Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/z2wydMCioZkTUMeCLsceReBp4-8.roa
File: z2wydMCioZkTUMeCLsceReBp4-8.roa (raw, json)
Hash identifier: 19UQc15Q7XIzhaq8PSyOosmWhihmmw+vrTDfj2nWyT4=
Subject key identifier: CF:6C:32:74:C0:A2:A1:99:13:50:C7:82:2E:C7:1E:45:E0:69:E3:EF
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AC2E6B1FF1FF0D81073F81C28160E
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/z2wydMCioZkTUMeCLsceReBp4-8.roa
Signing time: Mon 02 Jan 2023 17:15:03 +0000
ROA not before: Mon 02 Jan 2023 17:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49629
IP address blocks: 5.181.100.0/22 maxlen: 24
194.8.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:c2:e6:b1:ff:1f:f0:d8:10:73:f8:1c:28:16:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf6c3274c0a2a1991350c7822ec71e45e069e3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cd:4f:e0:68:a3:7d:b4:bf:e3:73:7c:70:e0:
c1:ce:48:df:bb:e4:7f:55:58:9a:ae:94:09:31:61:
ba:8d:08:27:bb:f8:02:35:aa:69:f0:a3:ff:a7:57:
44:c9:a8:a1:18:93:2e:f6:38:34:ca:d9:b7:5c:c0:
03:4a:5c:5b:e8:4c:04:33:bf:c4:4d:df:6f:ff:1b:
e8:d0:1f:dc:01:bd:18:e3:36:d1:f9:f9:69:fa:fd:
26:52:57:33:55:f1:ca:42:20:f0:aa:5b:1d:93:80:
4d:2a:fd:81:7d:22:d5:66:47:16:52:78:80:bd:e4:
f4:79:5f:f5:b6:be:2d:35:a9:87:81:df:24:4d:6d:
d8:0e:13:d2:e4:77:a5:28:1a:f7:7d:dc:5b:11:a6:
63:3a:4b:16:d6:61:16:a9:7b:ad:84:03:bb:3d:7d:
75:5d:94:9f:22:1d:ec:31:bb:a3:c8:f1:84:0a:ff:
f8:c4:14:d4:6d:21:f9:3d:34:46:aa:ae:15:82:0c:
80:29:52:cd:13:fa:3b:a8:bd:b9:a2:68:da:81:2a:
ba:05:f7:a5:a8:ae:98:1f:ee:06:0b:fe:86:89:14:
95:f2:6d:da:f1:7a:96:5a:a2:49:43:67:4a:95:3d:
f2:3a:d8:a5:55:ac:0d:e7:74:f1:f3:17:63:5b:ae:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:32:74:C0:A2:A1:99:13:50:C7:82:2E:C7:1E:45:E0:69:E3:EF
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/z2wydMCioZkTUMeCLsceReBp4-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.100.0/22
194.8.140.0/22
Signature Algorithm: sha256WithRSAEncryption
54:f5:91:d5:00:2a:25:ec:fa:6f:7e:6b:8c:a5:14:c5:c8:24:
18:be:29:30:f3:4b:c3:05:b3:d1:ee:68:39:ad:48:25:09:2a:
06:7b:24:c4:ce:24:bb:14:1a:c0:ee:5a:2b:b6:ed:c4:bb:f3:
3d:91:57:dc:6d:fc:98:79:df:4e:df:56:c7:f0:75:ae:c0:81:
df:89:6b:de:69:0a:95:e0:26:9f:c1:c0:27:2a:bb:a8:62:9f:
d5:7a:10:5d:b9:f3:d2:f3:fa:6f:9c:74:5c:bf:8f:2a:47:5c:
df:0b:e4:91:b3:e3:1b:61:cd:d9:46:42:4c:4b:a0:6e:af:a7:
f5:a1:f1:78:0c:cb:95:80:c0:ea:95:90:7a:67:4b:84:71:2c:
a1:a3:7b:0c:84:69:4a:0f:9f:76:09:2d:4b:03:af:dd:5c:44:
6a:f9:38:8c:c6:44:85:41:c1:21:23:65:a7:50:e3:92:38:6e:
42:56:6a:8a:46:a2:c5:87:c4:26:22:18:c9:f0:4f:bb:65:a7:
e8:3d:88:80:e0:d2:15:e9:3e:a0:3c:2e:6d:66:0d:b6:8a:ee:
ea:04:d1:8e:73:40:60:c9:78:78:6d:c5:86:a1:d2:13:7a:ed:
ea:e3:99:9d:85:97:0e:08:66:a3:48:5a:71:9b:57:d6:78:14:
b2:da:c1:d2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVzesLmsf8f8NgQc/gcKBYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjMwMTAyMTcxNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjZjMzI3NGMwYTJhMTk5MTM1MGM3ODIyZWM3MWU0NWUwNjllM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs1P4GijfbS/43N8cODBzkjfu+R/
VViarpQJMWG6jQgnu/gCNapp8KP/p1dEyaihGJMu9jg0ytm3XMADSlxb6EwEM7/E
Td9v/xvo0B/cAb0Y4zbR+flp+v0mUlczVfHKQiDwqlsdk4BNKv2BfSLVZkcWUniA
veT0eV/1tr4tNamHgd8kTW3YDhPS5HelKBr3fdxbEaZjOksW1mEWqXuthAO7PX11
XZSfIh3sMbujyPGECv/4xBTUbSH5PTRGqq4VggyAKVLNE/o7qL25omjagSq6Bfel
qK6YH+4GC/6GiRSV8m3a8XqWWqJJQ2dKlT3yOtilVawN53Tx8xdjW67EbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM9sMnTAoqGZE1DHgi7HHkXgaePvMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvejJ3eWRNQ2lvWmtUVU1lQ0xzY2VSZUJwNC04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBbVkAwQC
wgiMMA0GCSqGSIb3DQEBCwUAA4IBAQBU9ZHVACol7PpvfmuMpRTFyCQYvikw80vD
BbPR7mg5rUglCSoGeyTEziS7FBrA7lortu3Eu/M9kVfcbfyYed9O31bH8HWuwIHf
iWveaQqV4CafwcAnKruoYp/VehBdufPS8/pvnHRcv48qR1zfC+SRs+MbYc3ZRkJM
S6Bur6f1ofF4DMuVgMDqlZB6Z0uEcSyho3sMhGlKD592CS1LA6/dXERq+TiMxkSF
QcEhI2WnUOOSOG5CVmqKRqLFh8QmIhjJ8E+7ZafoPYiA4NIV6T6gPC5tZg22iu7q
BNGOc0BgyXh4bcWGodITeu3q45mdhZcOCGajSFpxm1fWeBSy2sHS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org