Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/ZHM9iQgR6XbJBH-kqHlpDNRjRZg.roa
File: ZHM9iQgR6XbJBH-kqHlpDNRjRZg.roa (raw, json)
Hash identifier: JMS7E2Zolc2CqVSrPBpnZoJmpHH20chJIx0Gkbcss8Y=
Subject key identifier: 64:73:3D:89:08:11:E9:76:C9:04:7F:A4:A8:79:69:0C:D4:63:45:98
Certificate issuer: /CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
Certificate serial: 018570CBD146F420CB100323F205AF4F37C8
Authority key identifier: DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/ZHM9iQgR6XbJBH-kqHlpDNRjRZg.roa
Signing time: Mon 02 Jan 2023 04:44:43 +0000
ROA not before: Mon 02 Jan 2023 04:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199782
IP address blocks: 185.46.16.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d1:46:f4:20:cb:10:03:23:f2:05:af:4f:37:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
Validity
Not Before: Jan 2 04:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64733d890811e976c9047fa4a879690cd4634598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:fc:6d:d4:ec:c8:ff:c1:81:6f:3d:a8:02:
c5:27:b0:8b:85:ec:04:9a:1e:cc:94:58:99:c9:d8:
da:0c:18:8f:21:a8:47:dd:c1:3f:c9:01:f0:8a:2d:
7b:45:19:2c:b8:14:e1:c9:31:d3:c9:3c:f5:86:a4:
32:55:c0:57:00:b8:f3:d9:b1:59:41:4b:15:ed:84:
c7:e7:04:72:5e:e9:e8:ef:7e:b2:f8:80:eb:5b:78:
d8:f9:97:5c:03:0e:5a:6b:67:e3:c2:2c:ff:e1:44:
6b:ed:22:31:04:d0:b5:36:4b:35:d3:f1:9e:75:0a:
cb:3b:ab:53:30:c2:fa:a8:97:b2:fe:eb:61:b8:92:
cb:f0:d8:ee:e7:88:f0:d7:6a:11:3c:f7:2c:56:4e:
81:e0:71:f5:b1:3a:8c:90:a3:5a:11:c4:29:92:bc:
cf:83:43:ad:b4:0e:45:af:71:62:7a:8b:55:e6:fb:
c9:bd:ed:21:9c:0c:47:b6:f6:e0:51:1d:c3:2f:a3:
b1:66:66:6f:72:f0:80:9c:c6:3d:06:c0:6a:6b:b8:
e6:2a:42:5f:0f:4e:5f:16:e8:1d:bb:64:24:ad:5e:
21:a9:c4:5f:94:a2:66:f9:74:41:70:0e:fc:74:84:
88:df:79:67:f2:49:84:38:f5:20:48:4c:81:7b:3c:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:73:3D:89:08:11:E9:76:C9:04:7F:A4:A8:79:69:0C:D4:63:45:98
X509v3 Authority Key Identifier:
keyid:DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/ZHM9iQgR6XbJBH-kqHlpDNRjRZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:98:6a:6d:9a:df:64:33:87:48:8d:44:be:08:b0:2e:bc:26:
42:91:16:14:4e:4f:21:9f:25:5d:b4:e4:32:2d:0c:84:03:48:
60:39:aa:f2:e0:d3:20:8b:ac:ab:e7:18:ee:62:24:1f:a7:3f:
ab:4e:cf:51:19:78:62:1a:07:56:65:51:ab:40:86:79:a2:ff:
ed:de:a2:93:e6:3a:4d:ba:c8:59:b6:0b:02:a9:00:61:f8:d6:
18:08:32:86:f2:09:9e:5c:b8:3e:b9:ec:1b:dd:41:fd:3e:b0:
18:ff:90:d3:9b:61:fb:5f:95:21:9c:99:a2:57:d2:cf:e1:b3:
92:0a:dd:5f:a7:aa:2f:78:23:9e:48:03:2c:b7:ae:95:ab:cd:
36:d8:22:cc:f2:be:1b:48:63:96:66:c2:b2:53:51:3f:58:5e:
1d:47:84:1a:26:54:5a:e9:f8:51:83:e6:f2:0f:3c:e4:38:05:
f3:0e:3d:b2:ae:d2:2f:8a:fc:08:e2:c1:40:00:9a:19:a3:b2:
9c:2b:6b:91:43:c3:8b:8d:1b:43:f0:7e:f0:72:91:38:ce:90:
dd:9b:9b:bf:c6:d5:f8:9c:85:25:63:e6:a9:88:e1:44:02:e5:
97:82:d2:0f:08:a4:99:b9:5a:fc:dd:22:25:ea:57:aa:a6:b0:
c4:e6:90:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwy9FG9CDLEAMj8gWvTzfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZTAyZTI2N2M4OWY1MGRmMWExNzZmMGU3NWY1YzI4MjM1
YjIzYTUwHhcNMjMwMTAyMDQ0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDczM2Q4OTA4MTFlOTc2YzkwNDdmYTRhODc5NjkwY2Q0NjM0NTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZz8bdTsyP/BgW89qALFJ7CLhewE
mh7MlFiZydjaDBiPIahH3cE/yQHwii17RRksuBThyTHTyTz1hqQyVcBXALjz2bFZ
QUsV7YTH5wRyXuno736y+IDrW3jY+ZdcAw5aa2fjwiz/4URr7SIxBNC1Nks10/Ge
dQrLO6tTMML6qJey/uthuJLL8Nju54jw12oRPPcsVk6B4HH1sTqMkKNaEcQpkrzP
g0OttA5Fr3FieotV5vvJve0hnAxHtvbgUR3DL6OxZmZvcvCAnMY9BsBqa7jmKkJf
D05fFugdu2QkrV4hqcRflKJm+XRBcA78dISI33ln8kmEOPUgSEyBezzc5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRzPYkIEel2yQR/pKh5aQzUY0WYMB8GA1UdIwQY
MBaAFN7gLiZ8ifUN8aF28OdfXCgjWyOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUt
MzcwMThiMWZlOWZhLzEvWkhNOWlRZ1I2WGJKQkgta3FIbHBETlJqUlpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUtMzcwMThiMWZlOWZh
LzEvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuS4QMA0G
CSqGSIb3DQEBCwUAA4IBAQBemGptmt9kM4dIjUS+CLAuvCZCkRYUTk8hnyVdtOQy
LQyEA0hgOary4NMgi6yr5xjuYiQfpz+rTs9RGXhiGgdWZVGrQIZ5ov/t3qKT5jpN
ushZtgsCqQBh+NYYCDKG8gmeXLg+uewb3UH9PrAY/5DTm2H7X5UhnJmiV9LP4bOS
Ct1fp6oveCOeSAMst66Vq8022CLM8r4bSGOWZsKyU1E/WF4dR4QaJlRa6fhRg+by
DzzkOAXzDj2yrtIvivwI4sFAAJoZo7KcK2uRQ8OLjRtD8H7wcpE4zpDdm5u/xtX4
nIUlY+apiOFEAuWXgtIPCKSZuVr83SIl6leqprDE5pD5
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:12 2024 by rpki-client on console-fra.rpki-client.org