Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/2ZHnieqUAxkYmH4FqPG20afz8KU.roa
File: 2ZHnieqUAxkYmH4FqPG20afz8KU.roa (raw, json)
Hash identifier: gsezu/7ZvOg1aa7O1eJ6DTp5JtwTb6HePkLO4Ha4nwg=
Subject key identifier: D9:91:E7:89:EA:94:03:19:18:98:7E:05:A8:F1:B6:D1:A7:F3:F0:A5
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 018CC8012197CB98F72DD4FE6A352B56A8E7
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/2ZHnieqUAxkYmH4FqPG20afz8KU.roa
Signing time: Tue 02 Jan 2024 02:29:26 +0000
ROA not before: Tue 02 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203698
IP address blocks: 176.124.40.0/22 maxlen: 22
45.147.208.0/22 maxlen: 22
2a0f:3400::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 04 Jan 2024 12:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:21:97:cb:98:f7:2d:d4:fe:6a:35:2b:56:a8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d991e789ea94031918987e05a8f1b6d1a7f3f0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:5a:73:02:a6:4b:6f:d6:f7:a6:11:e6:38:
3a:f2:e3:79:de:39:d2:84:19:5c:e3:ca:41:03:9c:
c0:20:6f:a9:92:27:89:04:05:cd:97:95:e5:9b:0a:
05:f6:ea:ac:a6:32:2e:c6:e1:9e:a3:de:c3:6b:2f:
78:96:ad:2d:0d:70:f3:87:c9:88:81:cd:65:3a:76:
4f:b6:27:07:76:9d:76:56:4c:af:06:93:ee:a3:8d:
a5:fa:2e:8f:d9:ce:b3:f4:01:26:2b:f2:8f:d7:18:
6a:65:d8:dc:ad:5a:6f:09:26:32:c4:f2:8e:cb:74:
23:bc:7c:56:bb:2c:44:06:4d:0c:1f:88:45:56:33:
ef:d4:d1:22:1a:71:a2:65:73:8f:07:af:9b:d6:19:
c2:9a:fb:00:12:c4:33:11:61:74:d9:1a:97:5c:a6:
5e:73:82:74:2b:ec:b3:8d:64:e4:c8:a0:c2:19:62:
37:82:34:00:f4:26:5a:0a:f5:4b:18:60:df:cf:01:
22:cd:23:48:e4:39:97:60:85:76:44:4a:40:1c:80:
7a:5b:5b:46:e0:2c:ba:43:2e:95:1c:26:64:d7:79:
51:f7:da:18:a9:a5:1d:bb:0f:35:dd:5c:b5:ae:70:
bf:2d:36:ca:61:b5:a5:0a:39:a3:4f:c9:e7:4e:24:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:91:E7:89:EA:94:03:19:18:98:7E:05:A8:F1:B6:D1:A7:F3:F0:A5
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/2ZHnieqUAxkYmH4FqPG20afz8KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.208.0/22
176.124.40.0/22
IPv6:
2a0f:3400::/29
Signature Algorithm: sha256WithRSAEncryption
a0:92:76:06:6a:d2:e9:d7:54:30:be:18:d4:e5:1b:3d:57:fa:
f5:2e:c0:ca:98:a0:fa:19:fe:53:45:b3:3f:e0:8c:96:73:9c:
82:7e:cc:e6:05:90:88:3f:ab:c2:c2:e7:68:e6:74:b2:71:eb:
09:a2:ac:eb:21:fa:d9:bf:2a:3d:ea:ec:12:ef:cb:a5:0e:6d:
78:31:71:83:f5:c5:1a:89:75:7a:f6:b4:64:0f:3f:4b:ba:8e:
06:35:be:7e:15:e9:a9:67:6e:55:c4:72:6f:cc:18:b3:b0:d1:
90:41:18:98:c0:38:ed:f8:74:b4:b9:41:2c:e1:34:16:ee:d7:
d8:2a:c4:3b:87:36:6e:5c:df:c7:c1:a9:a5:fc:99:53:93:d5:
2e:1a:8c:04:f2:51:91:4e:2d:56:2e:b8:4c:b5:86:bc:6b:7f:
c3:56:35:cf:0b:06:27:eb:b8:f0:22:c7:da:ed:53:b7:3b:d5:
21:19:9f:b0:7d:8c:4c:1d:24:c3:81:e6:e0:44:86:cf:ae:c6:
07:5c:68:67:bc:ed:0f:fe:5a:6c:bb:f5:23:48:b2:71:e1:01:
89:a3:d2:a8:e2:4e:ea:b8:c5:7f:4f:f5:df:61:26:31:8a:ca:
9e:32:25:a8:b5:14:83:24:d4:69:04:a3:7d:05:fa:37:0f:a2:
dc:1c:69:86
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzIASGXy5j3LdT+ajUrVqjnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNTk1NWM0YWYzZWIxYThkMzQwMGE4NjYyNWUzNjVjMjYy
OThkNmEwHhcNMjQwMTAyMDIyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTkxZTc4OWVhOTQwMzE5MTg5ODdlMDVhOGYxYjZkMWE3ZjNmMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHJacwKmS2/W96YR5jg68uN53jnS
hBlc48pBA5zAIG+pkieJBAXNl5XlmwoF9uqspjIuxuGeo97Day94lq0tDXDzh8mI
gc1lOnZPticHdp12VkyvBpPuo42l+i6P2c6z9AEmK/KP1xhqZdjcrVpvCSYyxPKO
y3QjvHxWuyxEBk0MH4hFVjPv1NEiGnGiZXOPB6+b1hnCmvsAEsQzEWF02RqXXKZe
c4J0K+yzjWTkyKDCGWI3gjQA9CZaCvVLGGDfzwEizSNI5DmXYIV2REpAHIB6W1tG
4Cy6Qy6VHCZk13lR99oYqaUduw813Vy1rnC/LTbKYbWlCjmjT8nnTiScwwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNmR54nqlAMZGJh+BajxttGn8/ClMB8GA1UdIwQY
MBaAFDFZVcSvPrGo00AKhmJeNlwmKY1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODIt
OTczNDgzMzZmMzNhLzEvMlpIbmllcVVBeGtZbUg0RnFQRzIwYWZ6OEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODItOTczNDgzMzZmMzNh
LzEvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZPQAwQC
sHwoMA0EAgACMAcDBQMqDzQAMA0GCSqGSIb3DQEBCwUAA4IBAQCgknYGatLp11Qw
vhjU5Rs9V/r1LsDKmKD6Gf5TRbM/4IyWc5yCfszmBZCIP6vCwudo5nSycesJoqzr
IfrZvyo96uwS78ulDm14MXGD9cUaiXV69rRkDz9Luo4GNb5+FempZ25VxHJvzBiz
sNGQQRiYwDjt+HS0uUEs4TQW7tfYKsQ7hzZuXN/Hwaml/JlTk9UuGowE8lGRTi1W
LrhMtYa8a3/DVjXPCwYn67jwIsfa7VO3O9UhGZ+wfYxMHSTDgebgRIbPrsYHXGhn
vO0P/lpsu/UjSLJx4QGJo9Ko4k7quMV/T/XfYSYxisqeMiWotRSDJNRpBKN9Bfo3
D6LcHGmG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-fra.rpki-client.org