Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ZoKdaaN-t00ApX6d_xCvRNnFa58.roa
File: ZoKdaaN-t00ApX6d_xCvRNnFa58.roa (raw, json)
Hash identifier: VNYwdUMUmAJVBk8sV4QUooUppsvON6MMiR3xFyoeU8s=
Subject key identifier: 66:82:9D:69:A3:7E:B7:4D:00:A5:7E:9D:FF:10:AF:44:D9:C5:6B:9F
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 01856FCB97F99DF2074219C77DED564C97CA
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ZoKdaaN-t00ApX6d_xCvRNnFa58.roa
Signing time: Mon 02 Jan 2023 00:04:51 +0000
ROA not before: Mon 02 Jan 2023 00:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210122
IP address blocks: 185.229.240.0/24 maxlen: 24
185.229.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:97:f9:9d:f2:07:42:19:c7:7d:ed:56:4c:97:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 00:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66829d69a37eb74d00a57e9dff10af44d9c56b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:dc:8a:c5:39:91:b0:c7:cf:bd:0f:18:0f:
96:f4:05:83:69:60:c6:ea:c5:dd:1a:0f:1f:6f:dd:
24:9f:af:9e:7b:f6:c1:87:49:78:b8:c2:89:ad:7a:
af:18:1c:c1:b4:92:36:62:c4:0b:55:46:9a:f3:3e:
1c:3d:6c:5b:7a:05:ac:21:a0:2c:e3:72:6c:b9:31:
9f:a1:53:61:da:cf:ad:23:66:fb:7f:4d:09:c3:b0:
cc:66:0a:27:c7:e6:0d:fd:ba:46:b1:be:0c:eb:30:
d3:99:34:a2:80:03:81:94:33:a7:9e:69:11:0e:28:
cb:b5:f0:90:1b:47:95:aa:7d:0c:9b:3a:59:63:51:
cd:e8:7a:de:b5:1b:4c:f7:21:90:25:1c:76:43:ac:
e4:d1:76:a2:e2:83:f4:77:a8:7b:28:00:78:ef:3a:
13:83:c8:a2:63:51:6d:3e:ac:c3:2d:60:79:04:fd:
da:80:13:5d:40:62:cb:37:f2:d6:f9:79:16:ed:ba:
12:e8:8b:57:d9:60:fe:93:74:1f:83:77:6b:8f:5e:
9a:8c:1d:1d:7b:92:4e:65:9d:09:0c:bd:41:8c:65:
8a:1e:9c:0c:5a:4f:d0:14:cd:3b:da:a4:3e:3a:24:
be:67:70:c6:09:d6:2b:a2:fe:5b:cf:32:4d:24:73:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:82:9D:69:A3:7E:B7:4D:00:A5:7E:9D:FF:10:AF:44:D9:C5:6B:9F
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ZoKdaaN-t00ApX6d_xCvRNnFa58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.240.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:fe:c5:91:b1:87:89:0d:18:93:97:6c:f2:63:63:5b:ea:9f:
70:78:3e:9e:10:42:f9:45:b7:f1:ee:78:2b:bf:1c:ff:d7:31:
6c:ea:ae:17:cc:5f:fa:4b:51:1c:4f:7b:9c:63:2f:92:76:df:
e8:e0:9b:8e:25:cf:b6:3c:97:3d:83:29:76:36:3a:aa:c0:2a:
cf:52:2b:21:15:4d:9f:57:7b:8a:5b:46:d0:0e:6e:43:94:ea:
e0:88:35:ed:62:d9:0e:d6:52:32:f8:9f:77:9d:28:89:fa:60:
1b:ec:d1:9b:a8:96:c8:63:92:01:59:ef:4f:f6:e2:1d:4e:03:
64:a9:93:dc:80:f6:ed:0f:30:6f:94:d3:9d:7c:7c:76:fd:c9:
3e:e2:72:2e:d2:e0:ac:b7:c2:f5:e5:6c:28:63:20:b4:76:96:
af:de:01:f5:01:2a:27:e3:44:87:a0:57:0f:4e:1d:c0:d6:56:
d6:fd:ef:af:8c:40:64:b2:eb:b0:c7:74:74:83:db:fd:09:4a:
9c:ba:c1:35:6e:6a:cc:03:43:6c:f3:bb:31:96:02:19:c6:7f:
e3:f8:70:3a:24:e4:00:d5:00:ca:87:28:15:87:11:a6:ec:7e:
75:b3:97:76:29:c6:09:c5:27:ec:88:8e:19:83:04:00:50:44:
f5:61:f2:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvy5f5nfIHQhnHfe1WTJfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3
MWM0MjYwHhcNMjMwMTAyMDAwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjgyOWQ2OWEzN2ViNzRkMDBhNTdlOWRmZjEwYWY0NGQ5YzU2YjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy7cisU5kbDHz70PGA+W9AWDaWDG
6sXdGg8fb90kn6+ee/bBh0l4uMKJrXqvGBzBtJI2YsQLVUaa8z4cPWxbegWsIaAs
43JsuTGfoVNh2s+tI2b7f00Jw7DMZgonx+YN/bpGsb4M6zDTmTSigAOBlDOnnmkR
DijLtfCQG0eVqn0MmzpZY1HN6HretRtM9yGQJRx2Q6zk0Xai4oP0d6h7KAB47zoT
g8iiY1FtPqzDLWB5BP3agBNdQGLLN/LW+XkW7boS6ItX2WD+k3Qfg3drj16ajB0d
e5JOZZ0JDL1BjGWKHpwMWk/QFM072qQ+OiS+Z3DGCdYrov5bzzJNJHPe4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGaCnWmjfrdNAKV+nf8Qr0TZxWufMB8GA1UdIwQY
MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt
ZDg0ODhiM2FiNDJmLzEvWm9LZGFhTi10MDBBcFg2ZF94Q3ZSTm5GYTU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm
LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueXwMA0G
CSqGSIb3DQEBCwUAA4IBAQB6/sWRsYeJDRiTl2zyY2Nb6p9weD6eEEL5Rbfx7ngr
vxz/1zFs6q4XzF/6S1EcT3ucYy+Sdt/o4JuOJc+2PJc9gyl2NjqqwCrPUishFU2f
V3uKW0bQDm5DlOrgiDXtYtkO1lIy+J93nSiJ+mAb7NGbqJbIY5IBWe9P9uIdTgNk
qZPcgPbtDzBvlNOdfHx2/ck+4nIu0uCst8L15WwoYyC0dpav3gH1ASon40SHoFcP
Th3A1lbW/e+vjEBksuuwx3R0g9v9CUqcusE1bmrMA0Ns87sxlgIZxn/j+HA6JOQA
1QDKhygVhxGm7H51s5d2KcYJxSfsiI4ZgwQAUET1YfIk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org