Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SZntrC0MP2CEwZ19rU9wzgvfBS0.roa
File: SZntrC0MP2CEwZ19rU9wzgvfBS0.roa (raw, json)
Hash identifier: jmXSW6mRVf2Oiy4NiaM7zHgwqA2sCrqwzi94H0iIedo=
Subject key identifier: 49:99:ED:AC:2D:0C:3F:60:84:C1:9D:7D:AD:4F:70:CE:0B:DF:05:2D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0189B109F566866BFC2189EC7FEF596FD64E
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SZntrC0MP2CEwZ19rU9wzgvfBS0.roa
Signing time: Tue 01 Aug 2023 12:19:27 +0000
ROA not before: Tue 01 Aug 2023 12:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212396
IP address blocks: 45.85.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:09:f5:66:86:6b:fc:21:89:ec:7f:ef:59:6f:d6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Aug 1 12:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4999edac2d0c3f6084c19d7dad4f70ce0bdf052d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:a6:d9:cf:84:62:5c:03:ec:f9:e8:53:45:
e3:f0:87:f6:79:25:93:b4:15:e9:2f:5d:8f:3b:7b:
88:d9:28:67:10:24:46:fc:7b:46:48:a9:09:1e:bf:
69:92:db:74:f2:b9:10:af:80:43:59:c2:8e:2d:19:
d8:37:7b:6a:08:19:c7:3b:33:f2:13:df:84:b2:8f:
b7:88:99:8d:2b:b9:0b:8d:97:5a:a7:64:3e:fe:3f:
2e:54:8d:1b:9c:ed:91:cc:48:da:1e:b7:54:6c:37:
e1:fa:87:4d:c6:26:0f:3e:cb:21:0c:b3:b4:69:44:
2d:71:c7:e1:72:51:08:fb:a4:11:39:42:b1:de:0a:
67:a5:cc:8e:5d:02:0f:74:e4:8c:3d:fc:f3:f7:56:
dd:85:70:fa:c5:a9:ec:7e:ef:86:67:58:d5:78:bb:
35:42:d9:39:12:7a:fd:27:c9:5f:63:12:52:55:dc:
45:a7:bf:15:00:18:a3:91:74:6f:3f:39:b4:46:4a:
2e:83:c1:5a:e0:ff:21:65:e6:34:97:4d:d1:0b:5b:
a0:2c:f8:ac:3b:cc:ae:f9:aa:97:eb:a5:00:91:65:
34:cc:03:75:01:0c:84:5c:c3:e2:94:ad:d3:1a:14:
b5:da:ee:ff:ee:d5:12:17:87:13:0b:55:f9:77:96:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:ED:AC:2D:0C:3F:60:84:C1:9D:7D:AD:4F:70:CE:0B:DF:05:2D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SZntrC0MP2CEwZ19rU9wzgvfBS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.88.0/24
Signature Algorithm: sha256WithRSAEncryption
57:bb:74:c0:a9:86:43:e1:86:c1:a6:5a:f1:52:9a:b4:b3:b6:
b7:5f:e8:de:1b:b2:ae:25:2d:a3:26:40:77:04:e5:03:72:f1:
16:a5:27:1e:50:c5:68:bd:e2:30:c0:38:72:ff:f7:ca:42:48:
8c:59:1b:8f:d6:00:04:2d:01:df:36:3c:ac:d7:13:59:0d:5f:
c9:fd:1b:73:db:e3:69:91:d7:9a:3d:b2:94:0e:a8:7e:be:d2:
0a:6d:87:06:e6:1d:eb:34:25:71:1b:8f:6e:22:af:0d:d4:8a:
68:2e:21:d5:7d:47:79:60:ac:b0:ef:83:95:ad:83:d8:7d:6a:
f6:b2:8f:82:14:9b:3c:df:2b:7c:08:e3:f7:d4:30:63:d5:d1:
dd:13:bf:c2:91:31:15:68:cb:51:f1:09:a4:36:1b:56:01:2b:
4c:cc:6a:75:fd:bb:09:d3:ed:42:f7:b0:9c:16:de:41:71:76:
09:16:f4:07:db:cd:db:19:ac:f3:4a:60:c5:8f:d3:52:b2:bf:
7f:38:1c:6b:b5:c8:91:7f:40:3b:dd:a8:1a:21:0d:87:3e:9a:
0e:6f:ed:2e:0e:de:a2:92:09:0c:e7:06:f4:34:3f:08:35:d6:
70:63:c4:a3:08:d3:c6:5a:83:63:63:7a:b4:58:fa:55:5e:3e:
99:01:20:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmxCfVmhmv8IYnsf+9Zb9ZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwODAxMTIxOTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTk5ZWRhYzJkMGMzZjYwODRjMTlkN2RhZDRmNzBjZTBiZGYwNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSum2c+EYlwD7PnoU0Xj8If2eSWT
tBXpL12PO3uI2ShnECRG/HtGSKkJHr9pktt08rkQr4BDWcKOLRnYN3tqCBnHOzPy
E9+Eso+3iJmNK7kLjZdap2Q+/j8uVI0bnO2RzEjaHrdUbDfh+odNxiYPPsshDLO0
aUQtccfhclEI+6QROUKx3gpnpcyOXQIPdOSMPfzz91bdhXD6xansfu+GZ1jVeLs1
Qtk5Enr9J8lfYxJSVdxFp78VABijkXRvPzm0Rkoug8Fa4P8hZeY0l03RC1ugLPis
O8yu+aqX66UAkWU0zAN1AQyEXMPilK3TGhS12u7/7tUSF4cTC1X5d5bFdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEmZ7awtDD9ghMGdfa1PcM4L3wUtMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvU1pudHJDME1QMkNFd1oxOXJVOXd6Z3ZmQlMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVVYMA0G
CSqGSIb3DQEBCwUAA4IBAQBXu3TAqYZD4YbBplrxUpq0s7a3X+jeG7KuJS2jJkB3
BOUDcvEWpSceUMVoveIwwDhy//fKQkiMWRuP1gAELQHfNjys1xNZDV/J/Rtz2+Np
kdeaPbKUDqh+vtIKbYcG5h3rNCVxG49uIq8N1IpoLiHVfUd5YKyw74OVrYPYfWr2
so+CFJs83yt8COP31DBj1dHdE7/CkTEVaMtR8QmkNhtWAStMzGp1/bsJ0+1C97Cc
Ft5BcXYJFvQH283bGazzSmDFj9NSsr9/OBxrtciRf0A73agaIQ2HPpoOb+0uDt6i
kgkM5wb0ND8INdZwY8SjCNPGWoNjY3q0WPpVXj6ZASBA
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org