Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/z6es9Ae1RwPBVIZcEHOzHiJ4osw.roa
File: z6es9Ae1RwPBVIZcEHOzHiJ4osw.roa (raw, json)
Hash identifier: imBXPJt/xXI95PVTjUPI/qaLbBiZ0bI//PzVkZseQJI=
Subject key identifier: CF:A7:AC:F4:07:B5:47:03:C1:54:86:5C:10:73:B3:1E:22:78:A2:CC
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018681AFA64E2F6B47F33A5720B7CB1A9C7A
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/z6es9Ae1RwPBVIZcEHOzHiJ4osw.roa
Signing time: Fri 24 Feb 2023 04:30:17 +0000
ROA not before: Fri 24 Feb 2023 04:30:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 95.214.177.0/24 maxlen: 24
45.132.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Feb 2023 17:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:81:af:a6:4e:2f:6b:47:f3:3a:57:20:b7:cb:1a:9c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Feb 24 04:30:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfa7acf407b54703c154865c1073b31e2278a2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:90:10:50:60:4a:37:5a:41:bf:ea:90:c3:
d9:1a:8b:89:08:ae:e0:b8:de:b1:44:22:e3:14:04:
b1:56:02:d9:ee:5f:b4:aa:2b:35:51:33:db:52:42:
21:63:f4:5a:8c:10:e9:32:7e:2e:8e:be:4c:e0:00:
73:d7:76:6d:fe:59:a0:1d:a3:5d:9e:df:7f:4a:9d:
26:98:89:74:f0:50:77:c2:0c:67:ea:50:2c:4c:f9:
9c:ce:f0:10:a7:e2:ed:a2:a2:fb:ff:b1:24:c6:e1:
90:a4:b5:0c:03:f1:ee:52:7a:65:56:99:87:7a:a3:
26:7d:17:a6:6c:a2:25:b0:ce:21:7b:3b:2c:a8:b3:
93:40:83:20:c5:9a:d4:79:b2:ab:86:dc:eb:ee:6a:
8c:f8:c1:c5:e2:21:ed:ef:d0:14:1d:ad:be:3b:c1:
f7:46:d2:c8:42:77:b4:4b:29:6c:7f:3f:c2:d9:d9:
cd:81:55:17:ee:28:f4:0b:f7:90:0c:9a:49:d4:2b:
b2:97:86:74:4a:00:72:c4:99:76:7e:4a:4a:9b:91:
52:ed:08:e5:1f:b2:84:b5:02:cf:73:ea:a5:53:49:
44:af:7f:96:b0:d0:f0:38:d2:ee:1b:48:80:b1:86:
ab:ae:1f:7c:91:7e:53:02:62:8d:66:9e:c5:a5:57:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A7:AC:F4:07:B5:47:03:C1:54:86:5C:10:73:B3:1E:22:78:A2:CC
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/z6es9Ae1RwPBVIZcEHOzHiJ4osw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
95.214.177.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0d:50:f4:f8:57:0a:31:ad:98:83:b9:54:74:af:e4:ca:6c:
ff:17:61:0d:82:67:18:75:16:1d:97:90:7a:ca:a6:b4:82:0e:
0d:ac:61:6b:a0:30:65:07:75:7a:8b:a7:6a:83:0e:0c:18:b5:
99:5e:e6:1f:d0:4e:c7:a1:06:15:9c:29:77:9e:52:5a:0b:2b:
d1:87:14:fd:13:25:46:04:0f:5b:75:d1:bb:d2:f1:fe:67:b5:
b5:d7:ac:73:ea:1b:ed:dc:4d:d3:eb:c8:92:06:a8:30:d8:ea:
11:c7:4c:8d:60:67:b4:9d:1f:22:61:fe:fc:e9:cd:fb:4e:b9:
90:37:cf:cd:e0:6c:50:cd:a1:d9:6f:45:5c:9d:15:d4:92:07:
39:cc:a9:ea:4e:05:2b:31:0c:48:0c:b2:97:b5:7b:ae:f7:5e:
b1:7c:f5:e1:97:48:60:9c:78:ce:25:e8:b4:6b:3c:5a:b3:d6:
80:de:70:74:27:63:19:fe:e9:d1:4a:b9:d6:f5:0b:e6:50:b7:
eb:f6:1b:fe:a6:a6:db:07:0c:e0:4b:71:d3:de:a6:7b:f9:3e:
2d:9a:ad:03:85:67:b8:b5:a2:3e:e8:24:a6:d6:0f:16:ab:b1:
a5:45:ea:54:b0:47:19:43:47:8e:c1:40:1e:19:c3:ed:ea:98:
06:49:d2:5b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYaBr6ZOL2tH8zpXILfLGpx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwMjI0MDQzMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmE3YWNmNDA3YjU0NzAzYzE1NDg2NWMxMDczYjMxZTIyNzhhMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnmQEFBgSjdaQb/qkMPZGouJCK7g
uN6xRCLjFASxVgLZ7l+0qis1UTPbUkIhY/RajBDpMn4ujr5M4ABz13Zt/lmgHaNd
nt9/Sp0mmIl08FB3wgxn6lAsTPmczvAQp+LtoqL7/7EkxuGQpLUMA/HuUnplVpmH
eqMmfRembKIlsM4hezssqLOTQIMgxZrUebKrhtzr7mqM+MHF4iHt79AUHa2+O8H3
RtLIQne0Sylsfz/C2dnNgVUX7ij0C/eQDJpJ1Cuyl4Z0SgByxJl2fkpKm5FS7Qjl
H7KEtQLPc+qlU0lEr3+WsNDwONLuG0iAsYarrh98kX5TAmKNZp7FpVfpDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM+nrPQHtUcDwVSGXBBzsx4ieKLMMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvejZlczlBZTFSd1BCVklaY0VIT3pIaUo0b3N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYRQAwQA
X9axMA0GCSqGSIb3DQEBCwUAA4IBAQBwDVD0+FcKMa2Yg7lUdK/kymz/F2ENgmcY
dRYdl5B6yqa0gg4NrGFroDBlB3V6i6dqgw4MGLWZXuYf0E7HoQYVnCl3nlJaCyvR
hxT9EyVGBA9bddG70vH+Z7W116xz6hvt3E3T68iSBqgw2OoRx0yNYGe0nR8iYf78
6c37TrmQN8/N4GxQzaHZb0VcnRXUkgc5zKnqTgUrMQxIDLKXtXuu916xfPXhl0hg
nHjOJei0azxas9aA3nB0J2MZ/unRSrnW9QvmULfr9hv+pqbbBwzgS3HT3qZ7+T4t
mq0DhWe4taI+6CSm1g8Wq7GlRepUsEcZQ0eOwUAeGcPt6pgGSdJb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org