Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/ZXHBRbB7Bx2HavzQ5rdtIMScZrg.roa
File: ZXHBRbB7Bx2HavzQ5rdtIMScZrg.roa (raw, json)
Hash identifier: Tpg1k8KJkER1kpxBTisy7XCh7NsjmwvhQFVtJD5letA=
Subject key identifier: 65:71:C1:45:B0:7B:07:1D:87:6A:FC:D0:E6:B7:6D:20:C4:9C:66:B8
Certificate issuer: /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial: 018BDDE4CD621C9AD6807A04D837F80CCE0A
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/ZXHBRbB7Bx2HavzQ5rdtIMScZrg.roa
Signing time: Fri 17 Nov 2023 15:27:21 +0000
ROA not before: Fri 17 Nov 2023 15:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203787
IP address blocks: 185.30.110.0/24 maxlen: 24
185.30.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:e4:cd:62:1c:9a:d6:80:7a:04:d8:37:f8:0c:ce:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Validity
Not Before: Nov 17 15:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6571c145b07b071d876afcd0e6b76d20c49c66b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:68:7c:86:be:78:73:53:e1:b1:a5:c7:72:
e5:29:fc:11:a6:4b:e6:4a:e8:d9:fd:c8:6b:d9:f9:
9e:4b:b2:8a:4c:54:22:b9:9e:ac:f0:ee:ed:f0:e0:
92:a1:97:22:ed:7e:a2:33:ae:1f:3a:15:7c:18:44:
11:d1:1b:d6:f2:31:96:76:9d:f3:af:de:c2:5b:e5:
1f:54:a0:41:aa:20:9f:ce:35:ba:1f:28:26:04:f4:
be:91:0f:55:f8:14:6a:76:c4:10:f7:09:c1:2c:52:
c4:94:7b:33:44:db:a3:9d:fd:a6:e9:26:ea:2b:f1:
cd:78:8c:0f:35:9d:18:88:ba:9a:a9:2e:72:cd:ac:
ac:97:c9:a6:08:20:3d:9f:08:94:32:32:16:89:94:
75:9f:aa:46:6e:4c:22:f5:50:6c:b4:77:02:29:30:
1b:21:31:87:69:19:ce:74:42:af:d6:a5:09:d1:ef:
9c:8e:e4:87:ad:06:47:99:f9:bb:c1:b9:76:aa:8c:
22:31:20:f8:c6:34:5f:c7:66:c9:0a:5e:ec:76:1c:
5a:7b:28:24:8a:0a:4d:03:d4:b2:cd:60:b3:b8:70:
1c:a0:67:0b:9f:7f:75:24:b8:18:97:b4:92:08:f3:
da:5f:01:43:b1:7e:e0:cd:aa:10:25:23:ef:a5:4b:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:71:C1:45:B0:7B:07:1D:87:6A:FC:D0:E6:B7:6D:20:C4:9C:66:B8
X509v3 Authority Key Identifier:
keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/ZXHBRbB7Bx2HavzQ5rdtIMScZrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.110.0/23
Signature Algorithm: sha256WithRSAEncryption
89:9c:fa:d9:27:fe:c3:7c:e4:82:d2:16:8e:f2:43:c6:46:36:
22:f1:90:94:7b:87:65:09:20:1f:70:2c:1f:3d:b4:69:a5:6c:
7e:41:18:cb:58:06:2a:5e:0a:40:b5:dc:fa:86:51:d3:a4:3a:
ee:d5:eb:31:b8:1e:0c:20:62:a8:72:84:c2:52:b3:0c:3e:cb:
04:d6:23:e2:7b:71:23:b5:72:69:fd:18:27:f0:aa:cb:c9:35:
52:2b:e5:9e:2e:63:cc:01:bd:1e:d7:c3:39:5c:65:6c:29:2c:
1b:c8:c9:e9:e6:53:91:1b:c6:4e:f6:94:6d:c9:4e:e5:a1:c8:
d3:63:b8:19:c1:ae:f5:9e:88:ab:fd:83:c6:fa:eb:95:4b:bf:
0c:a4:3d:9f:de:7f:a0:e3:0b:13:8f:05:21:0f:89:b8:49:49:
d4:ab:e0:80:a9:09:93:0c:30:15:df:d7:52:b6:6e:63:2a:24:
b4:73:ab:9c:62:a5:ef:f8:55:2f:87:fe:f5:68:ef:78:78:bc:
c8:25:1e:da:9d:4b:ed:76:2a:b8:a3:6d:fa:45:16:03:41:a0:
5e:c4:63:f1:f6:81:f7:0b:57:c0:d4:4b:28:2b:93:b6:9f:a1:
10:44:09:f1:8c:dc:53:49:2b:24:6d:60:bc:e1:21:48:d3:ab:
b6:23:fd:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvd5M1iHJrWgHoE2Df4DM4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NGQ0ZmU3ODBmZTQ1MzMwNzgwZGViNmVjMzg0Y2I5NDkz
ZjJkZjIwHhcNMjMxMTE3MTUyNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTcxYzE0NWIwN2IwNzFkODc2YWZjZDBlNmI3NmQyMGM0OWM2NmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1dofIa+eHNT4bGlx3LlKfwRpkvm
SujZ/chr2fmeS7KKTFQiuZ6s8O7t8OCSoZci7X6iM64fOhV8GEQR0RvW8jGWdp3z
r97CW+UfVKBBqiCfzjW6HygmBPS+kQ9V+BRqdsQQ9wnBLFLElHszRNujnf2m6Sbq
K/HNeIwPNZ0YiLqaqS5yzaysl8mmCCA9nwiUMjIWiZR1n6pGbkwi9VBstHcCKTAb
ITGHaRnOdEKv1qUJ0e+cjuSHrQZHmfm7wbl2qowiMSD4xjRfx2bJCl7sdhxaeygk
igpNA9SyzWCzuHAcoGcLn391JLgYl7SSCPPaXwFDsX7gzaoQJSPvpUvaZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGVxwUWwewcdh2r80Oa3bSDEnGa4MB8GA1UdIwQY
MBaAFAVNT+eA/kUzB4Detuw4TLlJPy3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlUxUDU0RC1SVE1IZ042MjdEaE11VWtfTGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xZjNmMTEtNTQ5OS00YzdiLWIyZTQt
MDUxYjg5ODQ4NjZlLzEvWlhIQlJiQjdCeDJIYXZ6UTVyZHRJTVNjWnJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xZjNmMTEtNTQ5OS00YzdiLWIyZTQtMDUxYjg5ODQ4NjZl
LzEvQlUxUDU0RC1SVE1IZ042MjdEaE11VWtfTGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuR5uMA0G
CSqGSIb3DQEBCwUAA4IBAQCJnPrZJ/7DfOSC0haO8kPGRjYi8ZCUe4dlCSAfcCwf
PbRppWx+QRjLWAYqXgpAtdz6hlHTpDru1esxuB4MIGKocoTCUrMMPssE1iPie3Ej
tXJp/Rgn8KrLyTVSK+WeLmPMAb0e18M5XGVsKSwbyMnp5lORG8ZO9pRtyU7locjT
Y7gZwa71noir/YPG+uuVS78MpD2f3n+g4wsTjwUhD4m4SUnUq+CAqQmTDDAV39dS
tm5jKiS0c6ucYqXv+FUvh/71aO94eLzIJR7anUvtdiq4o236RRYDQaBexGPx9oH3
C1fA1EsoK5O2n6EQRAnxjNxTSSskbWC84SFI06u2I/09
-----END CERTIFICATE-----
Generated at Fri Nov 17 16:40:09 2023 by rpki-client on console-ams.rpki-client.org