Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/ZeHFlcjfSqYrJSB3KXznZIsUmCc.roa
File: ZeHFlcjfSqYrJSB3KXznZIsUmCc.roa (raw, json)
Hash identifier: VXw6Q/0kt9SG4vNOaVwj2zw/ghi6v5nYUznMZarAUvg=
Subject key identifier: 65:E1:C5:95:C8:DF:4A:A6:2B:25:20:77:29:7C:E7:64:8B:14:98:27
Certificate issuer: /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial: 01856F79895A8341012622D93254A37AAEF2
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/ZeHFlcjfSqYrJSB3KXznZIsUmCc.roa
Signing time: Sun 01 Jan 2023 22:35:14 +0000
ROA not before: Sun 01 Jan 2023 22:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29156
IP address blocks: 147.29.192.0/18 maxlen: 18
147.29.0.0/17 maxlen: 17
147.29.128.0/20 maxlen: 20
147.29.144.0/22 maxlen: 22
147.29.148.0/23 maxlen: 23
147.29.152.0/21 maxlen: 21
147.29.160.0/19 maxlen: 19
2a01:5440::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:89:5a:83:41:01:26:22:d9:32:54:a3:7a:ae:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Validity
Not Before: Jan 1 22:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e1c595c8df4aa62b252077297ce7648b149827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:50:73:e0:10:98:06:19:25:80:2a:15:2e:
72:1f:a6:16:a1:a7:bf:c8:35:b0:7f:a8:ea:6e:3a:
e0:bc:36:fc:a7:b7:9e:be:64:1a:ec:07:1a:60:b3:
fb:a1:ba:f5:aa:a1:53:ec:a6:f6:bd:87:12:28:b6:
bb:ec:2e:a2:9b:da:be:d6:6a:7a:80:f6:50:66:73:
c1:0b:6c:04:65:18:99:09:af:08:fe:85:24:16:72:
83:01:d7:72:e3:80:7b:95:d0:c0:38:5c:cf:00:3f:
ff:74:6d:41:af:20:1c:44:c1:26:eb:1b:24:cc:d6:
e5:68:0a:f3:55:6a:84:67:8e:46:17:31:ee:ad:2a:
f6:20:fe:6c:a5:ee:fc:73:e1:be:03:0d:24:c8:59:
03:bf:f3:b5:08:28:e8:56:cd:d9:60:36:5f:b3:13:
6e:eb:3e:62:8f:6b:47:04:62:01:a7:ff:1d:f1:23:
02:bd:71:4e:3b:e0:26:4f:7a:86:03:d8:07:91:f3:
a7:8b:a3:6d:87:e7:62:fb:dc:d7:8f:93:bd:95:b3:
39:18:29:36:02:c0:5e:0e:b7:c7:98:84:34:59:f9:
be:0c:09:a2:d6:7e:b1:39:23:93:5f:1e:f1:8f:79:
25:17:93:54:2f:ec:3d:24:f4:0d:9f:01:5b:34:f7:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E1:C5:95:C8:DF:4A:A6:2B:25:20:77:29:7C:E7:64:8B:14:98:27
X509v3 Authority Key Identifier:
keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/ZeHFlcjfSqYrJSB3KXznZIsUmCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.29.0.0-147.29.149.255
147.29.152.0-147.29.255.255
IPv6:
2a01:5440::/32
Signature Algorithm: sha256WithRSAEncryption
07:13:53:03:aa:29:8f:c6:73:51:eb:ef:ca:1a:7d:da:7a:0a:
03:88:3c:26:96:b2:a1:85:1c:79:91:a6:e2:bb:74:22:cb:cd:
84:49:f8:22:89:e2:dc:f6:63:0e:5a:64:28:ff:35:8f:82:c6:
b2:7a:c8:db:b2:44:c5:8e:01:0d:f4:16:d7:12:a1:b5:5b:31:
04:93:d4:79:30:b1:91:18:cc:45:35:b8:3a:a9:8f:b0:07:bd:
7b:a2:2c:df:eb:eb:eb:91:ba:99:32:2b:41:07:f7:60:7a:c5:
d9:da:fd:13:fa:b8:fe:90:e3:8d:7a:38:11:3a:76:c5:ea:a4:
4e:0c:16:f0:0d:a4:e6:9d:08:80:ef:8c:e7:1b:3b:1c:08:f6:
15:cc:1e:a5:72:36:c1:7d:7c:c7:54:38:dc:90:a0:a4:f0:bc:
24:f1:90:61:8b:f5:89:b0:90:81:6d:3b:07:84:c6:25:b4:37:
ec:ce:b5:88:a5:93:b4:3d:b8:96:24:b0:f7:cd:87:79:4d:99:
72:07:93:19:8d:50:0d:16:dc:d1:6e:60:55:1d:88:77:31:06:
19:7d:48:52:bf:fe:fd:31:8b:a2:a9:46:63:19:6c:67:88:9a:
6e:e9:dd:fc:7e:c3:3b:04:e6:7d:94:a2:ca:e9:f5:f7:9f:1d:
9f:3c:ca:f1
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYVveYlag0EBJiLZMlSjeq7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MmQ3Y2FjMWZmYjJjM2ZiZGUyODQ2MjViZjFhZjRjNmJh
ZTZiMGUwHhcNMjMwMTAxMjIzNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWUxYzU5NWM4ZGY0YWE2MmIyNTIwNzcyOTdjZTc2NDhiMTQ5ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreNQc+AQmAYZJYAqFS5yH6YWoae/
yDWwf6jqbjrgvDb8p7eevmQa7AcaYLP7obr1qqFT7Kb2vYcSKLa77C6im9q+1mp6
gPZQZnPBC2wEZRiZCa8I/oUkFnKDAddy44B7ldDAOFzPAD//dG1BryAcRMEm6xsk
zNblaArzVWqEZ45GFzHurSr2IP5spe78c+G+Aw0kyFkDv/O1CCjoVs3ZYDZfsxNu
6z5ij2tHBGIBp/8d8SMCvXFOO+AmT3qGA9gHkfOni6Nth+di+9zXj5O9lbM5GCk2
AsBeDrfHmIQ0Wfm+DAmi1n6xOSOTXx7xj3klF5NUL+w9JPQNnwFbNPeD2QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFGXhxZXI30qmKyUgdyl852SLFJgnMB8GA1UdIwQY
MBaAFMYtfKwf+yw/veKEYlvxr0xrrmsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGkxOHJCXzdMRC05NG9SaVdfR3ZUR3V1YXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Y2Q1ZmMtNjBjYy00NWRlLWJkOGEt
MTU0NGI0NGQ1OWNhLzEvWmVIRmxjamZTcVlySlNCM0tYem5aSXNVbUNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Y2Q1ZmMtNjBjYy00NWRlLWJkOGEtMTU0NGI0NGQ1OWNh
LzEveGkxOHJCXzdMRC05NG9SaVdfR3ZUR3V1YXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAsDAwCTHQME
AZMdlDALAwQDkx2YAwMBkxwwDQQCAAIwBwMFACoBVEAwDQYJKoZIhvcNAQELBQAD
ggEBAAcTUwOqKY/Gc1Hr78oafdp6CgOIPCaWsqGFHHmRpuK7dCLLzYRJ+CKJ4tz2
Yw5aZCj/NY+CxrJ6yNuyRMWOAQ30FtcSobVbMQST1HkwsZEYzEU1uDqpj7AHvXui
LN/r6+uRupkyK0EH92B6xdna/RP6uP6Q4416OBE6dsXqpE4MFvANpOadCIDvjOcb
OxwI9hXMHqVyNsF9fMdUONyQoKTwvCTxkGGL9YmwkIFtOweExiW0N+zOtYilk7Q9
uJYksPfNh3lNmXIHkxmNUA0W3NFuYFUdiHcxBhl9SFK//v0xi6KpRmMZbGeImm7p
3fx+wzsE5n2Uosrp9fefHZ88yvE=
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:25 2024 by rpki-client on console-ams.rpki-client.org