Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/ZiQt7QrxG_xeY8z8p6U8DBmmJP8.roa
File: ZiQt7QrxG_xeY8z8p6U8DBmmJP8.roa (raw, json)
Hash identifier: dodL08VeLtB6HsjZ3GvvdFVKFwvRq7vIPf/sTjnPRH4=
Subject key identifier: 66:24:2D:ED:0A:F1:1B:FC:5E:63:CC:FC:A7:A5:3C:0C:19:A6:24:FF
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01886C0238BDC169D4DA9D5EBF04FCE92F10
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/ZiQt7QrxG_xeY8z8p6U8DBmmJP8.roa
Signing time: Tue 30 May 2023 09:34:24 +0000
ROA not before: Tue 30 May 2023 09:34:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 212.8.229.0/24 maxlen: 24
45.134.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 10:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:02:38:bd:c1:69:d4:da:9d:5e:bf:04:fc:e9:2f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: May 30 09:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66242ded0af11bfc5e63ccfca7a53c0c19a624ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:83:a2:a5:3f:1a:42:38:55:0f:36:8c:3b:
33:3b:37:56:88:8c:8a:b1:14:54:5c:70:44:3d:b5:
97:b4:32:e5:81:25:0b:7e:67:eb:f3:52:f7:7a:a5:
9e:05:af:c0:e0:1e:eb:bb:7f:f8:06:57:55:c9:86:
d5:92:d2:1c:c6:1d:13:95:af:26:d7:95:9e:a5:da:
5d:30:13:f6:0b:5f:1d:64:86:5f:95:ee:27:de:56:
e3:d2:8d:1c:ab:2d:65:18:5c:f3:82:44:03:3d:2a:
18:d1:02:d7:64:25:5d:1b:9b:b2:a5:a1:28:7d:cd:
9d:72:19:48:43:0f:01:99:27:fb:cc:25:46:df:82:
44:ea:69:64:f5:ff:8c:99:f2:bf:b3:6a:f1:69:e1:
15:24:75:71:19:b8:35:5b:cf:e1:8a:8f:55:b3:22:
a1:19:b5:07:fe:ee:e9:36:7e:14:0f:67:4a:cc:c7:
0a:5c:1b:79:3c:4d:91:3d:a8:46:10:69:5e:75:30:
23:2b:5b:1d:ed:fe:68:45:c3:04:4d:fd:92:f5:49:
dd:14:b3:ef:dd:4e:c5:a7:5c:1d:3b:94:03:62:d4:
a5:23:86:fa:43:51:4a:5c:5f:ef:ee:0b:73:56:d2:
64:c5:ad:13:15:04:e3:07:40:d9:0b:74:15:bc:8f:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:24:2D:ED:0A:F1:1B:FC:5E:63:CC:FC:A7:A5:3C:0C:19:A6:24:FF
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/ZiQt7QrxG_xeY8z8p6U8DBmmJP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.14.0/24
212.8.229.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0e:00:57:fb:62:3e:12:88:84:00:0a:28:19:c7:d8:09:13:
b9:55:64:ed:52:b8:57:0d:08:3c:18:74:1a:87:34:69:8a:57:
4a:1c:01:a9:1b:05:55:61:f3:c7:94:54:1b:d7:00:cc:9a:49:
01:1f:e3:69:6a:a1:85:1a:fd:09:40:b6:6e:db:f7:a9:12:31:
e6:72:24:aa:21:56:35:07:4d:37:91:23:55:d1:2a:78:89:12:
77:e0:bf:3d:7b:46:57:ad:fe:f3:23:7d:51:2d:40:1d:f8:14:
14:db:48:9e:55:26:cc:a5:b0:fd:66:c9:de:77:5c:6a:c5:ff:
68:9c:20:3f:c8:e7:83:9a:8a:20:92:63:52:02:7f:ed:79:5e:
83:94:14:a3:b7:21:57:13:52:17:93:87:7c:51:a3:d7:ca:f3:
bd:8e:7c:81:23:a9:cc:61:1c:01:db:3d:59:86:f3:83:e2:78:
b8:de:a4:82:c2:7a:a6:ce:e5:0d:8d:e9:5a:42:c7:6d:cf:10:
d6:1f:e2:66:df:ca:b0:39:89:81:a8:bf:03:21:64:71:88:29:
21:32:20:69:77:40:71:b4:14:22:7d:db:c8:90:d9:30:c0:05:
60:fe:c4:87:e5:19:12:ad:52:3e:2c:07:62:4d:df:2e:66:88:
61:3e:cc:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYhsAji9wWnU2p1evwT86S8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm
ZGQ0YzYwHhcNMjMwNTMwMDkzNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjI0MmRlZDBhZjExYmZjNWU2M2NjZmNhN2E1M2MwYzE5YTYyNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOeDoqU/GkI4VQ82jDszOzdWiIyK
sRRUXHBEPbWXtDLlgSULfmfr81L3eqWeBa/A4B7ru3/4BldVyYbVktIcxh0Tla8m
15WepdpdMBP2C18dZIZfle4n3lbj0o0cqy1lGFzzgkQDPSoY0QLXZCVdG5uypaEo
fc2dchlIQw8BmSf7zCVG34JE6mlk9f+MmfK/s2rxaeEVJHVxGbg1W8/hio9VsyKh
GbUH/u7pNn4UD2dKzMcKXBt5PE2RPahGEGledTAjK1sd7f5oRcMETf2S9UndFLPv
3U7Fp1wdO5QDYtSlI4b6Q1FKXF/v7gtzVtJkxa0TFQTjB0DZC3QVvI+rzQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGYkLe0K8Rv8XmPM/KelPAwZpiT/MB8GA1UdIwQY
MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt
MDQyNDQ2YjcwZmIxLzEvWmlRdDdRcnhHX3hlWTh6OHA2VThEQm1tSlA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx
LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYYOAwQA
1AjlMA0GCSqGSIb3DQEBCwUAA4IBAQCTDgBX+2I+EoiEAAooGcfYCRO5VWTtUrhX
DQg8GHQahzRpildKHAGpGwVVYfPHlFQb1wDMmkkBH+NpaqGFGv0JQLZu2/epEjHm
ciSqIVY1B003kSNV0Sp4iRJ34L89e0ZXrf7zI31RLUAd+BQU20ieVSbMpbD9Zsne
d1xqxf9onCA/yOeDmoogkmNSAn/teV6DlBSjtyFXE1IXk4d8UaPXyvO9jnyBI6nM
YRwB2z1ZhvOD4ni43qSCwnqmzuUNjelaQsdtzxDWH+Jm38qwOYmBqL8DIWRxiCkh
MiBpd0BxtBQifdvIkNkwwAVg/sSH5RkSrVI+LAdiTd8uZohhPsxn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:34 2024 by rpki-client on console-fra.rpki-client.org