Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/zRXMfkTxZcfRqYXSSS981Ntez34.roa
File: zRXMfkTxZcfRqYXSSS981Ntez34.roa (raw, json)
Hash identifier: w9tnapIsqIw+FeF2avYqvfdioy0GImwWRagaJknfblg=
Subject key identifier: CD:15:CC:7E:44:F1:65:C7:D1:A9:85:D2:49:2F:7C:D4:DB:5E:CF:7E
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 018597E7097B2412A9E1631C8A0875670B02
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/zRXMfkTxZcfRqYXSSS981Ntez34.roa
Signing time: Mon 09 Jan 2023 18:59:38 +0000
ROA not before: Mon 09 Jan 2023 18:59:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44387
IP address blocks: 83.143.200.0/21 maxlen: 21
91.199.115.0/24 maxlen: 24
46.151.48.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:e7:09:7b:24:12:a9:e1:63:1c:8a:08:75:67:0b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Jan 9 18:59:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd15cc7e44f165c7d1a985d2492f7cd4db5ecf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:7d:12:1e:f8:f4:32:a7:1a:db:23:dd:eb:
14:fd:a6:67:c0:5c:e5:e4:13:78:6e:af:0d:92:ee:
71:3b:99:7f:fd:67:ce:24:4e:6c:d6:c1:3a:ff:f5:
a5:4f:93:4a:41:60:ee:a6:9e:c4:0a:cd:35:b3:23:
de:dc:44:ee:4b:53:75:41:be:81:2f:be:df:6b:42:
24:e6:d0:63:59:d0:3b:a5:c8:f2:f0:94:6c:c6:3a:
dc:76:2f:a7:ec:3c:9f:30:12:dc:82:88:4e:a1:7c:
e6:8d:df:f9:7c:4b:dd:d9:83:4f:71:01:eb:57:bb:
0d:c0:ae:08:7e:d2:1e:c3:0c:e4:49:77:c9:c2:42:
cf:31:b6:ef:a6:38:6b:16:b2:93:70:2f:8f:35:f5:
a8:02:a3:01:76:83:bd:cc:80:d5:53:65:e8:2e:ab:
b1:48:83:99:03:25:02:dd:79:9b:02:87:f4:a9:16:
0e:7d:48:ff:69:05:0e:90:2d:d7:d6:08:5e:95:0f:
52:0c:ef:70:5b:f9:aa:a6:2d:27:ef:b2:ce:0d:1e:
e4:ba:e1:25:6f:04:7e:a4:b3:ce:00:b0:b2:b2:65:
a2:5f:98:01:f7:93:f6:be:eb:75:1b:eb:76:9b:42:
5a:e5:84:da:95:5a:af:a2:f1:a8:19:85:88:8d:0d:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:15:CC:7E:44:F1:65:C7:D1:A9:85:D2:49:2F:7C:D4:DB:5E:CF:7E
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/zRXMfkTxZcfRqYXSSS981Ntez34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.48.0/22
83.143.200.0/21
91.199.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:59:51:f2:31:ee:24:53:c0:8e:ea:82:74:67:80:90:85:91:
bf:05:09:b8:7e:ff:c7:cc:05:9d:07:b5:6c:89:58:95:02:88:
43:cf:dc:6e:9f:1f:52:3d:7a:4f:7c:d7:12:aa:06:cd:c4:fb:
2a:58:d5:12:78:76:79:70:aa:86:78:24:ee:f3:f9:7a:d3:de:
3d:b4:c6:f1:d8:7b:c0:cc:9d:23:2a:59:92:5c:be:1e:6f:8b:
36:97:32:9c:ea:76:bb:84:c5:53:55:2d:b2:39:c4:e3:13:7a:
df:d6:10:1b:73:b7:c8:fb:9a:b1:2b:e1:3c:80:16:ad:54:f8:
19:5a:97:d9:f8:94:41:44:47:2a:d7:17:8e:74:f8:4e:41:86:
8f:8d:d4:4d:59:f5:e8:a9:1a:95:a4:f3:18:08:bd:06:62:0c:
ca:56:1d:1f:53:7b:f6:a6:85:0c:bd:b8:9f:bc:8f:42:8c:92:
f6:26:3f:14:30:ac:d1:6f:f4:86:53:03:60:e2:45:52:47:53:
b7:d9:27:34:a9:65:b8:52:7c:ad:21:b2:c6:40:96:bc:4a:c3:
15:eb:7f:1b:71:ca:f9:0e:1b:9c:d8:ec:61:8b:23:15:89:c8:
88:ff:28:bc:e5:42:95:2c:d6:97:35:d1:1e:5c:19:b0:1c:bc:
84:4b:bd:de
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYWX5wl7JBKp4WMcigh1ZwsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2FlNWQyYzFhMzEwN2VmMTJmNGQ2ZGQ5YzkwZjI0OWMy
Njc4MWIwHhcNMjMwMTA5MTg1OTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDE1Y2M3ZTQ0ZjE2NWM3ZDFhOTg1ZDI0OTJmN2NkNGRiNWVjZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIR9Eh749DKnGtsj3esU/aZnwFzl
5BN4bq8Nku5xO5l//WfOJE5s1sE6//WlT5NKQWDupp7ECs01syPe3ETuS1N1Qb6B
L77fa0Ik5tBjWdA7pcjy8JRsxjrcdi+n7DyfMBLcgohOoXzmjd/5fEvd2YNPcQHr
V7sNwK4IftIewwzkSXfJwkLPMbbvpjhrFrKTcC+PNfWoAqMBdoO9zIDVU2XoLqux
SIOZAyUC3XmbAof0qRYOfUj/aQUOkC3X1ghelQ9SDO9wW/mqpi0n77LODR7kuuEl
bwR+pLPOALCysmWiX5gB95P2vut1G+t2m0Ja5YTalVqvovGoGYWIjQ2qPwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM0VzH5E8WXH0amF0kkvfNTbXs9+MB8GA1UdIwQY
MBaAFPM65dLBoxB+8S9NbdnJDyScJngbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQt
ZmEyNTY2ZTU4Mjg2LzEvelJYTWZrVHhaY2ZScVlYU1NTOTgxTnRlejM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQtZmEyNTY2ZTU4Mjg2
LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLpcwAwQD
U4/IAwQAW8dzMA0GCSqGSIb3DQEBCwUAA4IBAQB7WVHyMe4kU8CO6oJ0Z4CQhZG/
BQm4fv/HzAWdB7VsiViVAohDz9xunx9SPXpPfNcSqgbNxPsqWNUSeHZ5cKqGeCTu
8/l60949tMbx2HvAzJ0jKlmSXL4eb4s2lzKc6na7hMVTVS2yOcTjE3rf1hAbc7fI
+5qxK+E8gBatVPgZWpfZ+JRBREcq1xeOdPhOQYaPjdRNWfXoqRqVpPMYCL0GYgzK
Vh0fU3v2poUMvbifvI9CjJL2Jj8UMKzRb/SGUwNg4kVSR1O32Sc0qWW4UnytIbLG
QJa8SsMV638bccr5Dhuc2OxhiyMViciI/yi85UKVLNaXNdEeXBmwHLyES73e
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:36 2024 by rpki-client on console-ams.rpki-client.org