Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/ZoPoSmsLkMksW5bTQRg_WZp4-RM.roa
File: ZoPoSmsLkMksW5bTQRg_WZp4-RM.roa (raw, json)
Hash identifier: IlEh5CYjNLJP9W6W/RrpsJ/dvWcxKLrD0GNtz2qdI5U=
Subject key identifier: 66:83:E8:4A:6B:0B:90:C9:2C:5B:96:D3:41:18:3F:59:9A:78:F9:13
Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial: 01856E5D3C164D7967B4681C09D404165359
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/ZoPoSmsLkMksW5bTQRg_WZp4-RM.roa
Signing time: Sun 01 Jan 2023 17:24:42 +0000
ROA not before: Sun 01 Jan 2023 17:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29691
IP address blocks: 45.9.160.0/24 maxlen: 24
45.9.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:3c:16:4d:79:67:b4:68:1c:09:d4:04:16:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Validity
Not Before: Jan 1 17:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6683e84a6b0b90c92c5b96d341183f599a78f913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:cf:30:bc:1d:0a:25:af:68:4a:71:e6:dc:
c6:d8:34:cc:e4:eb:14:e2:f3:16:a5:3c:4d:c8:d1:
ee:b1:32:cc:57:1c:a2:2c:f6:6d:0d:9c:9a:f4:3c:
d4:70:cb:2d:19:74:4c:ee:7e:ea:58:b1:13:19:f8:
ae:e4:fb:93:01:05:78:71:c7:d2:65:e0:f2:7c:71:
ef:a1:59:0a:a6:cd:fd:8c:0b:10:a8:70:0a:0c:78:
0a:aa:7e:40:f8:fb:a8:d1:53:86:34:1e:1d:43:96:
8f:e2:5a:07:23:a0:ba:dd:24:be:fb:a6:54:30:b8:
62:5c:d2:85:57:11:40:bb:db:f7:f2:f3:6b:e8:04:
15:76:b9:df:f0:10:17:50:ff:0b:ac:37:2a:45:50:
57:3c:79:52:76:ea:86:d2:71:6f:c1:bc:23:b2:ad:
ab:74:c9:57:ab:5f:6f:79:00:a1:ea:ce:a9:32:00:
2e:ac:b0:8a:37:ef:4d:48:45:c8:86:01:f2:6a:6a:
b6:89:7b:85:43:a7:50:d1:4f:9d:50:ab:10:c7:e1:
81:fc:c4:8b:84:72:62:5e:16:5a:a6:46:de:e7:48:
a7:d4:bb:61:e5:c2:8d:eb:1a:d6:29:a3:66:19:22:
c1:de:72:20:74:28:b7:20:4a:ab:1b:6f:c1:1e:18:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:83:E8:4A:6B:0B:90:C9:2C:5B:96:D3:41:18:3F:59:9A:78:F9:13
X509v3 Authority Key Identifier:
keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/ZoPoSmsLkMksW5bTQRg_WZp4-RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.160.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:04:9b:3a:d9:ab:87:96:f1:bb:50:06:7f:00:e4:ee:fa:60:
d6:c5:ac:33:ab:b3:5a:c4:2b:13:95:ba:77:05:b7:f7:83:e5:
a7:86:5d:35:e4:52:74:e9:a8:12:ee:e6:e0:9d:49:e0:19:9b:
4f:8a:0c:c9:7e:c0:94:37:96:44:c5:6e:ab:26:56:d8:d7:92:
c4:af:2b:8e:cd:b6:4c:6e:69:4a:a7:84:c1:8b:04:63:d6:a0:
c0:8e:fa:1c:b2:a9:f5:6d:93:91:69:fa:e8:c3:fb:68:ea:df:
97:33:af:6b:ff:aa:19:49:15:08:d0:a8:7c:be:70:97:f4:11:
d7:a5:13:11:b3:0d:7c:74:1a:e1:ea:79:1f:0a:c4:86:c6:c9:
ec:10:d7:a6:0f:47:c7:c8:50:95:2c:23:f2:8a:0d:41:0f:32:
bf:2f:c8:6d:cc:65:2d:a0:43:34:2a:44:3f:3d:e6:fa:ae:10:
b4:40:5e:1c:50:75:43:83:bf:78:20:5d:f8:ea:fc:ec:d6:58:
1e:7a:88:e5:64:33:b4:20:52:35:4f:98:96:68:1c:35:32:e3:
63:73:5d:08:cd:70:57:e3:a5:70:07:50:4f:5a:c5:a3:0a:03:
92:a7:f8:99:e1:ff:fc:5e:a3:89:90:ef:9e:5f:51:51:f6:44:
9b:3a:cd:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuXTwWTXlntGgcCdQEFlNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGFjMThhN2FkNTAxYmE3ZWExMzU2NzkwOWYxN2U0Zjcz
Mjc0MTMwHhcNMjMwMTAxMTcyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjgzZTg0YTZiMGI5MGM5MmM1Yjk2ZDM0MTE4M2Y1OTlhNzhmOTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPrPMLwdCiWvaEpx5tzG2DTM5OsU
4vMWpTxNyNHusTLMVxyiLPZtDZya9DzUcMstGXRM7n7qWLETGfiu5PuTAQV4ccfS
ZeDyfHHvoVkKps39jAsQqHAKDHgKqn5A+Puo0VOGNB4dQ5aP4loHI6C63SS++6ZU
MLhiXNKFVxFAu9v38vNr6AQVdrnf8BAXUP8LrDcqRVBXPHlSduqG0nFvwbwjsq2r
dMlXq19veQCh6s6pMgAurLCKN+9NSEXIhgHyamq2iXuFQ6dQ0U+dUKsQx+GB/MSL
hHJiXhZapkbe50in1Lth5cKN6xrWKaNmGSLB3nIgdCi3IEqrG2/BHhiDiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGaD6EprC5DJLFuW00EYP1maePkTMB8GA1UdIwQY
MBaAFIvawYp61QG6fqE1Z5CfF+T3MnQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzkt
YzNjYzVkZTFlY2U5LzEvWm9Qb1Ntc0xrTWtzVzViVFFSZ19XWnA0LVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzktYzNjYzVkZTFlY2U5
LzEvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQmgMA0G
CSqGSIb3DQEBCwUAA4IBAQBeBJs62auHlvG7UAZ/AOTu+mDWxawzq7NaxCsTlbp3
Bbf3g+Wnhl015FJ06agS7ubgnUngGZtPigzJfsCUN5ZExW6rJlbY15LEryuOzbZM
bmlKp4TBiwRj1qDAjvocsqn1bZORafrow/to6t+XM69r/6oZSRUI0Kh8vnCX9BHX
pRMRsw18dBrh6nkfCsSGxsnsENemD0fHyFCVLCPyig1BDzK/L8htzGUtoEM0KkQ/
Peb6rhC0QF4cUHVDg794IF346vzs1lgeeojlZDO0IFI1T5iWaBw1MuNjc10IzXBX
46VwB1BPWsWjCgOSp/iZ4f/8XqOJkO+eX1FR9kSbOs1a
-----END CERTIFICATE-----
Generated at Mon Jul 31 07:26:59 2023 by rpki-client on console-fra.rpki-client.org