Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/Z4J51-wzi-RcWHKEJ_w8muVIXAM.roa
File: Z4J51-wzi-RcWHKEJ_w8muVIXAM.roa (raw, json)
Hash identifier: kYck5hDf8vIyH2Lp9C+Zxq4S3J45Q69McEvp1Ho/TWw=
Subject key identifier: 67:82:79:D7:EC:33:8B:E4:5C:58:72:84:27:FC:3C:9A:E5:48:5C:03
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 018CC7950A03BAD5DF945DC0132928CE0237
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/Z4J51-wzi-RcWHKEJ_w8muVIXAM.roa
Signing time: Tue 02 Jan 2024 00:31:22 +0000
ROA not before: Tue 02 Jan 2024 00:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61400
IP address blocks: 37.130.195.0/24 maxlen: 24
185.45.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 12:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0a:03:ba:d5:df:94:5d:c0:13:29:28:ce:02:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Jan 2 00:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=678279d7ec338be45c58728427fc3c9ae5485c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:c6:bf:8f:83:28:ec:03:b9:a4:2f:22:54:
2d:41:7b:c6:4a:fd:cb:8b:b8:72:bc:7e:dd:3c:77:
4a:c8:c3:87:9e:bb:d6:9b:4d:50:64:92:e6:ab:e1:
c1:35:bd:87:3c:73:c6:45:db:83:e9:1c:54:95:e2:
88:44:b9:fb:a3:22:1c:df:01:02:97:26:e4:d6:ad:
e6:b7:c4:71:f7:ac:4a:f0:29:a5:8e:8f:67:ce:e4:
23:0f:ef:27:93:b7:c0:3f:71:c9:be:e4:43:55:b0:
e7:e5:ec:68:e9:ca:ca:e0:45:2a:b3:83:40:5f:90:
ec:c5:87:92:69:fb:5a:39:a8:a2:70:38:68:7b:02:
a3:e5:61:0a:33:50:61:c3:00:e8:37:42:1e:1f:7e:
c1:62:db:cc:6c:da:01:29:ca:df:5f:1d:6e:2a:89:
85:e4:59:85:c8:85:36:5a:0c:67:cf:29:c2:07:e5:
4a:16:bb:24:d2:13:9f:9a:82:44:5c:1c:d7:e0:a6:
28:34:f7:68:96:59:fa:e8:02:2c:ab:e0:e5:8e:68:
62:51:9b:69:eb:da:98:e9:d8:32:d0:92:e1:e2:bc:
fc:85:e0:1e:aa:88:20:be:0d:31:80:3e:d0:96:95:
73:2d:2b:f8:f0:01:87:d4:ef:0f:65:39:b0:db:5e:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:82:79:D7:EC:33:8B:E4:5C:58:72:84:27:FC:3C:9A:E5:48:5C:03
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/Z4J51-wzi-RcWHKEJ_w8muVIXAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.195.0/24
185.45.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0e:8d:cb:9e:2a:29:f3:24:6f:f9:c7:f4:14:c3:07:8c:12:
06:84:a0:b6:61:55:c5:4f:13:ac:98:9a:41:a8:66:e9:7f:be:
5f:08:b3:90:15:22:82:86:8e:72:b3:a3:92:f9:d8:5f:4e:a7:
01:ce:cf:7f:f1:f9:a7:3c:c9:61:7f:73:bb:f5:22:d2:6a:65:
87:1f:08:ff:63:a5:15:67:c1:56:42:d4:ea:9e:b4:15:8a:f1:
af:18:5e:c8:3c:ed:e4:a8:ab:a2:22:59:53:7c:0b:2e:61:f3:
54:2c:8d:e6:c7:b9:88:0a:f0:a9:a0:d7:be:e6:52:28:90:f2:
4b:88:1a:eb:ef:e1:47:d7:45:a9:9d:75:0e:f5:a2:42:3e:e1:
64:51:62:ee:44:56:ee:d9:5a:04:1c:e5:a2:c5:d9:53:6b:69:
6e:93:66:04:59:f8:13:4b:6e:bd:92:1d:ca:e4:83:3f:4b:95:
13:e6:e4:56:f7:d2:7a:0e:04:fd:2f:b0:95:2f:b4:d2:8c:c6:
f5:61:ae:31:20:42:36:f1:d1:ee:c9:1a:4b:5e:8e:44:8d:83:
c0:05:29:75:6f:00:dd:f8:d1:bf:fa:b1:7f:f7:aa:f7:07:3d:
49:36:d9:9e:77:bc:97:a5:bc:4f:56:7a:e9:ce:7f:f4:96:20:
87:95:b5:65
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHlQoDutXflF3AEykozgI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDNiMGVjNzk5NTFkNWQ1NTgwMTMzZTUzMjlhOTBmMmZl
ZTFjNWIwHhcNMjQwMTAyMDAzMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzgyNzlkN2VjMzM4YmU0NWM1ODcyODQyN2ZjM2M5YWU1NDg1YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWTGv4+DKOwDuaQvIlQtQXvGSv3L
i7hyvH7dPHdKyMOHnrvWm01QZJLmq+HBNb2HPHPGRduD6RxUleKIRLn7oyIc3wEC
lybk1q3mt8Rx96xK8Cmljo9nzuQjD+8nk7fAP3HJvuRDVbDn5exo6crK4EUqs4NA
X5DsxYeSaftaOaiicDhoewKj5WEKM1BhwwDoN0IeH37BYtvMbNoBKcrfXx1uKomF
5FmFyIU2WgxnzynCB+VKFrsk0hOfmoJEXBzX4KYoNPdolln66AIsq+DljmhiUZtp
69qY6dgy0JLh4rz8heAeqoggvg0xgD7QlpVzLSv48AGH1O8PZTmw216XTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGeCedfsM4vkXFhyhCf8PJrlSFwDMB8GA1UdIwQY
MBaAFH1DsOx5lR1dVYATPlMpqQ8v7hxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNjA0ZTAtOTFmYS00ZmU5LWJiMjgt
OTNhNjE5MmIxNzg1LzEvWjRKNTEtd3ppLVJjV0hLRUpfdzhtdVZJWEFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNjA0ZTAtOTFmYS00ZmU5LWJiMjgtOTNhNjE5MmIxNzg1
LzEvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJYLDAwQA
uS1SMA0GCSqGSIb3DQEBCwUAA4IBAQCcDo3Lniop8yRv+cf0FMMHjBIGhKC2YVXF
TxOsmJpBqGbpf75fCLOQFSKCho5ys6OS+dhfTqcBzs9/8fmnPMlhf3O79SLSamWH
Hwj/Y6UVZ8FWQtTqnrQVivGvGF7IPO3kqKuiIllTfAsuYfNULI3mx7mICvCpoNe+
5lIokPJLiBrr7+FH10WpnXUO9aJCPuFkUWLuRFbu2VoEHOWixdlTa2luk2YEWfgT
S269kh3K5IM/S5UT5uRW99J6DgT9L7CVL7TSjMb1Ya4xIEI28dHuyRpLXo5EjYPA
BSl1bwDd+NG/+rF/96r3Bz1JNtmed7yXpbxPVnrpzn/0liCHlbVl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:04 2024 by rpki-client on console-ams.rpki-client.org