Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ZUrZwWpbjPf68Fp2zVpUfgtZ250.roa
File: ZUrZwWpbjPf68Fp2zVpUfgtZ250.roa (raw, json)
Hash identifier: AxyKxWpGIMF2mFIcnzj455Ds/pcCpSne8NilOyw0sRk=
Subject key identifier: 65:4A:D9:C1:6A:5B:8C:F7:FA:F0:5A:76:CD:5A:54:7E:0B:59:DB:9D
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570305D661B7028D0AC25B70F4FE4ED2E
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ZUrZwWpbjPf68Fp2zVpUfgtZ250.roa
Signing time: Mon 02 Jan 2023 01:54:55 +0000
ROA not before: Mon 02 Jan 2023 01:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16280
IP address blocks: 194.149.50.0/24 maxlen: 24
194.149.48.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5d:66:1b:70:28:d0:ac:25:b7:0f:4f:e4:ed:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=654ad9c16a5b8cf7faf05a76cd5a547e0b59db9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:0e:67:25:0f:3d:16:f2:e2:3c:cb:c2:a5:
c6:cc:8c:98:64:bc:d5:9f:0c:72:09:c8:92:a4:0a:
2b:f3:27:5e:23:b1:2f:f3:fa:77:d3:ef:b8:b8:4e:
f6:5d:a1:16:7d:a6:29:1b:aa:5f:b3:17:27:e1:8c:
32:58:84:24:3f:e5:62:1a:32:e1:e0:3b:40:e3:fc:
ba:e5:d2:0b:42:84:0d:7c:c6:5d:18:de:d5:03:d9:
95:09:db:0c:66:1d:bd:94:bd:3c:a3:4d:5a:c8:15:
1b:7e:ea:e9:4d:2a:92:3b:d9:30:51:24:7e:bb:52:
26:9e:f5:c7:15:57:f6:9c:5b:d7:2d:fc:2d:a8:09:
22:66:d1:be:18:fb:5e:fa:0f:1a:6d:90:83:f3:ae:
56:ec:d4:3e:58:df:b0:f4:5d:72:98:6e:6d:17:19:
d6:9c:82:33:91:ba:41:3c:d8:57:66:cc:54:54:7b:
45:b9:c0:17:b8:2a:b7:6b:f5:35:6f:1a:de:6f:f2:
13:90:28:0c:60:5c:00:c7:1a:b6:8c:6b:1d:f7:77:
f2:b7:d5:b2:ed:81:0e:a0:d9:32:96:57:05:85:44:
36:da:76:13:d2:1a:87:34:27:45:e8:5a:ff:2f:42:
f3:09:b8:44:cd:e3:da:60:14:92:04:78:c8:bb:39:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4A:D9:C1:6A:5B:8C:F7:FA:F0:5A:76:CD:5A:54:7E:0B:59:DB:9D
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ZUrZwWpbjPf68Fp2zVpUfgtZ250.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.48.0-194.149.50.255
Signature Algorithm: sha256WithRSAEncryption
2a:de:a3:0b:02:1b:ea:c7:33:e4:9c:8b:30:0f:6c:f0:37:6f:
c7:15:7c:b9:2b:90:83:06:aa:d6:3e:21:c9:be:d1:c3:c4:de:
4e:ad:fe:7d:5d:e2:b2:0d:91:2d:49:e1:a5:26:b0:65:a4:9e:
df:a7:9d:ac:ff:71:95:0f:87:67:e5:53:e1:d1:74:f2:ef:c7:
58:b8:c2:f8:64:d3:8d:8a:29:ff:55:91:1c:61:32:91:2b:e5:
1a:41:ff:f0:0d:ce:8a:5f:de:ee:48:29:41:c4:5e:cd:6c:44:
5f:36:d7:0c:de:f8:f8:1d:8f:13:23:7c:f8:bd:82:99:88:02:
14:af:72:9d:de:05:df:09:43:b5:de:4d:96:b5:d3:1a:bd:5f:
4c:e5:e9:db:00:ea:ad:e8:6d:22:a1:fc:bc:ae:7c:9a:a0:62:
c1:8a:31:6e:4b:ab:9c:63:a7:57:30:69:6a:b2:3f:62:75:b1:
11:cc:5b:7e:28:13:b3:7c:34:e1:fe:5c:c6:1e:a8:26:69:d8:
0b:9e:a1:bc:f8:aa:b2:99:eb:81:f0:15:63:7a:56:68:f3:30:
1f:0c:ca:67:30:1b:00:ca:28:b7:40:7b:15:c6:b4:63:a2:be:
ee:17:13:24:59:6b:d6:9a:ee:dc:55:4c:cf:ad:d9:0a:36:33:
5f:cd:d6:b4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVwMF1mG3Ao0Kwltw9P5O0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjMwMTAyMDE1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTRhZDljMTZhNWI4Y2Y3ZmFmMDVhNzZjZDVhNTQ3ZTBiNTlkYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaAOZyUPPRby4jzLwqXGzIyYZLzV
nwxyCciSpAor8ydeI7Ev8/p30++4uE72XaEWfaYpG6pfsxcn4YwyWIQkP+ViGjLh
4DtA4/y65dILQoQNfMZdGN7VA9mVCdsMZh29lL08o01ayBUbfurpTSqSO9kwUSR+
u1ImnvXHFVf2nFvXLfwtqAkiZtG+GPte+g8abZCD865W7NQ+WN+w9F1ymG5tFxnW
nIIzkbpBPNhXZsxUVHtFucAXuCq3a/U1bxreb/ITkCgMYFwAxxq2jGsd93fyt9Wy
7YEOoNkyllcFhUQ22nYT0hqHNCdF6Fr/L0LzCbhEzePaYBSSBHjIuznsZwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGVK2cFqW4z3+vBads1aVH4LWdudMB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvWlVyWndXcGJqUGY2OEZwMnpWcFVmZ3RaMjUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATClTAD
BADClTIwDQYJKoZIhvcNAQELBQADggEBACreowsCG+rHM+ScizAPbPA3b8cVfLkr
kIMGqtY+Icm+0cPE3k6t/n1d4rINkS1J4aUmsGWknt+nnaz/cZUPh2flU+HRdPLv
x1i4wvhk042KKf9VkRxhMpEr5RpB//ANzopf3u5IKUHEXs1sRF821wze+PgdjxMj
fPi9gpmIAhSvcp3eBd8JQ7XeTZa10xq9X0zl6dsA6q3obSKh/LyufJqgYsGKMW5L
q5xjp1cwaWqyP2J1sRHMW34oE7N8NOH+XMYeqCZp2Aueobz4qrKZ64HwFWN6Vmjz
MB8MymcwGwDKKLdAexXGtGOivu4XEyRZa9aa7txVTM+t2Qo2M1/N1rQ=
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:51 2024 by rpki-client on console-ams.rpki-client.org