Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ZF_i4wuL8_qUVin2GhhuOsQ_sLU.roa
File: ZF_i4wuL8_qUVin2GhhuOsQ_sLU.roa (raw, json)
Hash identifier: CSBBfHZ1V6Hvlxt4EeY1fC1oPdNqT4Ax+hiyn8Z699g=
Subject key identifier: 64:5F:E2:E3:0B:8B:F3:FA:94:56:29:F6:1A:18:6E:3A:C4:3F:B0:B5
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018CEEFF582CDE5229B4628FE8492A44DAAB
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ZF_i4wuL8_qUVin2GhhuOsQ_sLU.roa
Signing time: Tue 09 Jan 2024 16:12:40 +0000
ROA not before: Tue 09 Jan 2024 16:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 185.243.155.0/24 maxlen: 24
185.243.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 12:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:ff:58:2c:de:52:29:b4:62:8f:e8:49:2a:44:da:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 9 16:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=645fe2e30b8bf3fa945629f61a186e3ac43fb0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:1e:ce:a0:6d:f1:8f:1f:99:f0:30:c7:18:
74:59:88:5c:94:3a:63:38:d3:3b:f4:5f:db:06:05:
ed:de:b0:7e:5e:9f:45:e2:a6:c2:a7:9e:57:04:95:
6b:3c:9f:ab:36:82:30:e6:dc:01:db:fc:5b:e2:d9:
a1:14:a1:3d:d3:5d:13:c8:cb:28:b4:f5:f2:56:da:
f9:c1:67:cf:af:50:a2:11:77:7b:b8:2b:e4:df:81:
2b:51:22:d9:32:98:06:43:5a:5d:2e:41:57:47:7e:
64:9b:ad:22:b8:96:87:bc:92:60:86:58:66:ad:ce:
8a:0c:28:01:cb:bc:7f:99:8e:9a:36:33:c3:48:48:
eb:3c:96:ef:fd:be:78:f5:c4:1d:73:d3:9b:10:7f:
ac:da:69:9f:78:a3:03:da:4e:df:ca:07:d7:90:29:
f5:8f:03:e1:00:5c:7e:e3:49:85:51:43:c4:ee:9c:
a3:c7:f9:7e:28:2f:6d:02:e7:8c:64:4e:61:da:40:
7c:22:e6:50:66:8b:6e:c3:ce:1f:15:ec:97:1a:80:
b1:63:cc:e2:4d:50:85:b9:3e:31:3b:6f:ab:ac:31:
d1:1f:cd:72:36:c1:88:0c:0a:4c:96:86:96:69:aa:
22:ff:86:6a:93:90:d1:98:90:ef:da:83:06:82:64:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5F:E2:E3:0B:8B:F3:FA:94:56:29:F6:1A:18:6E:3A:C4:3F:B0:B5
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ZF_i4wuL8_qUVin2GhhuOsQ_sLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.154.0/23
Signature Algorithm: sha256WithRSAEncryption
21:92:3e:b8:b5:ca:fd:b6:bd:b6:09:49:f0:19:b2:61:cc:9a:
41:03:14:7f:ac:0f:42:b1:27:a5:5a:f5:64:02:8b:d2:79:3a:
f1:72:0e:1a:ec:0b:79:65:37:83:d3:86:88:ab:21:a9:05:41:
83:02:b3:ed:6f:bb:89:1f:ec:da:c1:3e:0e:59:41:83:b8:8a:
af:5e:5a:c7:8b:6d:ab:6c:9d:42:cf:f5:11:1a:d6:20:a0:46:
b6:5d:19:7f:86:4a:4c:c9:39:e4:0d:f2:22:73:f6:ce:f0:7e:
e8:71:01:c4:f8:7b:ed:cc:b2:1f:ad:5d:f5:27:0f:b6:9a:10:
f0:7c:d8:59:a4:41:74:66:cb:6b:69:ab:68:31:db:1f:df:b6:
2b:f8:de:ba:a7:ef:aa:df:5f:55:0b:b0:26:7f:13:7e:41:5e:
db:b8:47:a8:ed:a3:d4:9e:f7:3c:aa:a0:3f:ce:53:f0:6a:2b:
5c:54:55:ef:b0:3a:97:e2:2d:3c:7e:c3:63:9f:cc:09:ab:5c:
ba:66:d6:66:0a:b6:83:c8:55:50:54:bf:11:a4:84:12:60:6f:
54:95:99:9a:3c:97:54:c6:65:35:68:ce:cf:4e:15:c7:6b:ed:
da:89:71:9f:09:cf:bb:5a:75:77:3d:3c:7e:f0:58:19:98:7e:
e2:d9:78:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzu/1gs3lIptGKP6EkqRNqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi
YzU5MDEwHhcNMjQwMTA5MTYxMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDVmZTJlMzBiOGJmM2ZhOTQ1NjI5ZjYxYTE4NmUzYWM0M2ZiMGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhQezqBt8Y8fmfAwxxh0WYhclDpj
ONM79F/bBgXt3rB+Xp9F4qbCp55XBJVrPJ+rNoIw5twB2/xb4tmhFKE9010TyMso
tPXyVtr5wWfPr1CiEXd7uCvk34ErUSLZMpgGQ1pdLkFXR35km60iuJaHvJJghlhm
rc6KDCgBy7x/mY6aNjPDSEjrPJbv/b549cQdc9ObEH+s2mmfeKMD2k7fygfXkCn1
jwPhAFx+40mFUUPE7pyjx/l+KC9tAueMZE5h2kB8IuZQZotuw84fFeyXGoCxY8zi
TVCFuT4xO2+rrDHRH81yNsGIDApMloaWaaoi/4Zqk5DRmJDv2oMGgmQgUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRf4uMLi/P6lFYp9hoYbjrEP7C1MB8GA1UdIwQY
MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEvWkZfaTR3dUw4X3FVVmluMkdoaHVPc1Ffc0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufOaMA0G
CSqGSIb3DQEBCwUAA4IBAQAhkj64tcr9tr22CUnwGbJhzJpBAxR/rA9CsSelWvVk
AovSeTrxcg4a7At5ZTeD04aIqyGpBUGDArPtb7uJH+zawT4OWUGDuIqvXlrHi22r
bJ1Cz/URGtYgoEa2XRl/hkpMyTnkDfIic/bO8H7ocQHE+HvtzLIfrV31Jw+2mhDw
fNhZpEF0ZstraatoMdsf37Yr+N66p++q319VC7AmfxN+QV7buEeo7aPUnvc8qqA/
zlPwaitcVFXvsDqX4i08fsNjn8wJq1y6ZtZmCraDyFVQVL8RpIQSYG9UlZmaPJdU
xmU1aM7PThXHa+3aiXGfCc+7WnV3PTx+8FgZmH7i2XgP
-----END CERTIFICATE-----
Generated at Mon Feb 12 18:07:09 2024 by rpki-client on console-fra.rpki-client.org