Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/v1zErNzMTFHY9TGFkBsQ4VFGm0o.roa
File: v1zErNzMTFHY9TGFkBsQ4VFGm0o.roa (raw, json)
Hash identifier: pABZSysRMns68FXrVsiY7ooNP3HcSj1AOEeW+B8SLOE=
Subject key identifier: BF:5C:C4:AC:DC:CC:4C:51:D8:F5:31:85:90:1B:10:E1:51:46:9B:4A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018877A9BB8AD47745084818F19BB9230E5E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/v1zErNzMTFHY9TGFkBsQ4VFGm0o.roa
Signing time: Thu 01 Jun 2023 15:53:12 +0000
ROA not before: Thu 01 Jun 2023 15:53:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 269782
IP address blocks: 46.29.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:a9:bb:8a:d4:77:45:08:48:18:f1:9b:b9:23:0e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 1 15:53:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf5cc4acdccc4c51d8f53185901b10e151469b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:7a:83:1c:7e:55:1c:d2:ab:03:c0:bf:e7:
cd:63:08:27:28:15:39:fa:02:72:da:05:ef:e1:d8:
18:a6:61:c0:e0:9e:31:ce:87:b5:a7:9b:ce:6f:1a:
fc:65:1d:e7:f6:72:77:48:2a:bd:14:56:59:6f:73:
1f:86:ba:5b:fb:4e:7d:aa:6c:7a:45:55:5e:62:04:
32:ca:69:a2:6c:8b:58:b8:63:d2:30:cd:7d:da:be:
61:6a:f4:90:36:eb:bb:b9:a3:0e:11:a8:ee:11:d7:
23:f5:d1:97:78:29:e4:67:dd:c8:89:16:b5:5a:c2:
f2:bc:ab:e7:5e:f9:d2:74:0c:51:0a:bd:b8:0b:7f:
4d:cd:ce:2a:1c:e4:54:f5:1c:3d:9f:3f:33:b2:c1:
b9:ed:c9:bf:ca:25:fb:ed:87:df:23:ea:67:93:86:
26:7b:7c:b4:13:6b:85:0a:e6:8c:4e:9e:c6:08:4d:
cb:68:20:25:36:9a:50:12:65:29:71:bd:8c:27:e1:
fb:2a:93:32:a4:1c:0c:58:35:8e:4a:7f:17:e1:50:
24:c4:6d:18:3c:0a:65:4c:ba:e9:b7:92:7b:88:d1:
93:b6:9c:ea:68:3d:e5:1b:d3:5f:b5:c2:1e:73:50:
65:79:27:56:a4:9e:d5:b0:36:a6:aa:29:9b:c5:74:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:C4:AC:DC:CC:4C:51:D8:F5:31:85:90:1B:10:E1:51:46:9B:4A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/v1zErNzMTFHY9TGFkBsQ4VFGm0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.29.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:1f:5a:c3:3d:b7:72:17:47:d0:ad:cc:fe:c6:cf:1c:ac:41:
ca:2b:9a:e2:a5:b1:87:19:af:2a:06:06:8b:8c:26:7c:75:a2:
d9:64:8d:68:fa:82:d2:ec:6c:3b:89:1e:92:6f:d1:51:97:d0:
19:07:0e:be:ce:26:d8:0f:3c:34:3a:79:07:44:27:69:09:84:
07:39:fa:07:de:12:1b:25:4c:dc:1f:90:10:c2:5e:21:3c:92:
88:af:7e:26:58:0f:ce:69:67:60:0b:0c:8e:b5:3d:2a:9a:f0:
da:95:57:6d:6f:c9:0a:f4:94:fc:20:fe:35:c1:f9:fc:23:34:
7f:e9:b3:20:cc:d0:c9:23:d3:77:39:97:39:79:a5:b2:e0:77:
85:04:03:2a:74:9b:83:5e:09:9a:42:ec:24:b6:03:14:02:1b:
05:9a:68:20:fb:fd:de:24:70:9f:58:c9:6c:68:d1:48:e5:1f:
9e:13:d0:a9:91:dd:e8:8c:b4:7b:6f:cf:b8:a9:a9:dc:9b:f6:
00:ff:ca:45:84:1d:07:9c:e7:f7:e5:6b:89:3b:f8:75:3a:d9:
56:22:32:fe:d6:9c:d9:98:8a:85:eb:4a:25:be:60:e6:2b:cb:
1a:92:1d:15:54:82:0b:c7:03:88:09:d1:bd:f3:3f:51:dd:55:
2d:ca:e3:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYh3qbuK1HdFCEgY8Zu5Iw5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwNjAxMTU1MzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjVjYzRhY2RjY2M0YzUxZDhmNTMxODU5MDFiMTBlMTUxNDY5YjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwJ6gxx+VRzSqwPAv+fNYwgnKBU5
+gJy2gXv4dgYpmHA4J4xzoe1p5vObxr8ZR3n9nJ3SCq9FFZZb3Mfhrpb+059qmx6
RVVeYgQyymmibItYuGPSMM192r5havSQNuu7uaMOEajuEdcj9dGXeCnkZ93IiRa1
WsLyvKvnXvnSdAxRCr24C39Nzc4qHORU9Rw9nz8zssG57cm/yiX77YffI+pnk4Ym
e3y0E2uFCuaMTp7GCE3LaCAlNppQEmUpcb2MJ+H7KpMypBwMWDWOSn8X4VAkxG0Y
PAplTLrpt5J7iNGTtpzqaD3lG9NftcIec1BleSdWpJ7VsDamqimbxXR4hQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL9cxKzczExR2PUxhZAbEOFRRptKMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvdjF6RXJOek1URkhZOVRHRmtCc1E0VkZHbTBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh0dMA0G
CSqGSIb3DQEBCwUAA4IBAQDJH1rDPbdyF0fQrcz+xs8crEHKK5ripbGHGa8qBgaL
jCZ8daLZZI1o+oLS7Gw7iR6Sb9FRl9AZBw6+zibYDzw0OnkHRCdpCYQHOfoH3hIb
JUzcH5AQwl4hPJKIr34mWA/OaWdgCwyOtT0qmvDalVdtb8kK9JT8IP41wfn8IzR/
6bMgzNDJI9N3OZc5eaWy4HeFBAMqdJuDXgmaQuwktgMUAhsFmmgg+/3eJHCfWMls
aNFI5R+eE9Cpkd3ojLR7b8+4qancm/YA/8pFhB0HnOf35WuJO/h1OtlWIjL+1pzZ
mIqF60olvmDmK8sakh0VVIILxwOICdG98z9R3VUtyuNJ
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:09 2024 by rpki-client on console-ams.rpki-client.org