Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/ZEvBwZTBPCgQZK0njuoi4nBjwXo.roa
File: ZEvBwZTBPCgQZK0njuoi4nBjwXo.roa (raw, json)
Hash identifier: dqrisl+V463ScNrXj7igxl2/yUj0McnUv1CNatmqBB4=
Subject key identifier: 64:4B:C1:C1:94:C1:3C:28:10:64:AD:27:8E:EA:22:E2:70:63:C1:7A
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 01856F1DAEF44F30923C484108CD0935CF3E
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/ZEvBwZTBPCgQZK0njuoi4nBjwXo.roa
Signing time: Sun 01 Jan 2023 20:54:54 +0000
ROA not before: Sun 01 Jan 2023 20:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198957
IP address blocks: 46.30.136.0/24 maxlen: 24
46.30.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:ae:f4:4f:30:92:3c:48:41:08:cd:09:35:cf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jan 1 20:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=644bc1c194c13c281064ad278eea22e27063c17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:d0:c2:21:20:6a:90:17:47:77:1c:5d:2c:
86:be:23:1a:c7:43:ad:4d:8b:61:5c:71:97:89:ab:
df:75:19:36:65:17:ed:79:0c:16:55:9a:d0:b5:27:
e4:86:35:28:c5:5f:bd:b6:fc:6c:95:1f:ff:6e:62:
20:53:e8:b3:86:af:9a:85:b3:7b:cd:8f:ac:17:77:
2e:12:21:a3:ec:e8:a9:67:f7:29:bb:ce:e0:d7:61:
2b:8a:54:fe:02:60:2f:f9:e1:ea:d0:43:86:fe:e0:
20:b6:a6:35:dc:28:7c:7c:be:8f:fd:53:ea:11:b8:
e4:8b:a1:d6:4a:8d:47:6a:05:7f:de:d7:c9:c0:62:
ba:11:39:ac:4e:ad:4c:77:73:56:98:06:b8:be:b6:
12:61:26:c5:1d:78:04:26:a6:81:af:2f:20:f8:66:
b8:96:11:65:0f:02:ad:f5:63:ad:23:a8:11:e6:8d:
37:53:37:23:45:5d:9b:e2:70:97:e7:e6:1b:62:62:
fe:a7:57:3c:08:7b:5e:37:2f:ab:47:a8:83:59:0a:
b9:92:37:db:a3:28:dc:1b:71:b9:b1:fd:06:5d:c3:
fb:59:6f:b3:74:64:b1:37:1e:af:31:71:18:87:85:
37:24:67:6d:59:55:ca:7b:66:ed:2b:20:b8:3f:09:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:C1:C1:94:C1:3C:28:10:64:AD:27:8E:EA:22:E2:70:63:C1:7A
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/ZEvBwZTBPCgQZK0njuoi4nBjwXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.136.0/24
46.30.140.0/24
Signature Algorithm: sha256WithRSAEncryption
50:79:41:32:d7:81:43:52:75:27:90:80:12:4a:87:7b:fa:98:
47:d3:3f:55:d9:0a:a7:f0:7a:7e:c2:78:de:f4:bc:da:ee:66:
8e:40:02:5f:25:5c:64:c2:fd:f9:2e:b7:95:c6:51:8a:30:6d:
cf:7f:61:33:e6:7a:07:74:f1:d4:99:71:88:43:17:28:e4:aa:
2b:72:58:bd:88:e3:c3:50:c8:ed:79:2b:e7:4c:41:c0:11:97:
c5:e2:a4:b6:3c:34:bc:5d:02:32:b0:15:c6:71:45:c1:61:f8:
64:66:b3:24:7c:76:d8:f7:6c:a5:2a:4e:cb:e4:02:47:c3:02:
e8:1a:67:bb:b0:31:e0:2b:f0:13:0a:d4:3e:cd:ed:ad:5a:4c:
d6:5d:97:73:99:e3:e2:53:4a:39:dd:17:19:15:09:7b:17:3c:
79:77:66:60:f3:fb:9e:27:71:a4:d1:23:05:12:36:2c:f9:b7:
74:bb:7d:df:b9:46:ee:0e:b7:cc:9b:8e:c9:79:4b:40:bf:bf:
70:d7:3b:6d:2f:13:8c:6b:94:1c:50:49:0b:1a:aa:2e:e7:c1:
ed:6b:17:42:80:44:c5:25:e9:d1:06:21:0a:7c:76:fb:30:a6:
c9:f1:19:38:d0:12:ce:3b:1f:9d:43:5b:f8:f1:57:24:f6:07:
65:1a:db:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvHa70TzCSPEhBCM0JNc8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk
OWNmYmUwHhcNMjMwMTAxMjA1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDRiYzFjMTk0YzEzYzI4MTA2NGFkMjc4ZWVhMjJlMjcwNjNjMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWrQwiEgapAXR3ccXSyGviMax0Ot
TYthXHGXiavfdRk2ZRfteQwWVZrQtSfkhjUoxV+9tvxslR//bmIgU+izhq+ahbN7
zY+sF3cuEiGj7OipZ/cpu87g12ErilT+AmAv+eHq0EOG/uAgtqY13Ch8fL6P/VPq
Ebjki6HWSo1HagV/3tfJwGK6ETmsTq1Md3NWmAa4vrYSYSbFHXgEJqaBry8g+Ga4
lhFlDwKt9WOtI6gR5o03UzcjRV2b4nCX5+YbYmL+p1c8CHteNy+rR6iDWQq5kjfb
oyjcG3G5sf0GXcP7WW+zdGSxNx6vMXEYh4U3JGdtWVXKe2btKyC4PwkzJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGRLwcGUwTwoEGStJ47qIuJwY8F6MB8GA1UdIwQY
MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt
Y2ZiYmMxNDY3MWEzLzEvWkV2QndaVEJQQ2dRWkswbmp1b2k0bkJqd1hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz
LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALh6IAwQA
Lh6MMA0GCSqGSIb3DQEBCwUAA4IBAQBQeUEy14FDUnUnkIASSod7+phH0z9V2Qqn
8Hp+wnje9Lza7maOQAJfJVxkwv35LreVxlGKMG3Pf2Ez5noHdPHUmXGIQxco5Kor
cli9iOPDUMjteSvnTEHAEZfF4qS2PDS8XQIysBXGcUXBYfhkZrMkfHbY92ylKk7L
5AJHwwLoGme7sDHgK/ATCtQ+ze2tWkzWXZdzmePiU0o53RcZFQl7Fzx5d2Zg8/ue
J3Gk0SMFEjYs+bd0u33fuUbuDrfMm47JeUtAv79w1zttLxOMa5QcUEkLGqou58Ht
axdCgETFJenRBiEKfHb7MKbJ8Rk40BLOOx+dQ1v48Vck9gdlGtuc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:02 2024 by rpki-client on console-fra.rpki-client.org