALBylQwDQYJKoZIhvcNAQELBQADggEBACVGN+1A9qQz130E
FJzA1OcbEFdVCvKjSdmeyvTASVMdo1J/IhWwEi7YrYxfwtN4stoNApAfPTX4YTim
1Mq9s7D5Eh9CAW165N6PbppaIMx2mo4KWkoKct42i30sbtVpSoQJ2YW6wvjM0qcy
wTk/AGiw8269nXxCbayLJ9kI9Ns1J6ZqCpKvL+LBZXpsgQiJYiccw5CCu1yzmS0q
/Sm1ANobfcK0C2zNXCpQUM6T5+i1fmYXq7pKqlZunpx1imAlXl1KHELkKN3BVw7e
BH+4J1HsITXEHV6NSWm/K04n0lcyN8HDcn/D8S20Cj/2+HBrAeQapSWmiIp86h5f
dr6OJ58=
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:34 2024 by rpki-client on console-fra.rpki-client.org