Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/zcVZ46T9S9lP4rd3CiY9H7a2hbc.roa
File: zcVZ46T9S9lP4rd3CiY9H7a2hbc.roa (raw, json)
Hash identifier: kPPmt4lDFSAR0NPaWwCSo4+IwxelBxpSkpnLvdMrX+w=
Subject key identifier: CD:C5:59:E3:A4:FD:4B:D9:4F:E2:B7:77:0A:26:3D:1F:B6:B6:85:B7
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0187C2D8333D76EDEA1510B1236E684C0413
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/zcVZ46T9S9lP4rd3CiY9H7a2hbc.roa
Signing time: Thu 27 Apr 2023 13:12:41 +0000
ROA not before: Thu 27 Apr 2023 13:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 195.149.87.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 22 May 2023 18:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:d8:33:3d:76:ed:ea:15:10:b1:23:6e:68:4c:04:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Apr 27 13:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdc559e3a4fd4bd94fe2b7770a263d1fb6b685b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:26:8a:00:52:1a:a2:e5:bb:a7:0e:ce:71:
b4:8d:09:d1:30:cd:f9:dc:b4:fe:3e:73:d1:ef:ef:
81:c3:b5:df:c8:44:70:d7:65:d8:84:c9:1c:39:60:
08:f4:81:40:40:1a:e8:10:fd:1b:a8:6f:53:05:33:
bb:2f:94:f8:dc:e4:c4:38:76:15:cb:8f:d5:20:a7:
6c:f8:4c:30:a0:82:50:7c:02:01:a4:09:55:fe:0e:
3f:66:3e:d7:6e:8b:bc:34:3c:cf:87:ed:db:9c:d8:
1e:9b:c4:ee:eb:82:1b:ec:8f:5c:4a:f5:a5:42:33:
87:f0:4a:a0:fe:92:a1:2c:86:36:0d:b0:6c:8a:69:
6e:36:c5:05:04:29:0f:f8:9a:c3:cd:22:23:9c:00:
62:1f:d3:65:70:46:04:2b:ee:b0:40:ae:1b:1b:54:
26:8b:62:e9:8d:14:37:7a:88:a2:c8:6b:c7:ff:52:
16:dd:18:66:d9:a4:f6:dc:89:2b:74:d2:50:45:ab:
df:9c:63:76:61:d9:2b:14:c1:2c:50:c9:ea:8c:9a:
c3:4d:bd:58:9a:70:8a:c2:a4:c3:a6:2c:1d:48:17:
15:65:32:66:be:55:7f:f3:e4:47:71:d0:d3:63:20:
57:aa:1d:4e:b1:b1:e6:33:fd:a8:f4:4c:cb:bd:fc:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C5:59:E3:A4:FD:4B:D9:4F:E2:B7:77:0A:26:3D:1F:B6:B6:85:B7
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/zcVZ46T9S9lP4rd3CiY9H7a2hbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
195.149.87.0/24
IPv6:
2a09:7c40::-2a09:7c42:ffff:ffff:ffff:ffff:ffff:ffff
2a09:7c44::/30
Signature Algorithm: sha256WithRSAEncryption
54:98:ba:a1:c6:38:fb:13:64:10:4e:34:68:d5:cc:dd:52:77:
1a:3e:3d:99:cc:f2:f6:58:1a:55:51:00:df:61:ef:31:d4:7f:
c0:98:dd:57:c7:8c:38:d7:a5:47:06:80:28:15:03:95:ee:7f:
f2:91:34:4a:1c:43:8b:e0:86:3e:ff:a9:c8:87:c5:86:a5:78:
70:98:88:53:9b:6c:ff:19:ad:5e:48:42:25:14:e2:a1:98:91:
f3:1c:d6:7b:6f:aa:d3:53:61:bf:b6:88:dc:4c:e1:24:d1:de:
62:34:7e:e9:69:1a:56:cd:9b:ec:c7:d3:bd:4d:d2:b6:eb:cc:
13:52:1a:50:75:fa:a7:16:a9:fe:09:62:26:d7:8c:0d:59:ed:
b3:bc:2d:ed:21:79:19:13:b7:8f:fe:6b:02:63:ec:f9:40:20:
65:69:22:d0:2f:bc:1d:2d:e9:53:ff:a9:74:20:72:ce:70:6b:
82:cf:b0:2d:77:80:b8:24:73:60:90:9c:d6:70:0a:a0:96:ee:
08:73:b0:a0:ca:16:b5:9f:12:1a:01:a3:01:df:a5:15:e8:ed:
10:ee:5e:bf:e0:57:e7:08:4e:29:bf:c4:0f:de:12:77:7c:ed:
aa:3a:47:40:22:84:5f:4a:a7:9a:5c:e0:32:99:fb:aa:a5:68:
b6:b7:b7:0c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAYfC2DM9du3qFRCxI25oTAQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl
YWNkNDAwHhcNMjMwNDI3MTMxMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGM1NTllM2E0ZmQ0YmQ5NGZlMmI3NzcwYTI2M2QxZmI2YjY4NWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi14migBSGqLlu6cOznG0jQnRMM35
3LT+PnPR7++Bw7XfyERw12XYhMkcOWAI9IFAQBroEP0bqG9TBTO7L5T43OTEOHYV
y4/VIKds+EwwoIJQfAIBpAlV/g4/Zj7Xbou8NDzPh+3bnNgem8Tu64Ib7I9cSvWl
QjOH8Eqg/pKhLIY2DbBsimluNsUFBCkP+JrDzSIjnABiH9NlcEYEK+6wQK4bG1Qm
i2LpjRQ3eoiiyGvH/1IW3Rhm2aT23IkrdNJQRavfnGN2YdkrFMEsUMnqjJrDTb1Y
mnCKwqTDpiwdSBcVZTJmvlV/8+RHcdDTYyBXqh1OsbHmM/2o9EzLvfzuQQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFM3FWeOk/UvZT+K3dwomPR+2toW3MB8GA1UdIwQY
MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt
MTE5ZWZjYmIyMDIzLzEvemNWWjQ2VDlTOWxQNHJkM0NpWTlIN2EyaGJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz
LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTA4BAIAATAyAwQCLUPkAwQC
SnfAMAwDBAJQXMwDBABQXM4DBAK58lQDBAK5+pQDBADBy8oDBADDlVcwHQQCAAIw
FzAOAwUGKgl8QAMFACoJfEIDBQIqCXxEMA0GCSqGSIb3DQEBCwUAA4IBAQBUmLqh
xjj7E2QQTjRo1czdUncaPj2ZzPL2WBpVUQDfYe8x1H/AmN1Xx4w416VHBoAoFQOV
7n/ykTRKHEOL4IY+/6nIh8WGpXhwmIhTm2z/Ga1eSEIlFOKhmJHzHNZ7b6rTU2G/
tojcTOEk0d5iNH7paRpWzZvsx9O9TdK268wTUhpQdfqnFqn+CWIm14wNWe2zvC3t
IXkZE7eP/msCY+z5QCBlaSLQL7wdLelT/6l0IHLOcGuCz7Atd4C4JHNgkJzWcAqg
lu4Ic7Cgyha1nxIaAaMB36UV6O0Q7l6/4FfnCE4pv8QP3hJ3fO2qOkdAIoRfSqea
XOAymfuqpWi2t7cM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-fra.rpki-client.org