Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zWwXgj2rs8ZE-pCRD860h0OlxZE.roa
File: zWwXgj2rs8ZE-pCRD860h0OlxZE.roa (raw, json)
Hash identifier: B3882dIRDav557j1Vu5iKxv0Ojajr0XRq4LhINFfp6Y=
Subject key identifier: CD:6C:17:82:3D:AB:B3:C6:44:FA:90:91:0F:CE:B4:87:43:A5:C5:91
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01864FCEFF0EF681C23E94A34F9416C953EE
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zWwXgj2rs8ZE-pCRD860h0OlxZE.roa
Signing time: Tue 14 Feb 2023 12:03:31 +0000
ROA not before: Tue 14 Feb 2023 12:03:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 45.137.180.0/22 maxlen: 24
46.249.108.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:ce:ff:0e:f6:81:c2:3e:94:a3:4f:94:16:c9:53:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 14 12:03:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd6c17823dabb3c644fa90910fceb48743a5c591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:4a:6a:33:ff:a8:52:25:da:d2:31:8c:c4:
5f:94:47:2e:07:55:67:30:67:e6:0f:46:ed:2d:2d:
f8:12:24:23:08:46:0c:90:f5:fa:61:30:8b:bd:93:
e3:24:78:60:ca:32:0e:c8:04:f8:fb:f9:1f:74:70:
2d:13:e8:d5:cd:4c:2b:24:e3:5d:37:7a:65:fa:fc:
ce:35:96:c3:f2:12:fd:98:19:80:3a:e9:2f:79:bf:
47:34:8f:f7:05:f9:e2:df:23:01:5e:dc:ac:f9:7e:
a7:7d:ed:2e:d8:77:f7:b8:22:5a:0c:69:bf:aa:1f:
b1:2e:50:20:91:5c:10:05:30:f9:b5:77:e9:7d:fb:
6f:16:bd:52:72:7e:ef:0e:5e:51:bc:f1:18:bd:53:
e7:ed:6e:55:6c:05:0f:19:60:ea:2b:65:b9:05:a2:
b5:1c:64:34:a9:5b:59:90:55:0d:12:f6:7a:28:3b:
f5:2c:be:30:35:f4:d4:40:14:40:5d:49:c0:b9:45:
bf:6a:ca:5a:bd:32:55:b2:e4:37:3d:e0:ef:4a:26:
c8:df:97:14:a8:11:13:c8:34:47:3a:f7:02:cf:55:
69:52:c2:1e:5b:8f:52:e4:19:98:8a:79:15:3c:53:
da:e8:52:e1:27:cd:3f:a4:97:bb:f7:5f:88:0d:b2:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6C:17:82:3D:AB:B3:C6:44:FA:90:91:0F:CE:B4:87:43:A5:C5:91
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zWwXgj2rs8ZE-pCRD860h0OlxZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.180.0/22
46.249.108.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:0b:f3:e6:d4:95:27:3e:12:c0:34:c1:80:9d:9e:3e:49:f2:
33:b8:31:c5:da:58:b6:b8:57:a7:6d:f0:b4:f8:3a:68:77:e3:
41:72:24:60:65:9e:04:05:7d:5d:52:5f:0b:87:47:88:ad:28:
a9:5a:b0:07:d6:62:dd:c7:8d:57:f8:43:4d:f1:ed:fb:ec:95:
20:3e:70:ca:50:f8:16:03:53:f1:e2:b5:8a:aa:ba:02:3e:36:
38:af:58:81:7c:c9:6a:03:aa:f9:f7:4d:e8:96:75:d7:09:c1:
11:e4:6e:f9:ca:87:72:c0:dc:d8:33:a1:0a:f0:f3:94:46:e5:
48:5b:b3:7b:1d:4d:34:ad:b2:40:3b:33:bf:9b:b1:e1:54:74:
e4:bd:b4:e1:e2:4d:ba:39:17:40:3e:29:80:d9:8f:50:85:c3:
8e:fe:95:00:42:29:53:74:dc:55:86:89:5e:49:7f:2e:ff:e2:
a1:c6:d2:12:33:55:c5:8e:83:9d:7d:c9:f4:85:01:71:60:70:
b2:de:d6:9c:39:c7:a2:45:a6:0c:23:52:b9:48:ee:96:ed:02:
11:37:ba:ce:ba:45:f1:84:27:76:76:36:ef:e1:47:d2:6d:42:
89:eb:fc:4f:05:be:9d:c6:d4:87:68:33:33:a2:fc:ee:38:20:
c7:aa:5e:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZPzv8O9oHCPpSjT5QWyVPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwMjE0MTIwMzMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDZjMTc4MjNkYWJiM2M2NDRmYTkwOTEwZmNlYjQ4NzQzYTVjNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTJKajP/qFIl2tIxjMRflEcuB1Vn
MGfmD0btLS34EiQjCEYMkPX6YTCLvZPjJHhgyjIOyAT4+/kfdHAtE+jVzUwrJONd
N3pl+vzONZbD8hL9mBmAOukveb9HNI/3Bfni3yMBXtys+X6nfe0u2Hf3uCJaDGm/
qh+xLlAgkVwQBTD5tXfpfftvFr1Scn7vDl5RvPEYvVPn7W5VbAUPGWDqK2W5BaK1
HGQ0qVtZkFUNEvZ6KDv1LL4wNfTUQBRAXUnAuUW/aspavTJVsuQ3PeDvSibI35cU
qBETyDRHOvcCz1VpUsIeW49S5BmYinkVPFPa6FLhJ80/pJe791+IDbJPkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM1sF4I9q7PGRPqQkQ/OtIdDpcWRMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEveld3WGdqMnJzOFpFLXBDUkQ4NjBoME9seFpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYm0AwQC
LvlsMA0GCSqGSIb3DQEBCwUAA4IBAQCsC/Pm1JUnPhLANMGAnZ4+SfIzuDHF2li2
uFenbfC0+Dpod+NBciRgZZ4EBX1dUl8Lh0eIrSipWrAH1mLdx41X+ENN8e377JUg
PnDKUPgWA1Px4rWKqroCPjY4r1iBfMlqA6r5903olnXXCcER5G75yodywNzYM6EK
8POURuVIW7N7HU00rbJAOzO/m7HhVHTkvbTh4k26ORdAPimA2Y9QhcOO/pUAQilT
dNxVholeSX8u/+KhxtISM1XFjoOdfcn0hQFxYHCy3tacOceiRaYMI1K5SO6W7QIR
N7rOukXxhCd2djbv4UfSbUKJ6/xPBb6dxtSHaDMzovzuOCDHql7R
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org