Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/2zkNt17JhZp-zyznAaO7BcTe7Us.roa
File: 2zkNt17JhZp-zyznAaO7BcTe7Us.roa (raw, json)
Hash identifier: FftTuqUOw/vUPCG1AYgRHW1e3Ul+P61k686aAsmhk1Y=
Subject key identifier: DB:39:0D:B7:5E:C9:85:9A:7E:CF:2C:E7:01:A3:BB:05:C4:DE:ED:4B
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 01856F42BCEFDF086CFB0B20E65F51245F5C
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/2zkNt17JhZp-zyznAaO7BcTe7Us.roa
Signing time: Sun 01 Jan 2023 21:35:22 +0000
ROA not before: Sun 01 Jan 2023 21:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49666
IP address blocks: 176.65.243.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:bc:ef:df:08:6c:fb:0b:20:e6:5f:51:24:5f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 21:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db390db75ec9859a7ecf2ce701a3bb05c4deed4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:9a:f0:31:6a:a5:77:e5:ef:1f:b1:6b:78:
c7:2d:40:35:12:04:d1:d8:07:89:89:05:5f:5d:e8:
36:d7:3b:0c:e8:3c:c0:95:fc:66:5f:40:8f:3d:b6:
84:e5:5f:72:ee:1f:46:45:b4:37:29:c9:b8:f5:35:
aa:a0:6a:a0:b8:1d:0f:aa:04:f9:f9:7b:f8:d4:b4:
c2:1b:ea:63:03:ee:7a:c9:6b:db:d8:6e:d4:4e:17:
72:23:69:b5:55:17:ff:fb:bd:73:ac:b1:a8:27:3f:
97:a5:c0:64:cf:32:d3:23:fc:b3:46:d3:cc:0a:ea:
32:a5:8a:99:d8:a8:0f:4c:b1:97:c3:4c:c9:9c:41:
f2:7f:07:a0:ae:67:c4:d8:55:84:54:09:eb:31:bb:
65:e0:22:26:c9:a9:cd:ca:1e:b0:a5:a1:01:e8:73:
ce:aa:2b:22:db:12:1d:7e:81:36:20:27:4d:25:19:
27:0b:90:de:61:df:bf:cc:f2:34:fa:38:5a:a5:7d:
c4:b9:3b:56:54:95:b0:ae:72:fe:64:55:a6:db:66:
56:03:0e:ff:86:8c:cb:8c:1c:1c:0e:41:42:2c:d2:
d0:d9:e7:99:fd:e9:c8:d0:bc:08:a1:b4:3f:fc:2d:
45:59:b8:f3:d1:db:29:14:09:1d:bf:c5:81:fd:3d:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:39:0D:B7:5E:C9:85:9A:7E:CF:2C:E7:01:A3:BB:05:C4:DE:ED:4B
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/2zkNt17JhZp-zyznAaO7BcTe7Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.243.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:92:06:ff:9c:f7:29:51:a3:06:03:cd:cf:d1:2a:e8:c6:52:
4e:0f:66:fc:ee:1f:53:ba:e5:c8:ef:07:de:98:78:41:1d:1b:
b8:2c:fa:33:90:a8:fa:1a:af:c5:60:85:a2:e3:03:9b:77:d6:
4c:62:31:cf:3c:f8:c2:a0:19:4c:82:96:09:16:c6:9d:49:c9:
74:db:d2:b4:a5:4d:2b:46:c9:72:81:aa:5b:d2:69:a7:3f:26:
c8:01:3b:40:e5:9f:b6:20:10:da:a2:ef:ce:fe:b8:cc:f0:f4:
ed:80:d2:8e:6e:d6:09:b8:80:84:b3:4e:b9:2d:61:45:a7:cd:
fe:8f:1b:ef:24:cf:8f:83:2e:6d:bc:d5:cb:08:86:e6:df:94:
fc:86:4d:d0:12:a3:96:13:8d:31:a0:98:1e:fa:9e:85:3b:a9:
0b:70:14:2a:22:b1:fa:65:a7:bb:0e:6b:d2:80:c4:43:fd:b0:
fb:4d:a2:31:a0:20:ad:5a:ed:64:03:07:c2:5e:10:7d:67:25:
2f:7f:de:06:47:5e:4a:eb:e2:45:31:dd:aa:b5:cb:ee:cf:6e:
e8:6c:82:ee:ec:7b:82:5c:85:c4:1c:8a:aa:26:19:29:7f:c3:
1f:90:64:1e:8f:d9:f9:18:64:0a:1e:9b:cf:20:52:04:e0:90:
bb:8d:97:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQrzv3whs+wsg5l9RJF9cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm
N2NmYjAwHhcNMjMwMTAxMjEzNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjM5MGRiNzVlYzk4NTlhN2VjZjJjZTcwMWEzYmIwNWM0ZGVlZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM2a8DFqpXfl7x+xa3jHLUA1EgTR
2AeJiQVfXeg21zsM6DzAlfxmX0CPPbaE5V9y7h9GRbQ3Kcm49TWqoGqguB0PqgT5
+Xv41LTCG+pjA+56yWvb2G7UThdyI2m1VRf/+71zrLGoJz+XpcBkzzLTI/yzRtPM
CuoypYqZ2KgPTLGXw0zJnEHyfwegrmfE2FWEVAnrMbtl4CImyanNyh6wpaEB6HPO
qisi2xIdfoE2ICdNJRknC5DeYd+/zPI0+jhapX3EuTtWVJWwrnL+ZFWm22ZWAw7/
hozLjBwcDkFCLNLQ2eeZ/enI0LwIobQ//C1FWbjz0dspFAkdv8WB/T2f7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNs5DbdeyYWafs8s5wGjuwXE3u1LMB8GA1UdIwQY
MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt
ZGM2NTU0ZmQxMjM1LzEvMnprTnQxN0poWnAtenl6bkFhTzdCY1RlN1VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1
LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsEHzMA0G
CSqGSIb3DQEBCwUAA4IBAQDVkgb/nPcpUaMGA83P0SroxlJOD2b87h9TuuXI7wfe
mHhBHRu4LPozkKj6Gq/FYIWi4wObd9ZMYjHPPPjCoBlMgpYJFsadScl029K0pU0r
Rslygapb0mmnPybIATtA5Z+2IBDaou/O/rjM8PTtgNKObtYJuICEs065LWFFp83+
jxvvJM+Pgy5tvNXLCIbm35T8hk3QEqOWE40xoJge+p6FO6kLcBQqIrH6Zae7DmvS
gMRD/bD7TaIxoCCtWu1kAwfCXhB9ZyUvf94GR15K6+JFMd2qtcvuz27obILu7HuC
XIXEHIqqJhkpf8MfkGQej9n5GGQKHpvPIFIE4JC7jZfQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:57 2024 by rpki-client on console-ams.rpki-client.org