Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/ZAawBnLrD_bo9t3FpBSVTr2P7Gw.roa
File: ZAawBnLrD_bo9t3FpBSVTr2P7Gw.roa (raw, json)
Hash identifier: s4k9oQbENfQxMj9tpwGqMrSOEJ7ITKvhz/utzdf1uX4=
Subject key identifier: 64:06:B0:06:72:EB:0F:F6:E8:F6:DD:C5:A4:14:95:4E:BD:8F:EC:6C
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 018A17C472912F5181EAA1EDABF7E78221E6
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/ZAawBnLrD_bo9t3FpBSVTr2P7Gw.roa
Signing time: Mon 21 Aug 2023 11:04:24 +0000
ROA not before: Mon 21 Aug 2023 11:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 185.114.104.0/22 maxlen: 24
185.56.212.0/22 maxlen: 24
45.137.208.0/22 maxlen: 24
81.201.208.0/20 maxlen: 24
2a00:e900::/29 maxlen: 48
2a01:4400::/32 maxlen: 48
2a0b:fd82::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 21 Aug 2023 11:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:c4:72:91:2f:51:81:ea:a1:ed:ab:f7:e7:82:21:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Aug 21 11:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6406b00672eb0ff6e8f6ddc5a414954ebd8fec6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:e0:2b:79:23:a6:ee:45:a0:fc:a8:dd:8c:
48:4c:48:fa:36:a0:e5:d8:96:79:bb:33:fe:f8:32:
89:91:95:6c:0c:12:9a:50:12:59:3b:b5:74:97:05:
56:82:34:77:43:c4:8b:38:63:fe:c1:f7:b8:6d:94:
7f:0b:ed:14:d5:93:3b:e7:09:50:40:d4:4b:16:40:
ff:f7:04:f5:86:bf:81:d7:5d:19:da:88:7b:1b:57:
45:d6:4f:88:fa:f1:3d:b1:a9:37:ec:c7:36:7a:ad:
6a:c5:03:4e:c6:59:bb:79:b0:55:59:29:5d:74:28:
a0:b0:fb:29:bb:4d:1d:fc:ac:7f:39:8a:74:00:8e:
ce:d3:03:2b:9f:24:f0:47:bd:36:fa:51:8f:10:ac:
8e:d8:34:bf:a0:fa:13:15:49:1f:2d:7f:a5:a1:32:
9c:16:7e:73:5c:f9:f6:7b:cb:ee:dc:94:eb:65:8b:
65:42:d4:fb:6c:e0:de:dc:83:48:a0:36:f1:5a:b4:
13:01:df:09:4c:ed:2d:ec:b4:21:7a:39:30:f6:44:
53:61:fa:13:5c:ab:01:ba:9f:01:68:09:46:ae:de:
27:cc:7b:5e:61:7c:67:08:6b:26:43:9f:dc:84:1a:
e5:ab:50:a7:dd:b7:40:bb:2f:ac:83:52:00:73:f4:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:06:B0:06:72:EB:0F:F6:E8:F6:DD:C5:A4:14:95:4E:BD:8F:EC:6C
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/ZAawBnLrD_bo9t3FpBSVTr2P7Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.208.0/22
81.201.208.0/20
185.56.212.0/22
185.114.104.0/22
IPv6:
2a00:e900::/29
2a01:4400::/32
2a0b:fd82::/32
Signature Algorithm: sha256WithRSAEncryption
75:6a:54:ff:b7:88:dc:ea:11:97:6a:49:7d:90:ce:d5:0c:f4:
07:ba:c5:d5:bd:78:83:67:96:4d:eb:4e:53:19:b3:54:f6:30:
89:52:1d:83:41:01:e9:e6:26:e6:1e:9f:e8:67:75:ac:72:42:
20:f0:82:85:3c:8f:cc:6f:5a:d9:25:40:bd:01:09:45:a6:f8:
0d:44:3d:53:ef:76:7b:c1:8f:80:3c:77:ec:a7:54:b4:ba:3c:
e3:06:02:c3:94:89:1f:f7:b1:1d:2d:3a:69:24:4f:50:13:1e:
71:fd:23:0f:9e:49:09:9d:f6:5c:81:d2:30:de:16:58:d2:45:
1c:37:22:45:8f:97:93:c4:e0:13:9c:3c:3b:d1:b8:d4:de:3e:
97:3a:34:e4:d8:33:67:73:e8:06:3b:4e:b5:18:f0:bd:44:6c:
ef:3e:6b:41:4b:5e:9d:1c:60:7c:5a:ed:b8:db:c6:a8:d2:06:
c9:ab:c6:09:4f:ae:27:d4:08:8d:70:7b:c3:57:fa:e1:b2:ad:
2e:56:e3:07:5b:d8:11:26:b9:77:90:ee:b5:6e:1c:55:75:65:
f0:ed:c7:28:03:4d:57:02:18:d3:f8:cc:15:b0:e1:97:df:e1:
4c:67:9d:d9:fe:47:f9:71:50:f4:90:2d:56:9d:47:a5:3a:66:
11:f8:30:5a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYoXxHKRL1GB6qHtq/fngiHmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj
NDE1ZDUwHhcNMjMwODIxMTEwNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDA2YjAwNjcyZWIwZmY2ZThmNmRkYzVhNDE0OTU0ZWJkOGZlYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik3gK3kjpu5FoPyo3YxITEj6NqDl
2JZ5uzP++DKJkZVsDBKaUBJZO7V0lwVWgjR3Q8SLOGP+wfe4bZR/C+0U1ZM75wlQ
QNRLFkD/9wT1hr+B110Z2oh7G1dF1k+I+vE9sak37Mc2eq1qxQNOxlm7ebBVWSld
dCigsPspu00d/Kx/OYp0AI7O0wMrnyTwR702+lGPEKyO2DS/oPoTFUkfLX+loTKc
Fn5zXPn2e8vu3JTrZYtlQtT7bODe3INIoDbxWrQTAd8JTO0t7LQhejkw9kRTYfoT
XKsBup8BaAlGrt4nzHteYXxnCGsmQ5/chBrlq1Cn3bdAuy+sg1IAc/R4NwIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFGQGsAZy6w/26PbdxaQUlU69j+xsMB8GA1UdIwQY
MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt
OGZkMzk0YjUzNTdjLzEvWkFhd0JuTHJEX2JvOXQzRnBCU1ZUcjJQN0d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj
LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAeBAIAATAYAwQCLYnQAwQE
UcnQAwQCuTjUAwQCuXJoMBsEAgACMBUDBQMqAOkAAwUAKgFEAAMFACoL/YIwDQYJ
KoZIhvcNAQELBQADggEBAHVqVP+3iNzqEZdqSX2QztUM9Ae6xdW9eINnlk3rTlMZ
s1T2MIlSHYNBAenmJuYen+hndaxyQiDwgoU8j8xvWtklQL0BCUWm+A1EPVPvdnvB
j4A8d+ynVLS6POMGAsOUiR/3sR0tOmkkT1ATHnH9Iw+eSQmd9lyB0jDeFljSRRw3
IkWPl5PE4BOcPDvRuNTePpc6NOTYM2dz6AY7TrUY8L1EbO8+a0FLXp0cYHxa7bjb
xqjSBsmrxglPrifUCI1we8NX+uGyrS5W4wdb2BEmuXeQ7rVuHFV1ZfDtxygDTVcC
GNP4zBWw4Zff4Uxnndn+R/lxUPSQLVadR6U6ZhH4MFo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:34 2024 by rpki-client on console-fra.rpki-client.org