Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/zQAEYIouGycSa0VInP8fvgwCzds.roa
File: zQAEYIouGycSa0VInP8fvgwCzds.roa (raw, json)
Hash identifier: bGXtia0iTpRvY9J7yjRhL3EsDvUPr2KgeFQxYP86BSM=
Subject key identifier: CD:00:04:60:8A:2E:1B:27:12:6B:45:48:9C:FF:1F:BE:0C:02:CD:DB
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 0185718C2B0A8DA34465599B5A167A594889
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/zQAEYIouGycSa0VInP8fvgwCzds.roa
Signing time: Mon 02 Jan 2023 08:14:49 +0000
ROA not before: Mon 02 Jan 2023 08:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8932
IP address blocks: 46.162.220.0/22 maxlen: 24
185.48.240.0/22 maxlen: 24
2a00:cc40:2::/48 maxlen: 48
2a00:cc40:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:2b:0a:8d:a3:44:65:59:9b:5a:16:7a:59:48:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 2 08:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd0004608a2e1b27126b45489cff1fbe0c02cddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:3e:f1:4c:9a:35:9d:a0:c1:89:c4:cd:4e:
3b:ab:5f:37:29:86:a2:bd:c8:bd:0f:13:68:32:50:
db:a6:69:b5:33:5c:2c:57:d9:52:5e:7d:58:e0:25:
99:3c:b7:59:c9:c9:84:ce:1d:31:14:87:bd:33:5b:
fe:29:be:de:42:d0:67:f1:32:30:a3:74:c7:ed:0f:
9b:7a:e8:dd:2a:50:10:d4:35:3b:e7:3b:5f:ed:1e:
0c:81:3b:cb:ff:e9:62:6d:0f:bf:ab:64:d0:4a:1e:
fe:fe:69:0a:20:fa:b2:04:93:c3:80:f7:fa:87:12:
b8:6f:27:52:eb:ad:26:9b:d9:b2:18:ba:69:5d:50:
05:e9:d7:e9:78:10:64:16:50:c8:a2:c9:a8:d1:a8:
83:e3:a0:b9:4c:36:de:3a:a3:d0:c8:ef:8b:01:86:
5b:35:e6:c4:58:4b:88:f0:51:28:e3:55:36:83:fa:
37:9c:12:48:ab:a7:f2:e7:f2:1d:0f:72:18:29:fc:
1c:b3:cc:27:8a:88:2d:4b:30:f0:de:53:c9:d4:e8:
0f:48:2d:6d:7f:10:40:81:8a:f7:5b:01:21:a8:4e:
38:fc:0d:02:e0:84:0a:fd:9f:f3:73:df:bd:2b:ba:
e4:48:8a:60:19:52:3d:58:d9:8c:36:4b:75:e1:59:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:04:60:8A:2E:1B:27:12:6B:45:48:9C:FF:1F:BE:0C:02:CD:DB
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/zQAEYIouGycSa0VInP8fvgwCzds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.220.0/22
185.48.240.0/22
IPv6:
2a00:cc40:1::-2a00:cc40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
64:a0:2c:ce:45:fa:e0:19:81:89:e9:eb:c6:18:65:b7:39:4e:
15:7e:d0:e7:cd:3f:a3:77:7d:b1:28:ce:09:8a:b8:cc:69:0a:
b7:86:58:45:76:01:03:b3:3c:14:df:1b:9f:1b:ee:a8:8c:ed:
29:e5:55:aa:d9:3f:21:8e:b0:aa:0e:d0:c9:1b:29:c2:83:13:
44:f9:ee:a8:19:f2:88:3a:a6:aa:9e:da:37:9d:c3:15:66:09:
16:2b:4f:31:3c:58:f6:c9:f3:a2:bb:9a:55:38:5b:81:85:ad:
0d:a1:46:a9:b1:3b:b5:82:08:46:70:f8:a6:43:98:77:8b:db:
2c:4a:aa:7f:93:3c:45:89:ed:df:fd:6c:fc:3a:db:f9:48:f9:
76:7b:ce:cd:2b:bd:40:41:be:25:11:1b:a9:8a:22:92:5f:e8:
a0:c1:b3:17:04:7d:fa:7e:dd:b3:8d:62:56:ea:9a:5e:31:c3:
8c:3c:a9:5a:0d:9c:b6:9a:89:b5:92:cb:07:0d:4d:9b:57:e5:
8b:12:ec:1b:85:90:24:f1:05:b5:f3:63:2a:8e:01:0a:cc:2c:
df:ff:d5:55:c9:9f:dd:c0:c5:5b:68:a4:38:86:6c:cd:e9:b0:
9b:79:8f:12:96:bb:49:7b:b7:5a:a7:88:49:0b:32:6d:5b:d1:
f3:97:6a:85
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYVxjCsKjaNEZVmbWhZ6WUiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz
NTI4MTkwHhcNMjMwMTAyMDgxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDAwMDQ2MDhhMmUxYjI3MTI2YjQ1NDg5Y2ZmMWZiZTBjMDJjZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6g+8UyaNZ2gwYnEzU47q183KYai
vci9DxNoMlDbpmm1M1wsV9lSXn1Y4CWZPLdZycmEzh0xFIe9M1v+Kb7eQtBn8TIw
o3TH7Q+beujdKlAQ1DU75ztf7R4MgTvL/+libQ+/q2TQSh7+/mkKIPqyBJPDgPf6
hxK4bydS660mm9myGLppXVAF6dfpeBBkFlDIosmo0aiD46C5TDbeOqPQyO+LAYZb
NebEWEuI8FEo41U2g/o3nBJIq6fy5/IdD3IYKfwcs8wniogtSzDw3lPJ1OgPSC1t
fxBAgYr3WwEhqE44/A0C4IQK/Z/zc9+9K7rkSIpgGVI9WNmMNkt14VmHTwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFM0ABGCKLhsnEmtFSJz/H74MAs3bMB8GA1UdIwQY
MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct
ZTM3OTlhZGU5ZGZlLzEvelFBRVlJb3VHeWNTYTBWSW5QOGZ2Z3dDemRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl
LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQCLqLcAwQC
uTDwMBoEAgACMBQwEgMHACoAzEAAAQMHACoAzEAAAjANBgkqhkiG9w0BAQsFAAOC
AQEAZKAszkX64BmBienrxhhltzlOFX7Q580/o3d9sSjOCYq4zGkKt4ZYRXYBA7M8
FN8bnxvuqIztKeVVqtk/IY6wqg7QyRspwoMTRPnuqBnyiDqmqp7aN53DFWYJFitP
MTxY9snzoruaVThbgYWtDaFGqbE7tYIIRnD4pkOYd4vbLEqqf5M8RYnt3/1s/Drb
+Uj5dnvOzSu9QEG+JREbqYoikl/ooMGzFwR9+n7ds41iVuqaXjHDjDypWg2ctpqJ
tZLLBw1Nm1flixLsG4WQJPEFtfNjKo4BCsws3//VVcmf3cDFW2ikOIZszemwm3mP
Epa7SXu3WqeISQsybVvR85dqhQ==
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:11 2024 by rpki-client on console-ams.rpki-client.org