Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Zo0OkTLHTWaEtWIOiCAtCsbTsSQ.roa
File: Zo0OkTLHTWaEtWIOiCAtCsbTsSQ.roa (raw, json)
Hash identifier: mti561mPBDnEF+4rw3XZVZVAT2//mtEtUjbKZLyUVKk=
Subject key identifier: 66:8D:0E:91:32:C7:4D:66:84:B5:62:0E:88:20:2D:0A:C6:D3:B1:24
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01871CA5E6FB84F11B17F70D6227731FEB13
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Zo0OkTLHTWaEtWIOiCAtCsbTsSQ.roa
Signing time: Sun 26 Mar 2023 06:40:47 +0000
ROA not before: Sun 26 Mar 2023 06:40:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 264409
IP address blocks: 45.149.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1c:a5:e6:fb:84:f1:1b:17:f7:0d:62:27:73:1f:eb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Mar 26 06:40:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=668d0e9132c74d6684b5620e88202d0ac6d3b124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:0d:2b:12:0d:12:22:6d:e1:7b:f2:09:67:
10:4c:13:43:ee:04:be:5d:df:1e:1f:f6:54:3b:42:
eb:e6:88:3f:a3:3f:ca:f4:fd:fe:00:0f:23:a3:d1:
8b:96:d8:85:fd:5e:76:1b:4b:65:a6:30:ff:fe:c1:
23:f2:d5:4c:ae:fc:c8:d5:7d:b2:75:39:00:69:93:
5a:6d:09:c1:82:4d:4a:2c:0a:7e:43:e6:34:a6:39:
e9:e8:99:34:e6:b9:c0:ed:15:09:73:03:ce:84:d0:
4c:15:2a:b7:1c:47:13:fb:ad:99:8b:03:ba:af:85:
8e:71:81:e0:d5:13:4a:9c:5f:8c:17:d4:c1:6e:f8:
a6:b2:b3:5d:a7:8b:ea:0b:2e:9c:83:fc:5d:b5:55:
87:db:f4:47:98:ac:fc:f8:d0:ff:b3:7f:3d:87:d9:
f3:1f:71:1d:7f:38:a4:95:d1:1c:5c:7d:f5:76:f2:
c2:11:37:d3:70:f3:ec:0c:b9:90:ad:19:4b:a7:58:
f2:09:9a:af:f9:ad:68:d3:08:5d:15:81:20:62:a6:
be:58:8f:3a:05:13:95:2c:65:c1:cc:36:fb:0b:5c:
fa:b8:f8:7c:37:17:1f:33:0e:8f:cc:4b:04:19:dd:
d2:b3:29:f0:61:47:f4:6d:0d:af:6e:50:0f:d1:2b:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8D:0E:91:32:C7:4D:66:84:B5:62:0E:88:20:2D:0A:C6:D3:B1:24
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Zo0OkTLHTWaEtWIOiCAtCsbTsSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.95.0/24
Signature Algorithm: sha256WithRSAEncryption
93:3f:14:b4:ef:8c:00:ca:e8:e0:c4:e5:8d:e7:7a:70:cf:54:
af:fd:bd:12:d1:68:4b:48:60:bc:1b:07:0d:d6:ef:57:95:f4:
2c:01:0a:51:ed:1d:0d:04:5d:77:90:37:a2:1c:ce:c0:79:8f:
b4:1e:60:6d:60:54:af:cd:bd:2f:93:d6:6b:6a:ce:47:a0:ec:
9e:ea:b5:6e:b2:e4:fa:44:17:90:21:7e:3e:97:25:58:a2:19:
38:6a:3c:46:bb:a1:df:f4:a8:42:19:1b:0c:1d:08:6b:59:7d:
29:db:69:db:50:ba:a3:ba:2e:4a:d9:88:03:b4:7c:c0:81:a8:
b1:29:2c:2a:6c:6c:55:99:50:a4:c9:66:d9:98:7f:29:3c:01:
26:2b:8b:6c:64:47:b5:65:1f:22:09:c0:2d:52:96:8a:b5:12:
9a:33:01:11:4d:dc:bd:87:92:bc:57:58:0a:d5:5f:23:82:1f:
ff:fa:83:5f:67:42:0d:10:82:8b:9c:cf:93:59:a4:32:80:52:
05:08:17:d2:61:7e:f3:d7:ab:88:a2:f5:85:4e:5a:2d:ce:82:
a6:bd:9d:0e:bf:58:ea:8f:0a:23:a5:5f:7a:3f:fc:b6:d3:4f:
8f:a9:ab:b2:f0:7b:93:2a:fe:48:0c:1f:6c:7c:82:40:93:dd:
8d:2d:ef:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYccpeb7hPEbF/cNYidzH+sTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjMwMzI2MDY0MDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjhkMGU5MTMyYzc0ZDY2ODRiNTYyMGU4ODIwMmQwYWM2ZDNiMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzYNKxINEiJt4XvyCWcQTBND7gS+
Xd8eH/ZUO0Lr5og/oz/K9P3+AA8jo9GLltiF/V52G0tlpjD//sEj8tVMrvzI1X2y
dTkAaZNabQnBgk1KLAp+Q+Y0pjnp6Jk05rnA7RUJcwPOhNBMFSq3HEcT+62ZiwO6
r4WOcYHg1RNKnF+MF9TBbvimsrNdp4vqCy6cg/xdtVWH2/RHmKz8+ND/s389h9nz
H3EdfzikldEcXH31dvLCETfTcPPsDLmQrRlLp1jyCZqv+a1o0whdFYEgYqa+WI86
BROVLGXBzDb7C1z6uPh8NxcfMw6PzEsEGd3SsynwYUf0bQ2vblAP0Sum4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGaNDpEyx01mhLViDoggLQrG07EkMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvWm8wT2tUTEhUV2FFdFdJT2lDQXRDc2JUc1NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZVfMA0G
CSqGSIb3DQEBCwUAA4IBAQCTPxS074wAyujgxOWN53pwz1Sv/b0S0WhLSGC8GwcN
1u9XlfQsAQpR7R0NBF13kDeiHM7AeY+0HmBtYFSvzb0vk9Zras5HoOye6rVusuT6
RBeQIX4+lyVYohk4ajxGu6Hf9KhCGRsMHQhrWX0p22nbULqjui5K2YgDtHzAgaix
KSwqbGxVmVCkyWbZmH8pPAEmK4tsZEe1ZR8iCcAtUpaKtRKaMwERTdy9h5K8V1gK
1V8jgh//+oNfZ0INEIKLnM+TWaQygFIFCBfSYX7z16uIovWFTlotzoKmvZ0Ov1jq
jwojpV96P/y200+Pqauy8HuTKv5IDB9sfIJAk92NLe9N
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:17 2024 by rpki-client on console-fra.rpki-client.org