Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/Rzn9XixCTE91iXz2Gq5R9Qps4gg.roa
File: Rzn9XixCTE91iXz2Gq5R9Qps4gg.roa (raw, json)
Hash identifier: V++3I+wdwmnvFdMgwsZKpmllihA6xamkCdgxNbFzKa8=
Subject key identifier: 47:39:FD:5E:2C:42:4C:4F:75:89:7C:F6:1A:AE:51:F5:0A:6C:E2:08
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 01856FDDDFA2D87F96BFA350483D2236E815
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/Rzn9XixCTE91iXz2Gq5R9Qps4gg.roa
Signing time: Mon 02 Jan 2023 00:24:49 +0000
ROA not before: Mon 02 Jan 2023 00:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50754
IP address blocks: 185.134.76.0/22 maxlen: 24
2a06:ebc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:df:a2:d8:7f:96:bf:a3:50:48:3d:22:36:e8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Jan 2 00:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4739fd5e2c424c4f75897cf61aae51f50a6ce208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:01:c0:72:02:b8:17:b7:f5:89:65:5b:b4:99:
a2:49:ab:7d:81:c9:6c:8a:ae:00:b4:8e:03:56:3e:
27:a2:0c:30:91:00:a1:a9:b6:3a:2c:e9:26:1a:95:
0a:b5:c1:19:5b:fc:5c:b6:63:77:9d:d7:e7:10:e5:
2f:63:49:83:3f:b8:3e:a9:01:0a:bc:4d:a4:ff:5f:
60:2f:b9:34:43:02:16:c6:3f:88:fb:7d:6b:46:47:
f6:52:cd:ea:08:13:76:ce:a5:63:3f:94:86:f8:88:
3b:0c:f6:04:9b:31:2e:36:c6:6f:e6:d1:a7:ce:58:
dd:05:73:17:31:8d:2c:39:17:1a:a5:52:ec:39:a1:
c9:6f:ab:46:ce:4e:58:02:2d:2f:f6:f6:e7:17:31:
59:c1:65:28:86:53:b9:28:2f:03:d5:4e:6d:27:85:
55:51:a3:34:37:30:13:77:4e:36:7f:e5:15:5e:fa:
25:6f:78:f7:dd:6e:4e:3a:da:ae:ed:a8:e7:65:b7:
f0:b6:73:c6:73:e3:db:1b:15:bf:4b:ba:c6:71:b2:
7e:f2:77:47:5b:c2:5d:df:a9:7f:56:e6:f3:2c:34:
07:75:2c:f4:b1:de:89:9f:5f:23:93:76:30:d8:eb:
e3:06:2c:1b:90:ec:46:00:0a:a3:cb:86:30:22:2f:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:FD:5E:2C:42:4C:4F:75:89:7C:F6:1A:AE:51:F5:0A:6C:E2:08
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/Rzn9XixCTE91iXz2Gq5R9Qps4gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.76.0/22
IPv6:
2a06:ebc0::/29
Signature Algorithm: sha256WithRSAEncryption
c6:ab:48:6d:9f:c3:83:9c:8c:c7:9b:d1:5b:6e:10:9d:6a:f3:
6e:30:a4:68:4f:49:ae:0e:4f:1b:48:1f:4f:f0:15:5b:93:86:
ae:4d:28:d4:21:83:5b:7e:a7:af:54:86:cd:3c:80:fb:87:3f:
0c:9b:32:56:7d:1f:d2:33:26:cd:78:25:34:79:be:4a:e7:00:
d3:af:00:08:51:35:9c:e9:7d:7b:4e:d7:e2:6d:6e:bb:f7:16:
ea:4a:de:0a:eb:2b:a8:89:83:16:b2:7d:7c:7b:e2:1b:04:05:
aa:b6:71:1b:4b:43:cf:e1:2c:75:9d:b0:6d:ef:7f:8c:2e:01:
b3:b6:6b:1d:88:18:77:e8:e0:b4:8c:16:e5:70:8b:cf:6d:e1:
91:fb:02:af:08:e5:de:03:fe:84:ce:45:fd:da:01:87:52:d1:
7b:5d:84:5f:a6:f4:3e:f2:61:27:fe:46:b7:7d:73:e6:f6:dd:
b3:1b:08:6c:d5:48:b1:b6:e9:c5:e8:bf:5a:95:03:88:bd:57:
f2:e5:54:b9:3c:46:10:04:4c:fc:28:68:f6:df:fe:88:9d:9d:
0c:3a:7f:59:85:15:2e:40:19:9e:70:85:74:0e:c5:4e:fe:c4:
a3:a0:9f:41:53:7c:13:e1:b8:2f:d1:8f:14:01:c3:0f:33:ea:
c1:39:dc:9a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVv3d+i2H+Wv6NQSD0iNugVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh
MThmMjAwHhcNMjMwMTAyMDAyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzM5ZmQ1ZTJjNDI0YzRmNzU4OTdjZjYxYWFlNTFmNTBhNmNlMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAHAcgK4F7f1iWVbtJmiSat9gcls
iq4AtI4DVj4nogwwkQChqbY6LOkmGpUKtcEZW/xctmN3ndfnEOUvY0mDP7g+qQEK
vE2k/19gL7k0QwIWxj+I+31rRkf2Us3qCBN2zqVjP5SG+Ig7DPYEmzEuNsZv5tGn
zljdBXMXMY0sORcapVLsOaHJb6tGzk5YAi0v9vbnFzFZwWUohlO5KC8D1U5tJ4VV
UaM0NzATd042f+UVXvolb3j33W5OOtqu7ajnZbfwtnPGc+PbGxW/S7rGcbJ+8ndH
W8Jd36l/VubzLDQHdSz0sd6Jn18jk3Yw2OvjBiwbkOxGAAqjy4YwIi8XSwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEc5/V4sQkxPdYl89hquUfUKbOIIMB8GA1UdIwQY
MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt
ZTBhYmQ0ZDg0NTcxLzEvUnpuOVhpeENURTkxaVh6MkdxNVI5UXBzNGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx
LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYZMMA0E
AgACMAcDBQMqBuvAMA0GCSqGSIb3DQEBCwUAA4IBAQDGq0htn8ODnIzHm9FbbhCd
avNuMKRoT0muDk8bSB9P8BVbk4auTSjUIYNbfqevVIbNPID7hz8MmzJWfR/SMybN
eCU0eb5K5wDTrwAIUTWc6X17TtfibW679xbqSt4K6yuoiYMWsn18e+IbBAWqtnEb
S0PP4Sx1nbBt73+MLgGztmsdiBh36OC0jBblcIvPbeGR+wKvCOXeA/6EzkX92gGH
UtF7XYRfpvQ+8mEn/ka3fXPm9t2zGwhs1UixtunF6L9alQOIvVfy5VS5PEYQBEz8
KGj23/6InZ0MOn9ZhRUuQBmecIV0DsVO/sSjoJ9BU3wT4bgv0Y8UAcMPM+rBOdya
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:31 2024 by rpki-client on console-ams.rpki-client.org