Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zBlE9RWo0LPqJLbv0EyV9U187rM.roa
File: zBlE9RWo0LPqJLbv0EyV9U187rM.roa (raw, json)
Hash identifier: oz+n2CSZAdVUW1wDKiV/ipvPo0VlXZK33R4EkwzvtJY=
Subject key identifier: CC:19:44:F5:15:A8:D0:B3:EA:24:B6:EF:D0:4C:95:F5:4D:7C:EE:B3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186256AECB7257135E89A7A5529CC02C571
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zBlE9RWo0LPqJLbv0EyV9U187rM.roa
Signing time: Mon 06 Feb 2023 06:30:09 +0000
ROA not before: Mon 06 Feb 2023 06:30:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212411
IP address blocks: 45.129.133.0/24 maxlen: 24
188.241.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:6a:ec:b7:25:71:35:e8:9a:7a:55:29:cc:02:c5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 6 06:30:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc1944f515a8d0b3ea24b6efd04c95f54d7ceeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:91:77:77:03:ac:87:69:3e:fe:70:04:67:
ec:93:6c:b7:a6:37:f5:05:21:f9:0f:6d:4e:a7:47:
24:ee:21:4a:b9:80:db:3c:f5:03:04:a6:dd:2b:d4:
d3:fc:1d:c3:dc:2d:4b:73:7d:a2:9f:54:b5:60:d1:
ed:f1:7c:4f:83:f6:4f:04:8c:d5:ce:02:20:31:ce:
1a:00:51:61:71:ad:f7:ff:e3:08:d4:a1:85:99:01:
24:11:91:27:06:91:67:61:2e:12:7f:00:31:36:d3:
d1:29:0b:af:ef:50:be:24:04:ac:91:b5:c7:0e:69:
ee:c5:64:b1:0f:d9:2a:fd:60:7c:21:1a:fd:e0:b1:
b7:4b:46:5d:66:d4:f7:58:d7:fc:a3:34:c2:42:1d:
db:cc:ea:97:ea:ac:b7:9d:24:0a:8f:9e:47:55:f2:
e7:30:50:4e:67:86:4d:52:50:a9:ee:64:aa:25:36:
27:71:a5:ac:b8:6b:2c:54:05:81:fc:e3:c4:21:d5:
ea:3d:b6:bd:82:7b:66:c2:04:d2:b7:b0:8a:b6:e3:
dd:d2:e0:9c:fe:cc:9e:50:69:f8:23:26:9a:84:e1:
25:40:bd:0b:5d:38:0d:66:47:eb:3e:44:6b:20:de:
38:b1:ec:be:93:a7:8d:e4:a6:b6:d2:fb:81:af:98:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:19:44:F5:15:A8:D0:B3:EA:24:B6:EF:D0:4C:95:F5:4D:7C:EE:B3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zBlE9RWo0LPqJLbv0EyV9U187rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.133.0/24
188.241.242.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4e:02:46:27:61:c9:3f:f6:2a:7a:53:44:bd:04:e0:21:b6:
7c:89:9a:07:1a:fe:2e:e3:66:16:6c:ce:57:67:e3:c6:de:0e:
35:1c:23:3c:4c:26:73:45:e5:f3:61:f8:c2:38:f2:b0:49:b6:
94:09:a3:21:ff:b6:d1:1a:e6:99:27:78:27:83:49:88:99:fc:
4b:a4:1a:b4:70:b0:e0:59:ff:fe:51:b8:39:86:67:51:e4:62:
b6:93:fe:b8:33:af:33:b1:9a:51:97:6e:40:79:68:2e:59:82:
bf:be:59:01:aa:ca:f3:b0:7e:11:99:65:8b:1a:8f:b3:36:d3:
10:38:4f:53:f4:a6:40:cc:9d:c2:dd:cb:a8:de:97:11:57:70:
e2:67:78:3e:fe:e2:4b:8d:3c:65:e9:14:2d:8a:98:43:9e:a6:
33:c8:f0:f5:f4:37:e9:f7:e4:4f:61:b7:8b:bb:3f:46:32:3b:
a8:5c:ae:26:5f:5b:a7:00:78:87:6e:fc:66:2f:76:e8:4b:d5:
31:f8:e4:5a:6a:fe:47:08:b3:4a:6f:74:e3:6f:c0:8f:bd:bd:
ed:80:42:14:92:38:29:2e:5d:9d:e4:30:16:1b:4b:bd:e1:06:
bc:d1:ad:a7:58:fe:bc:dd:14:10:ee:a8:d2:1f:33:56:d9:4f:
22:f4:f0:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYlauy3JXE16Jp6VSnMAsVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMjA2MDYzMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzE5NDRmNTE1YThkMGIzZWEyNGI2ZWZkMDRjOTVmNTRkN2NlZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAiRd3cDrIdpPv5wBGfsk2y3pjf1
BSH5D21Op0ck7iFKuYDbPPUDBKbdK9TT/B3D3C1Lc32in1S1YNHt8XxPg/ZPBIzV
zgIgMc4aAFFhca33/+MI1KGFmQEkEZEnBpFnYS4SfwAxNtPRKQuv71C+JASskbXH
DmnuxWSxD9kq/WB8IRr94LG3S0ZdZtT3WNf8ozTCQh3bzOqX6qy3nSQKj55HVfLn
MFBOZ4ZNUlCp7mSqJTYncaWsuGssVAWB/OPEIdXqPba9gntmwgTSt7CKtuPd0uCc
/syeUGn4IyaahOElQL0LXTgNZkfrPkRrIN44sey+k6eN5Ka20vuBr5iD9QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMwZRPUVqNCz6iS279BMlfVNfO6zMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvekJsRTlSV28wTFBxSkxidjBFeVY5VTE4N3JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYGFAwQA
vPHyMA0GCSqGSIb3DQEBCwUAA4IBAQA1TgJGJ2HJP/YqelNEvQTgIbZ8iZoHGv4u
42YWbM5XZ+PG3g41HCM8TCZzReXzYfjCOPKwSbaUCaMh/7bRGuaZJ3gng0mImfxL
pBq0cLDgWf/+Ubg5hmdR5GK2k/64M68zsZpRl25AeWguWYK/vlkBqsrzsH4RmWWL
Go+zNtMQOE9T9KZAzJ3C3cuo3pcRV3DiZ3g+/uJLjTxl6RQtiphDnqYzyPD19Dfp
9+RPYbeLuz9GMjuoXK4mX1unAHiHbvxmL3boS9Ux+ORaav5HCLNKb3Tjb8CPvb3t
gEIUkjgpLl2d5DAWG0u94Qa80a2nWP683RQQ7qjSHzNW2U8i9PDh
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:04 2023 by rpki-client on console-fra.rpki-client.org