Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/zr18-AuwFN7E4AiZiBLMUg25WAU.roa
File: zr18-AuwFN7E4AiZiBLMUg25WAU.roa (raw, json)
Hash identifier: Fr+9bsoyBN1v2PwWqJdxBR4cbZRJ1ePXYugu2zJ4Uvg=
Subject key identifier: CE:BD:7C:F8:0B:B0:14:DE:C4:E0:08:99:88:12:CC:52:0D:B9:58:05
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 018B2C7A039BD54456885B4497A14C3250E1
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/zr18-AuwFN7E4AiZiBLMUg25WAU.roa
Signing time: Sat 14 Oct 2023 04:37:55 +0000
ROA not before: Sat 14 Oct 2023 04:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212370
IP address blocks: 45.143.222.0/24 maxlen: 24
37.49.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 07:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2c:7a:03:9b:d5:44:56:88:5b:44:97:a1:4c:32:50:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Oct 14 04:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cebd7cf80bb014dec4e008998812cc520db95805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:0b:81:e8:d9:01:29:0e:41:01:39:85:d4:
01:2b:17:dc:78:b6:5f:ac:a6:c3:97:1d:f6:4b:56:
b5:0b:80:c2:d9:a1:16:75:e2:72:16:36:a1:2e:e9:
6b:4c:05:b6:77:1f:a3:4d:00:ad:2f:4c:e9:c6:fc:
c9:0b:fb:38:89:bb:d6:08:9c:99:f6:5f:ac:55:c3:
2b:9b:88:14:25:54:46:10:16:3e:f8:b7:2f:24:5a:
04:d9:72:ac:10:e4:aa:9b:e8:3b:68:c1:d7:a7:86:
44:61:51:0c:98:36:2c:c8:c8:bc:9d:0b:42:80:ca:
89:e2:d9:91:82:c1:ac:89:15:16:31:00:f7:4b:fa:
b4:46:17:83:4d:a9:44:a5:25:7c:e0:14:f2:11:ca:
d6:45:f7:4c:b9:27:be:50:f3:ab:f9:8d:30:50:69:
bd:46:11:f9:d1:10:76:a0:07:78:0f:ba:86:57:e9:
98:bf:20:98:7e:25:0f:e2:22:bb:00:b5:8b:a6:98:
d0:82:8c:62:41:f3:d0:15:2f:72:4e:5b:46:b1:b8:
29:72:2d:b1:3e:41:fa:1b:d1:6a:e9:4d:c3:40:f9:
ac:95:66:db:01:0e:2a:aa:c3:49:1f:8c:1a:85:7b:
8c:d3:9c:ba:c1:6c:01:d9:65:36:83:b8:d0:ed:b1:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BD:7C:F8:0B:B0:14:DE:C4:E0:08:99:88:12:CC:52:0D:B9:58:05
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/zr18-AuwFN7E4AiZiBLMUg25WAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.225.0/24
45.143.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b1:19:16:0c:f9:bd:10:d5:ce:0a:07:12:51:31:6e:d6:4d:
96:bd:2c:e6:62:3c:19:e8:93:ed:0f:c0:7b:d3:45:be:0d:10:
bc:09:d0:8a:5c:61:7e:f0:32:56:b8:12:79:e3:0e:b8:94:99:
8f:c6:b2:29:a6:4a:cf:99:cf:58:a1:5b:d2:a5:70:3c:16:96:
a6:3c:45:94:b8:a1:5d:74:fe:00:ff:b5:35:e9:54:b7:72:e9:
5b:db:57:eb:85:dd:7e:79:80:e8:cf:f8:bb:62:18:96:fe:95:
79:d6:d1:b5:e1:e5:ab:b6:ee:82:a5:b6:55:b7:90:f2:78:7c:
bc:44:61:6e:a9:b6:0c:35:28:76:81:92:5d:73:e8:0e:46:74:
44:c3:96:1d:b7:04:fc:2a:e4:cf:cd:8c:a5:71:87:c4:e3:08:
1e:e9:0f:c1:11:0b:e3:b3:4b:df:b4:72:cf:52:f9:fe:07:62:
c8:3b:c0:63:e4:5e:c2:f9:2f:05:3d:f9:bc:8f:d8:51:b9:1a:
ce:ca:83:90:c8:33:4d:7e:b5:9f:47:52:60:e1:2c:9e:a8:a5:
79:83:a0:24:3a:61:fc:67:93:a0:6b:f9:c0:0f:dd:13:47:07:
04:35:0a:f3:51:09:49:87:25:2a:e1:64:f3:8e:6c:af:e3:f2:
7b:0a:1a:a2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYssegOb1URWiFtEl6FMMlDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2N2UyYTQ2ZTM0ZjQ5MTQzM2M4YjYyZjMxOWI5MDJiZGRm
ZGU4MzEwHhcNMjMxMDE0MDQzNzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWJkN2NmODBiYjAxNGRlYzRlMDA4OTk4ODEyY2M1MjBkYjk1ODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizsLgejZASkOQQE5hdQBKxfceLZf
rKbDlx32S1a1C4DC2aEWdeJyFjahLulrTAW2dx+jTQCtL0zpxvzJC/s4ibvWCJyZ
9l+sVcMrm4gUJVRGEBY++LcvJFoE2XKsEOSqm+g7aMHXp4ZEYVEMmDYsyMi8nQtC
gMqJ4tmRgsGsiRUWMQD3S/q0RheDTalEpSV84BTyEcrWRfdMuSe+UPOr+Y0wUGm9
RhH50RB2oAd4D7qGV+mYvyCYfiUP4iK7ALWLppjQgoxiQfPQFS9yTltGsbgpci2x
PkH6G9Fq6U3DQPmslWbbAQ4qqsNJH4wahXuM05y6wWwB2WU2g7jQ7bEPBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM69fPgLsBTexOAImYgSzFINuVgFMB8GA1UdIwQY
MBaAFMZ+KkbjT0kUM8i2LzGbkCvd/egxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQt
MDY2ODY2ZjJkZWQwLzEvenIxOC1BdXdGTjdFNEFpWmlCTE1VZzI1V0FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQtMDY2ODY2ZjJkZWQw
LzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJTHhAwQA
LY/eMA0GCSqGSIb3DQEBCwUAA4IBAQBusRkWDPm9ENXOCgcSUTFu1k2WvSzmYjwZ
6JPtD8B700W+DRC8CdCKXGF+8DJWuBJ54w64lJmPxrIppkrPmc9YoVvSpXA8Fpam
PEWUuKFddP4A/7U16VS3culb21frhd1+eYDoz/i7YhiW/pV51tG14eWrtu6CpbZV
t5DyeHy8RGFuqbYMNSh2gZJdc+gORnREw5YdtwT8KuTPzYylcYfE4wge6Q/BEQvj
s0vftHLPUvn+B2LIO8Bj5F7C+S8FPfm8j9hRuRrOyoOQyDNNfrWfR1Jg4SyeqKV5
g6AkOmH8Z5Oga/nAD90TRwcENQrzUQlJhyUq4WTzjmyv4/J7Chqi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:39 2024 by rpki-client on console-fra.rpki-client.org