Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/zPYYlP-K1PSE5wCxsQCEd7zuvRk.roa
File: zPYYlP-K1PSE5wCxsQCEd7zuvRk.roa (raw, json)
Hash identifier: T42nfFIv799nFv6yYFG9hcAJGUiskWeFx1lcFJfdEIs=
Subject key identifier: CC:F6:18:94:FF:8A:D4:F4:84:E7:00:B1:B1:00:84:77:BC:EE:BD:19
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018C62B7B582631D48A08FAFBA45B015C066
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/zPYYlP-K1PSE5wCxsQCEd7zuvRk.roa
Signing time: Wed 13 Dec 2023 10:27:35 +0000
ROA not before: Wed 13 Dec 2023 10:27:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43618
IP address blocks: 134.255.241.0/24 maxlen: 24
5.183.150.0/24 maxlen: 24
185.161.186.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 14 Dec 2023 15:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:b7:b5:82:63:1d:48:a0:8f:af:ba:45:b0:15:c0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Dec 13 10:27:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccf61894ff8ad4f484e700b1b1008477bceebd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:b9:e8:39:7a:00:34:cc:67:f9:ca:8e:ce:
89:3f:b7:61:5b:77:8e:2d:a1:68:e2:c4:67:bb:0b:
7b:89:53:90:53:39:9b:b7:c6:3a:df:e1:e4:60:25:
7e:58:c1:09:4c:0d:0e:ff:4e:5c:bc:cd:fe:58:77:
2b:c4:46:d9:c0:a1:0e:40:35:79:93:81:9f:63:03:
23:61:4a:15:3f:c0:c2:6c:f9:92:0b:05:dd:5f:2f:
cc:d9:41:62:27:cf:b2:e1:8c:9f:46:6e:aa:8b:6d:
20:6b:62:40:f0:14:65:e7:4d:43:9b:a2:f5:6b:39:
8f:73:57:94:08:43:63:10:67:5a:93:9e:95:7e:cc:
7d:e0:9d:ba:c0:48:9b:1e:18:e0:d0:db:08:2f:e5:
d8:f6:51:61:7d:59:5f:4a:8f:51:2b:f0:eb:8b:70:
d3:99:39:69:05:63:03:87:04:48:39:46:c9:74:53:
b2:0f:6f:b5:39:fd:0c:74:8b:72:a8:b8:33:82:ec:
45:bc:b6:59:47:5b:52:b1:c7:87:fa:63:5d:fd:d2:
36:b5:a1:20:df:7d:dc:61:66:24:97:0b:cb:9a:8d:
3c:99:32:fe:14:8f:cd:e7:c6:2d:e9:04:b6:db:eb:
6f:7b:e4:af:8b:fc:80:82:91:75:be:14:d8:bd:d5:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F6:18:94:FF:8A:D4:F4:84:E7:00:B1:B1:00:84:77:BC:EE:BD:19
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/zPYYlP-K1PSE5wCxsQCEd7zuvRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.150.0/24
134.255.241.0/24
185.161.186.0/23
Signature Algorithm: sha256WithRSAEncryption
57:0b:49:5f:fd:f2:4a:37:dc:34:d8:11:ae:84:c1:09:e0:9f:
46:64:7a:d6:31:89:2b:49:a2:60:01:f9:20:5d:b9:e1:d4:ec:
6b:36:fc:a1:0d:a9:b2:b9:e1:fd:ac:f0:74:7d:1a:cd:29:9f:
80:c2:a5:3e:bf:fb:33:3b:0e:77:76:58:bf:f3:1d:78:9f:3b:
a4:4f:30:6e:0b:c9:1e:0a:1e:46:9b:cd:18:0d:80:c8:dc:56:
f2:5d:ec:e3:c5:24:da:f8:ae:e5:19:4b:2e:0b:48:44:41:0f:
a9:fa:f7:3e:69:55:3c:0d:02:b4:a8:4d:1e:0b:a2:7c:ca:31:
57:41:82:fa:82:03:b9:c9:0b:b4:76:3f:78:dc:e2:81:f4:3e:
f7:02:2d:8a:4a:77:24:ba:b5:88:b8:05:fd:e8:62:e5:5c:9b:
2a:76:b8:b3:0b:6d:2c:65:11:aa:7a:0c:4c:a5:fd:3a:52:1d:
24:87:9a:ac:a7:83:82:d9:be:89:b5:51:f1:dd:37:62:08:fe:
a5:fd:00:54:ed:ab:db:98:bb:3a:73:9b:77:e2:78:2d:c1:fb:
4a:f5:ee:38:9b:f6:0d:c2:79:e9:5e:63:51:aa:11:e4:08:5d:
52:15:82:05:54:66:a8:ec:8f:1c:94:9c:c0:11:6c:d5:96:34:
99:ad:c8:19
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYxit7WCYx1IoI+vukWwFcBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjMxMjEzMTAyNzM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2Y2MTg5NGZmOGFkNGY0ODRlNzAwYjFiMTAwODQ3N2JjZWViZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxW56Dl6ADTMZ/nKjs6JP7dhW3eO
LaFo4sRnuwt7iVOQUzmbt8Y63+HkYCV+WMEJTA0O/05cvM3+WHcrxEbZwKEOQDV5
k4GfYwMjYUoVP8DCbPmSCwXdXy/M2UFiJ8+y4YyfRm6qi20ga2JA8BRl501Dm6L1
azmPc1eUCENjEGdak56Vfsx94J26wEibHhjg0NsIL+XY9lFhfVlfSo9RK/Dri3DT
mTlpBWMDhwRIOUbJdFOyD2+1Of0MdItyqLgzguxFvLZZR1tSsceH+mNd/dI2taEg
333cYWYklwvLmo08mTL+FI/N58Yt6QS22+tve+Svi/yAgpF1vhTYvdWGowIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMz2GJT/itT0hOcAsbEAhHe87r0ZMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvelBZWWxQLUsxUFNFNXdDeHNRQ0VkN3p1dlJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbeWAwQA
hv/xAwQBuaG6MA0GCSqGSIb3DQEBCwUAA4IBAQBXC0lf/fJKN9w02BGuhMEJ4J9G
ZHrWMYkrSaJgAfkgXbnh1OxrNvyhDamyueH9rPB0fRrNKZ+AwqU+v/szOw53dli/
8x14nzukTzBuC8keCh5Gm80YDYDI3FbyXezjxSTa+K7lGUsuC0hEQQ+p+vc+aVU8
DQK0qE0eC6J8yjFXQYL6ggO5yQu0dj943OKB9D73Ai2KSnckurWIuAX96GLlXJsq
drizC20sZRGqegxMpf06Uh0kh5qsp4OC2b6JtVHx3TdiCP6l/QBU7avbmLs6c5t3
4ngtwftK9e44m/YNwnnpXmNRqhHkCF1SFYIFVGao7I8clJzAEWzVljSZrcgZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org