Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/zkZSxPCmTjUQ-Avo7MHk4tKz0tE.roa
File: zkZSxPCmTjUQ-Avo7MHk4tKz0tE.roa (raw, json)
Hash identifier: vOIdPdrkOlt0P5eGdok7b/R7iZYUZ20VqtnmoJ08ZwI=
Subject key identifier: CE:46:52:C4:F0:A6:4E:35:10:F8:0B:E8:EC:C1:E4:E2:D2:B3:D2:D1
Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial: 018BD823B8BC4904A3FD8DA3002C3C5F5C82
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/zkZSxPCmTjUQ-Avo7MHk4tKz0tE.roa
Signing time: Thu 16 Nov 2023 12:38:21 +0000
ROA not before: Thu 16 Nov 2023 12:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21127
IP address blocks: 91.105.128.0/18 maxlen: 32
46.50.128.0/17 maxlen: 32
37.49.192.0/19 maxlen: 32
109.171.0.0/17 maxlen: 32
37.205.48.0/21 maxlen: 32
46.241.0.0/17 maxlen: 32
188.44.96.0/19 maxlen: 32
37.205.64.0/19 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:23:b8:bc:49:04:a3:fd:8d:a3:00:2c:3c:5f:5c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Validity
Not Before: Nov 16 12:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce4652c4f0a64e3510f80be8ecc1e4e2d2b3d2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:11:84:a3:43:ac:a6:39:ae:0b:fd:f9:4d:ab:
1f:69:96:6f:8a:3a:27:c5:7f:d3:55:e3:08:57:02:
f4:0e:7b:3e:da:e5:53:f5:fb:58:ec:d9:84:90:c8:
92:65:aa:5b:7d:65:d1:56:b0:df:27:c5:7f:ad:70:
46:57:db:79:60:a8:8b:db:be:5e:03:62:23:c4:52:
a7:da:24:c4:c2:10:e6:43:22:9f:9c:31:da:3c:e2:
07:04:6e:e7:47:ec:ae:9c:e4:6f:10:b5:a6:48:e0:
0e:40:e9:8a:09:d8:fc:91:13:5c:3d:ed:60:2d:ca:
0c:a1:7c:05:8b:cd:3c:9f:4a:db:eb:85:dc:fd:19:
8d:47:4d:19:a3:54:3a:fc:e6:2a:4d:32:f1:3d:33:
51:8d:37:5e:14:37:89:47:87:31:3c:27:7c:9f:38:
f5:41:94:91:a8:3a:ef:ab:b7:30:a2:13:69:02:e6:
84:12:c2:55:62:d3:01:6b:03:54:d7:d9:8d:5a:e6:
ae:0c:95:0f:b8:5b:bc:ef:f4:20:28:1c:2f:ed:aa:
46:ce:d2:15:93:32:8c:e8:76:22:1a:4b:ec:18:1f:
4f:4f:79:d6:75:b7:d7:c9:0d:fb:f1:f7:fc:dc:fa:
a7:3f:4c:5f:95:17:f1:b5:b8:f3:a4:10:be:06:6f:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:46:52:C4:F0:A6:4E:35:10:F8:0B:E8:EC:C1:E4:E2:D2:B3:D2:D1
X509v3 Authority Key Identifier:
keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/zkZSxPCmTjUQ-Avo7MHk4tKz0tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.192.0/19
37.205.48.0/21
37.205.64.0/19
46.50.128.0/17
46.241.0.0/17
91.105.128.0/18
109.171.0.0/17
188.44.96.0/19
Signature Algorithm: sha256WithRSAEncryption
49:70:c7:d1:e6:3e:8c:72:95:f3:ab:b4:36:03:d8:4b:7c:23:
47:ba:8f:ef:1f:e7:1a:88:18:92:a4:4e:a4:b3:c6:4a:d7:65:
87:c8:bc:86:de:04:cb:10:9c:1c:fa:4d:fe:6a:40:71:c4:28:
8d:96:ae:38:31:62:28:9a:92:fe:ef:3f:11:6b:8c:50:72:bc:
24:0b:ff:7b:be:71:f0:7d:b5:7c:7d:4b:b5:70:6c:08:52:ac:
7c:81:a1:72:5e:ef:3d:b2:97:83:2d:c4:89:2c:d0:66:f4:66:
03:15:70:24:dc:a9:fe:b2:7d:2a:ff:3e:14:0a:9e:60:65:bf:
eb:17:53:48:2b:6b:e8:c4:b9:97:6c:f2:89:13:93:57:10:aa:
68:57:d1:bf:38:35:54:fa:0d:26:4f:4c:0a:98:70:a3:fa:ed:
86:77:37:77:f9:ec:61:eb:8a:93:51:b2:f5:ad:9d:da:d9:46:
db:0d:89:e2:5b:d8:e5:f3:06:d0:f0:f2:ca:8b:e7:d0:bb:05:
5c:27:18:bf:34:32:2d:0c:b3:3f:af:03:57:32:c9:9e:5e:0d:
e0:fc:fb:fb:41:78:87:2d:ab:9e:36:39:33:af:f5:c8:2a:c6:
84:fb:f7:4d:7b:4c:c1:ef:df:e3:57:4d:68:fe:db:92:41:47:
eb:c3:56:42
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYvYI7i8SQSj/Y2jACw8X1yCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNGE3MTdmOGZhMWJiMDM1OTI3NDIyM2FjZGFlMjJiNzBl
NjZiZWMwHhcNMjMxMTE2MTIzODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTQ2NTJjNGYwYTY0ZTM1MTBmODBiZThlY2MxZTRlMmQyYjNkMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxGEo0OspjmuC/35TasfaZZvijon
xX/TVeMIVwL0Dns+2uVT9ftY7NmEkMiSZapbfWXRVrDfJ8V/rXBGV9t5YKiL275e
A2IjxFKn2iTEwhDmQyKfnDHaPOIHBG7nR+yunORvELWmSOAOQOmKCdj8kRNcPe1g
LcoMoXwFi808n0rb64Xc/RmNR00Zo1Q6/OYqTTLxPTNRjTdeFDeJR4cxPCd8nzj1
QZSRqDrvq7cwohNpAuaEEsJVYtMBawNU19mNWuauDJUPuFu87/QgKBwv7apGztIV
kzKM6HYiGkvsGB9PT3nWdbfXyQ378ff83PqnP0xflRfxtbjzpBC+Bm/3sQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFM5GUsTwpk41EPgL6OzB5OLSs9LRMB8GA1UdIwQY
MBaAFM9KcX+PobsDWSdCI6za4itw5mvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTkt
NmFhYTZiMDIxNjBkLzEvemtaU3hQQ21UalVRLUF2bzdNSGs0dEt6MHRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTktNmFhYTZiMDIxNjBk
LzEvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQFJTHAAwQD
Jc0wAwQFJc1AAwQHLjKAAwQHLvEAAwQGW2mAAwQHbasAAwQFvCxgMA0GCSqGSIb3
DQEBCwUAA4IBAQBJcMfR5j6McpXzq7Q2A9hLfCNHuo/vH+caiBiSpE6ks8ZK12WH
yLyG3gTLEJwc+k3+akBxxCiNlq44MWIompL+7z8Ra4xQcrwkC/97vnHwfbV8fUu1
cGwIUqx8gaFyXu89speDLcSJLNBm9GYDFXAk3Kn+sn0q/z4UCp5gZb/rF1NIK2vo
xLmXbPKJE5NXEKpoV9G/ODVU+g0mT0wKmHCj+u2Gdzd3+exh64qTUbL1rZ3a2Ubb
DYniW9jl8wbQ8PLKi+fQuwVcJxi/NDItDLM/rwNXMsmeXg3g/Pv7QXiHLaueNjkz
r/XIKsaE+/dNe0zB79/jV01o/tuSQUfrw1ZC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:27 2024 by rpki-client on console-fra.rpki-client.org