Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/zPlRYymjQR7rRuCYlnRIJ3YmQ40.roa
File: zPlRYymjQR7rRuCYlnRIJ3YmQ40.roa (raw, json)
Hash identifier: ONNIanynq3D3mRMHGK13t9Nw1+8bUTjUgpM0VqpheRA=
Subject key identifier: CC:F9:51:63:29:A3:41:1E:EB:46:E0:98:96:74:48:27:76:26:43:8D
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 018570D543AAD5FBB30782B941B454D8BB10
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/zPlRYymjQR7rRuCYlnRIJ3YmQ40.roa
Signing time: Mon 02 Jan 2023 04:55:02 +0000
ROA not before: Mon 02 Jan 2023 04:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41359
IP address blocks: 185.220.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:43:aa:d5:fb:b3:07:82:b9:41:b4:54:d8:bb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Jan 2 04:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccf9516329a3411eeb46e098967448277626438d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:51:db:6f:8c:1e:7b:51:6f:e2:7d:21:de:
12:d4:95:55:2b:c1:40:ce:4c:9a:fc:64:7a:07:98:
9b:8f:f9:48:6e:16:dd:de:ca:92:aa:2a:bb:29:22:
f0:45:da:68:dd:7f:4c:dd:ef:60:01:8e:ab:c6:0d:
50:66:b7:48:6e:2d:a8:0d:c0:07:51:2d:97:1c:7f:
23:71:ac:ef:54:04:24:aa:3d:4e:bd:94:1a:a1:db:
e1:d8:c0:37:e9:6a:cb:61:e2:76:39:74:10:85:54:
8e:ec:53:61:7f:45:34:7a:f9:ab:c5:75:03:f5:9e:
0d:1f:c4:3a:d9:a9:68:d6:da:e3:b8:e3:71:19:3c:
0b:21:b4:2f:11:0e:11:bf:e3:13:a2:f4:30:43:99:
11:1d:cf:3e:39:25:36:9f:d9:ac:1c:d6:ca:06:3c:
f9:63:40:c6:08:00:8c:d2:83:4f:bb:6c:ec:2e:c8:
d6:6d:8e:e3:52:4f:0e:3b:be:55:00:99:53:f4:a3:
1d:f6:54:53:42:b4:a0:2e:8a:51:3e:08:8a:66:2c:
43:f0:fd:98:6a:f2:2a:fb:67:ca:c2:48:46:e6:ba:
a8:ba:5b:31:3a:a8:66:88:12:66:76:9b:41:44:ba:
ab:f7:47:1f:8b:e1:29:9c:d4:14:e2:66:99:bb:4d:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F9:51:63:29:A3:41:1E:EB:46:E0:98:96:74:48:27:76:26:43:8D
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/zPlRYymjQR7rRuCYlnRIJ3YmQ40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5d:03:d7:04:75:00:24:26:f5:81:9e:06:4b:ba:66:5b:50:
5f:29:cd:fa:e6:89:a0:2e:1f:54:f2:d5:39:4a:17:ce:2b:70:
bb:82:f0:f1:9a:fd:0b:16:44:23:6f:66:a0:f2:93:99:85:d1:
a3:b5:99:b7:25:0e:2e:61:d5:d4:74:2c:21:1f:71:b4:00:86:
25:37:ea:29:81:db:cb:11:42:6a:e4:3c:b7:38:46:72:6b:4d:
e0:19:5a:bd:bb:c9:63:38:ff:f9:c4:9c:93:64:10:aa:1c:f8:
70:19:8b:b4:c8:a9:e6:45:66:1d:a4:c8:17:95:52:a3:8c:e9:
8c:ac:7f:2b:e1:84:80:32:15:d4:b5:cd:06:22:1f:38:cb:87:
f0:ba:aa:bb:c5:31:0b:95:f0:ce:e2:1d:0a:65:d0:a6:15:0e:
07:2b:96:cc:f7:be:8f:19:34:07:fd:9e:78:50:b2:3f:e9:d3:
c7:e9:07:d8:f1:64:4a:48:c1:00:3e:4a:88:74:a9:e3:ee:48:
47:bd:3f:5f:2d:6e:7d:59:9d:ec:13:ea:1b:0b:39:e1:73:a8:
34:22:8a:c7:d1:39:6e:7e:60:18:be:a2:83:69:84:8c:55:c1:
13:d8:bf:45:c4:91:ba:17:51:83:88:a9:11:41:d2:88:69:bd:
ba:83:c1:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw1UOq1fuzB4K5QbRU2LsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTZmOGNhZTc0OTJkMDY0ZTAzMDcxYzkxNDczOTJlZWRk
NDViYzcwHhcNMjMwMTAyMDQ1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2Y5NTE2MzI5YTM0MTFlZWI0NmUwOTg5Njc0NDgyNzc2MjY0MzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4FR22+MHntRb+J9Id4S1JVVK8FA
zkya/GR6B5ibj/lIbhbd3sqSqiq7KSLwRdpo3X9M3e9gAY6rxg1QZrdIbi2oDcAH
US2XHH8jcazvVAQkqj1OvZQaodvh2MA36WrLYeJ2OXQQhVSO7FNhf0U0evmrxXUD
9Z4NH8Q62alo1trjuONxGTwLIbQvEQ4Rv+MTovQwQ5kRHc8+OSU2n9msHNbKBjz5
Y0DGCACM0oNPu2zsLsjWbY7jUk8OO75VAJlT9KMd9lRTQrSgLopRPgiKZixD8P2Y
avIq+2fKwkhG5rqoulsxOqhmiBJmdptBRLqr90cfi+EpnNQU4maZu02ngQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMz5UWMpo0Ee60bgmJZ0SCd2JkONMB8GA1UdIwQY
MBaAFK/m+MrnSS0GTgMHHJFHOS7t1FvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUt
NjU0OWNkNTlhYTRmLzEvelBsUll5bWpRUjdyUnVDWWxuUklKM1ltUTQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUtNjU0OWNkNTlhYTRm
LzEvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudzcMA0G
CSqGSIb3DQEBCwUAA4IBAQCgXQPXBHUAJCb1gZ4GS7pmW1BfKc365omgLh9U8tU5
ShfOK3C7gvDxmv0LFkQjb2ag8pOZhdGjtZm3JQ4uYdXUdCwhH3G0AIYlN+opgdvL
EUJq5Dy3OEZya03gGVq9u8ljOP/5xJyTZBCqHPhwGYu0yKnmRWYdpMgXlVKjjOmM
rH8r4YSAMhXUtc0GIh84y4fwuqq7xTELlfDO4h0KZdCmFQ4HK5bM976PGTQH/Z54
ULI/6dPH6QfY8WRKSMEAPkqIdKnj7khHvT9fLW59WZ3sE+obCznhc6g0IorH0Tlu
fmAYvqKDaYSMVcET2L9FxJG6F1GDiKkRQdKIab26g8Gq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:47 2024 by rpki-client on console-ams.rpki-client.org