Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/ZukzDGGMRMVV_OD-A7osWCNwCaw.roa
File: ZukzDGGMRMVV_OD-A7osWCNwCaw.roa (raw, json)
Hash identifier: KH4sy7qKAm18LNBaelpjLHlRU/LbKd0ZM9k+QYJqXXo=
Subject key identifier: 66:E9:33:0C:61:8C:44:C5:55:FC:E0:FE:03:BA:2C:58:23:70:09:AC
Certificate issuer: /CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Certificate serial: 0186C3506D2BFBD79C7EAE8B53AD55AD5E08
Authority key identifier: BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/ZukzDGGMRMVV_OD-A7osWCNwCaw.roa
Signing time: Wed 08 Mar 2023 22:21:13 +0000
ROA not before: Wed 08 Mar 2023 22:21:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200157
IP address blocks: 185.159.190.0/24 maxlen: 24
2a12:86c0::/32 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c3:50:6d:2b:fb:d7:9c:7e:ae:8b:53:ad:55:ad:5e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Validity
Not Before: Mar 8 22:21:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66e9330c618c44c555fce0fe03ba2c58237009ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:0b:37:33:05:b0:43:53:1d:64:c0:04:d6:
b5:29:41:2c:d3:d9:a1:43:dc:a0:54:e6:6a:94:b6:
25:09:b1:4a:d9:19:da:54:09:be:66:a3:24:33:79:
78:67:62:5e:cf:71:02:f7:5c:0b:ad:00:7e:ce:14:
1e:c7:b5:0c:53:f0:4e:6f:4f:b7:8a:db:3d:c9:f2:
d6:8b:65:a9:7d:c8:59:ed:f5:db:fb:7f:a4:e3:f8:
04:cd:5d:4f:02:ce:90:ab:a8:d9:74:46:fe:f2:21:
7a:64:ed:e4:25:bd:61:34:fa:9e:f5:17:02:d0:30:
17:95:47:7f:a5:fc:56:fe:96:19:8e:75:cc:df:22:
cd:f4:21:57:af:07:2d:aa:b9:aa:e2:c0:ae:1e:8f:
d8:b6:70:f4:1c:04:5f:70:7e:ab:6a:da:2a:29:8a:
c4:ef:e3:bb:3f:b9:05:4f:b1:1a:d8:89:2d:a1:57:
e2:94:9d:d5:ea:12:84:0d:e8:74:e4:97:71:a6:be:
d4:00:ba:90:d0:8a:2b:52:0a:86:c3:eb:58:17:f2:
e5:c6:fc:4e:86:d6:c0:1e:74:1b:87:37:0d:6b:71:
87:9c:98:7e:73:62:cc:ba:34:2f:b7:e6:a7:f1:f5:
ba:b3:d4:e2:b0:28:44:76:bd:f2:1e:e5:97:7a:c3:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E9:33:0C:61:8C:44:C5:55:FC:E0:FE:03:BA:2C:58:23:70:09:AC
X509v3 Authority Key Identifier:
keyid:BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/ZukzDGGMRMVV_OD-A7osWCNwCaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.190.0/24
IPv6:
2a12:86c0::/32
Signature Algorithm: sha256WithRSAEncryption
96:8a:71:9e:f9:39:fa:5d:52:88:90:06:ab:87:5e:02:02:84:
94:70:85:66:51:29:21:d2:0f:22:c6:56:98:33:80:fb:5e:53:
a0:8e:55:59:4d:2d:d4:86:14:82:e1:00:ee:47:9c:83:7f:ab:
c4:1e:f2:9a:00:9a:ca:28:ed:7c:90:fa:2f:db:59:6c:1f:d0:
7c:82:4c:d7:00:7f:b5:85:c0:25:12:06:aa:30:10:fa:9f:13:
f3:61:76:e3:15:74:e3:8e:44:7d:9f:2b:ff:9e:3a:cf:81:98:
97:1f:d6:fe:ae:79:ca:24:0d:bf:ce:3d:99:f2:ed:28:1f:4c:
69:e4:81:72:23:ea:8c:31:d5:dd:00:f6:34:0c:83:49:9a:d9:
ae:3d:58:37:38:1b:b0:4f:bd:3f:ae:1a:4f:87:e7:d5:69:c8:
c4:fb:b3:f8:74:38:2e:15:8d:ca:32:ae:4b:aa:6c:3b:44:73:
b7:09:01:95:80:77:91:61:3c:1e:6e:3a:23:43:a7:62:15:40:
ad:be:4f:f8:c9:a7:bc:56:c0:e6:8f:3f:69:6b:61:84:c4:78:
84:47:e2:89:65:39:82:64:13:d3:4e:ce:a0:54:f5:88:6a:3e:
b3:f6:b7:32:a6:ed:df:ba:5e:a6:43:50:cc:27:73:4f:29:f3:
61:37:07:6f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYbDUG0r+9ecfq6LU61VrV4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYjMxNGQ3ZTM2OTAxZjZkZWE3YzAyOTFhNTE1MzNiYjIy
NGYzYjMwHhcNMjMwMzA4MjIyMTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmU5MzMwYzYxOGM0NGM1NTVmY2UwZmUwM2JhMmM1ODIzNzAwOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaILNzMFsENTHWTABNa1KUEs09mh
Q9ygVOZqlLYlCbFK2RnaVAm+ZqMkM3l4Z2Jez3EC91wLrQB+zhQex7UMU/BOb0+3
its9yfLWi2WpfchZ7fXb+3+k4/gEzV1PAs6Qq6jZdEb+8iF6ZO3kJb1hNPqe9RcC
0DAXlUd/pfxW/pYZjnXM3yLN9CFXrwctqrmq4sCuHo/YtnD0HARfcH6ratoqKYrE
7+O7P7kFT7Ea2IktoVfilJ3V6hKEDeh05Jdxpr7UALqQ0IorUgqGw+tYF/LlxvxO
htbAHnQbhzcNa3GHnJh+c2LMujQvt+an8fW6s9TisChEdr3yHuWXesNXzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGbpMwxhjETFVfzg/gO6LFgjcAmsMB8GA1UdIwQY
MBaAFLuzFNfjaQH23qfAKRpRUzuyJPOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdNVTEtTnBBZmJlcDhBcEdsRlRPN0lrODdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83YWMzN2ItMDIwYi00OWFlLWFjOWIt
Zjk4ZWM3NGFiZmQ1LzEvWnVrekRHR01STVZWX09ELUE3b3NXQ053Q2F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83YWMzN2ItMDIwYi00OWFlLWFjOWItZjk4ZWM3NGFiZmQ1
LzEvdTdNVTEtTnBBZmJlcDhBcEdsRlRPN0lrODdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuZ++MA0E
AgACMAcDBQAqEobAMA0GCSqGSIb3DQEBCwUAA4IBAQCWinGe+Tn6XVKIkAarh14C
AoSUcIVmUSkh0g8ixlaYM4D7XlOgjlVZTS3UhhSC4QDuR5yDf6vEHvKaAJrKKO18
kPov21lsH9B8gkzXAH+1hcAlEgaqMBD6nxPzYXbjFXTjjkR9nyv/njrPgZiXH9b+
rnnKJA2/zj2Z8u0oH0xp5IFyI+qMMdXdAPY0DINJmtmuPVg3OBuwT70/rhpPh+fV
acjE+7P4dDguFY3KMq5Lqmw7RHO3CQGVgHeRYTwebjojQ6diFUCtvk/4yae8VsDm
jz9pa2GExHiER+KJZTmCZBPTTs6gVPWIaj6z9rcypu3ful6mQ1DMJ3NPKfNhNwdv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:18 2024 by rpki-client on console-ams.rpki-client.org