Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/zRNSRuKBzcbFOXG1W0DEx-_uGmU.roa
File: zRNSRuKBzcbFOXG1W0DEx-_uGmU.roa (raw, json)
Hash identifier: /gOsEp/Ozdo/K1JU6A8CwZTtVnkHS9BIcf2HsWYe7NI=
Subject key identifier: CD:13:52:46:E2:81:CD:C6:C5:39:71:B5:5B:40:C4:C7:EF:EE:1A:65
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01856E790513FAC18E9A047B13FABEEEE7B0
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/zRNSRuKBzcbFOXG1W0DEx-_uGmU.roa
Signing time: Sun 01 Jan 2023 17:55:02 +0000
ROA not before: Sun 01 Jan 2023 17:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19844
IP address blocks: 45.14.114.0/24 maxlen: 24
5.183.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:05:13:fa:c1:8e:9a:04:7b:13:fa:be:ee:e7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 17:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd135246e281cdc6c53971b55b40c4c7efee1a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:9f:ad:b3:99:b5:d1:f7:df:90:d2:39:3a:
87:dd:f0:cc:ab:6f:41:56:4e:3a:6e:0a:19:87:46:
f0:52:89:05:69:ff:64:38:a6:77:af:b7:84:d3:67:
0f:c1:aa:4d:ed:3d:b8:ee:dc:82:3d:1f:fb:bc:a4:
b9:3f:48:44:3f:6c:1b:ad:de:65:ab:ed:62:8f:be:
25:c1:de:80:12:4e:1d:61:3d:eb:c3:c6:87:7a:c1:
61:c7:87:6f:ad:ba:2d:f3:83:30:51:39:90:6d:9c:
0b:43:b8:0d:44:46:fd:0e:00:3b:eb:75:58:cf:72:
89:77:55:61:5a:ca:c2:60:03:01:ef:95:0c:ac:83:
ba:3b:ff:de:8b:79:34:10:e3:7e:4a:5b:e0:46:9b:
7f:65:b5:1c:b0:fe:10:b8:ce:da:56:75:80:da:eb:
4a:9f:e6:df:32:47:94:5f:7f:9a:c2:d9:3f:e5:56:
4f:6b:88:f0:4f:90:6f:10:90:3a:95:e8:f5:85:34:
49:0b:5d:8b:52:18:a0:83:29:1b:d1:c0:f9:f4:3e:
ff:f3:45:cf:73:92:19:95:9a:78:3a:c2:3f:7f:e1:
1d:6c:67:fe:dd:13:c9:78:51:bb:61:bd:10:5c:09:
3c:47:0f:5c:34:e1:5e:c1:91:aa:b0:d1:6b:a5:a5:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:52:46:E2:81:CD:C6:C5:39:71:B5:5B:40:C4:C7:EF:EE:1A:65
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/zRNSRuKBzcbFOXG1W0DEx-_uGmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.78.0/24
45.14.114.0/24
Signature Algorithm: sha256WithRSAEncryption
64:0c:7b:e5:1c:8d:c4:a9:fc:54:5c:e9:85:e7:f8:aa:ed:62:
ee:03:1d:04:94:94:e5:02:e7:2c:30:ac:0c:25:f9:2f:18:60:
f1:5c:41:a6:0a:59:5d:fb:5e:dd:9e:8d:69:17:77:ca:49:6e:
fc:ee:fb:12:92:61:4f:43:8e:08:d2:36:c6:04:f7:a6:71:a4:
f2:fb:cc:90:42:20:9e:de:fc:d3:7f:c7:1a:6d:c6:9f:fd:ad:
ce:13:73:c1:d1:0b:7c:4b:7b:92:79:72:1c:37:01:9a:dd:3e:
75:5e:e3:3b:74:2d:a4:94:2c:38:c6:7c:e8:8f:9d:81:84:3c:
f1:ef:62:d2:9f:bf:64:d2:f5:89:08:58:ba:99:0f:8a:4a:5e:
d4:45:7c:b6:af:ab:53:90:52:b2:df:6e:6b:b5:06:fe:a3:64:
5e:54:bd:4f:b7:f1:25:aa:ba:d1:a5:9c:49:b6:7b:70:ed:4f:
e4:82:73:af:84:8a:15:af:c7:b7:33:14:c0:58:36:44:c3:c1:
7b:18:88:70:1c:74:21:9f:eb:4e:dc:fa:2a:5d:ac:9b:62:3f:
89:64:c4:18:46:05:0c:cf:79:47:4d:75:66:c7:48:30:f3:ab:
6e:73:ee:78:c9:4f:6e:37:5f:d6:c9:a1:ec:e7:27:ff:da:99:
5b:d5:da:fc
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVueQUT+sGOmgR7E/q+7uewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4
N2NhMjQwHhcNMjMwMTAxMTc1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDEzNTI0NmUyODFjZGM2YzUzOTcxYjU1YjQwYzRjN2VmZWUxYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiyfrbOZtdH335DSOTqH3fDMq29B
Vk46bgoZh0bwUokFaf9kOKZ3r7eE02cPwapN7T247tyCPR/7vKS5P0hEP2wbrd5l
q+1ij74lwd6AEk4dYT3rw8aHesFhx4dvrbot84MwUTmQbZwLQ7gNREb9DgA763VY
z3KJd1VhWsrCYAMB75UMrIO6O//ei3k0EON+SlvgRpt/ZbUcsP4QuM7aVnWA2utK
n+bfMkeUX3+awtk/5VZPa4jwT5BvEJA6lej1hTRJC12LUhiggykb0cD59D7/80XP
c5IZlZp4OsI/f+EdbGf+3RPJeFG7Yb0QXAk8Rw9cNOFewZGqsNFrpaWTyQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFM0TUkbigc3GxTlxtVtAxMfv7hplMB8GA1UdIwQY
MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl
LWY3NTJkODE2MDVmYi8xL3pSTlNSdUtCemNiRk9YRzFXMERFeC1fdUdtVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm
Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAFt04D
BAAtDnIwDQYJKoZIhvcNAQELBQADggEBAGQMe+UcjcSp/FRc6YXn+KrtYu4DHQSU
lOUC5ywwrAwl+S8YYPFcQaYKWV37Xt2ejWkXd8pJbvzu+xKSYU9DjgjSNsYE96Zx
pPL7zJBCIJ7e/NN/xxptxp/9rc4Tc8HRC3xLe5J5chw3AZrdPnVe4zt0LaSULDjG
fOiPnYGEPPHvYtKfv2TS9YkIWLqZD4pKXtRFfLavq1OQUrLfbmu1Bv6jZF5UvU+3
8SWqutGlnEm2e3DtT+SCc6+EihWvx7czFMBYNkTDwXsYiHAcdCGf607c+ipdrJti
P4lkxBhGBQzPeUdNdWbHSDDzq25z7njJT243X9bJoeznJ//amVvV2vw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:09 2024 by rpki-client on console-ams.rpki-client.org