Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/ZtpkOI1ZNidJkkftscWiuEjFT9E.roa
File: ZtpkOI1ZNidJkkftscWiuEjFT9E.roa (raw, json)
Hash identifier: zf00YmVznQGCQx1ZRxU9Due0dytT2CTJ9WBISAq23+g=
Subject key identifier: 66:DA:64:38:8D:59:36:27:49:92:47:ED:B1:C5:A2:B8:48:C5:4F:D1
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 01857094E2C3459B773100F024224D912053
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/ZtpkOI1ZNidJkkftscWiuEjFT9E.roa
Signing time: Mon 02 Jan 2023 03:44:43 +0000
ROA not before: Mon 02 Jan 2023 03:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58075
IP address blocks: 45.150.244.0/22 maxlen: 22
185.248.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:e2:c3:45:9b:77:31:00:f0:24:22:4d:91:20:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Jan 2 03:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66da64388d593627499247edb1c5a2b848c54fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0d:11:f6:07:df:1e:a5:eb:83:05:65:b2:af:
7c:c9:b2:48:09:b2:3e:1b:5b:a6:0a:c3:bb:ac:ef:
63:f9:10:c5:50:13:c6:9a:b4:65:48:e7:eb:be:dc:
2b:b7:a6:fd:86:8a:d1:87:ce:46:18:d4:d4:90:36:
5e:06:03:ff:3f:60:fb:6f:ed:6f:71:58:de:1e:56:
9b:b8:49:c3:04:56:4b:b7:77:aa:a0:ba:ae:b4:f0:
be:a8:d1:2f:ea:84:bb:80:d7:25:b0:f4:9e:78:d6:
64:dc:4b:f9:fa:ba:eb:aa:ad:85:39:6f:bc:ba:fd:
fe:5b:3d:71:3b:a7:31:18:3c:49:2b:76:4e:4c:0e:
0f:36:9e:a6:b5:11:39:56:f3:c6:50:ed:ad:eb:64:
b1:df:7f:2a:6b:4a:62:8e:9b:8c:31:1e:e4:af:36:
5f:3a:a7:8d:58:4f:c9:a9:26:02:b2:f5:d5:6f:1b:
4d:b0:6e:fb:1e:a9:e5:9c:ec:13:2f:dd:ed:d8:78:
b6:d0:39:a2:c1:52:0b:c8:04:6f:6c:f6:f0:8d:4b:
c5:1c:2b:66:1a:a3:c8:8d:85:d9:ec:0c:78:0a:b5:
8b:7b:b9:dd:f9:0d:b4:92:20:5d:a4:38:7d:19:1c:
ab:19:5d:d4:e3:7d:02:25:de:9f:81:e8:cb:e5:2e:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DA:64:38:8D:59:36:27:49:92:47:ED:B1:C5:A2:B8:48:C5:4F:D1
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/ZtpkOI1ZNidJkkftscWiuEjFT9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.244.0/22
185.248.236.0/22
Signature Algorithm: sha256WithRSAEncryption
52:e8:96:3c:8b:cd:ff:ef:20:af:ca:bc:cb:16:aa:84:3c:72:
1d:ff:f7:c5:c0:a1:68:98:77:8c:61:3f:68:37:9a:8b:79:48:
df:d1:a5:a4:43:13:cc:67:9d:55:4a:0a:69:04:76:be:f9:44:
bd:7b:25:b6:70:65:cb:b8:d4:81:c9:6f:66:6b:d4:33:1a:15:
46:65:bb:dc:7f:58:5d:c7:d6:4d:fb:8b:e6:77:20:92:12:15:
1d:b5:2a:59:9a:34:8d:25:ae:2b:91:a7:3e:79:6c:c0:a9:94:
5c:60:ba:ec:ea:c8:d3:cd:ae:77:f7:13:63:0f:a2:79:b8:ee:
b0:01:96:94:a5:3c:ff:8a:1b:fb:06:e5:af:6e:28:34:86:cd:
8d:81:88:bb:5e:7f:34:eb:0a:40:a6:d8:fc:c1:99:d4:a8:7e:
69:cf:15:a4:e2:a0:26:90:ae:99:ab:89:57:12:6f:6a:c7:60:
6a:18:13:7e:25:57:e2:4c:d1:11:5c:d6:ad:74:69:d1:0f:24:
a7:88:51:84:bf:a3:b3:ea:1a:5d:b4:d8:84:89:52:6e:c7:eb:
ca:9b:d6:73:1f:6d:f2:be:d9:38:95:ef:7b:14:e5:19:80:1a:
38:33:c6:62:a8:cb:e9:f5:0b:1b:c8:57:49:c9:8a:8c:30:be:
bf:7e:c0:ee
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwlOLDRZt3MQDwJCJNkSBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2
OTBmZjIwHhcNMjMwMTAyMDM0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmRhNjQzODhkNTkzNjI3NDk5MjQ3ZWRiMWM1YTJiODQ4YzU0ZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+A0R9gffHqXrgwVlsq98ybJICbI+
G1umCsO7rO9j+RDFUBPGmrRlSOfrvtwrt6b9horRh85GGNTUkDZeBgP/P2D7b+1v
cVjeHlabuEnDBFZLt3eqoLqutPC+qNEv6oS7gNclsPSeeNZk3Ev5+rrrqq2FOW+8
uv3+Wz1xO6cxGDxJK3ZOTA4PNp6mtRE5VvPGUO2t62Sx338qa0pijpuMMR7krzZf
OqeNWE/JqSYCsvXVbxtNsG77HqnlnOwTL93t2Hi20DmiwVILyARvbPbwjUvFHCtm
GqPIjYXZ7Ax4CrWLe7nd+Q20kiBdpDh9GRyrGV3U430CJd6fgejL5S4CmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGbaZDiNWTYnSZJH7bHForhIxU/RMB8GA1UdIwQY
MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt
MTBkZDk1MmUyNDEyLzEvWnRwa09JMVpOaWRKa2tmdHNjV2l1RWpGVDlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy
LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZb0AwQC
ufjsMA0GCSqGSIb3DQEBCwUAA4IBAQBS6JY8i83/7yCvyrzLFqqEPHId//fFwKFo
mHeMYT9oN5qLeUjf0aWkQxPMZ51VSgppBHa++US9eyW2cGXLuNSByW9ma9QzGhVG
Zbvcf1hdx9ZN+4vmdyCSEhUdtSpZmjSNJa4rkac+eWzAqZRcYLrs6sjTza539xNj
D6J5uO6wAZaUpTz/ihv7BuWvbig0hs2NgYi7Xn806wpAptj8wZnUqH5pzxWk4qAm
kK6Zq4lXEm9qx2BqGBN+JVfiTNERXNatdGnRDySniFGEv6Oz6hpdtNiEiVJux+vK
m9ZzH23yvtk4le97FOUZgBo4M8ZiqMvp9QsbyFdJyYqMML6/fsDu
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:36 2023 by rpki-client on console-ams.rpki-client.org