Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/ZwuFxmYbsjvuSYa4ekesViLRwTs.roa
File: ZwuFxmYbsjvuSYa4ekesViLRwTs.roa (raw, json)
Hash identifier: KbXiQBse15T3+rnGmEeYWxJGG8b8iIM4JK3tJSaJvdY=
Subject key identifier: 67:0B:85:C6:66:1B:B2:3B:EE:49:86:B8:7A:47:AC:56:22:D1:C1:3B
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 01856D5D0A95E059C96F880444A21F4DAC9F
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/ZwuFxmYbsjvuSYa4ekesViLRwTs.roa
Signing time: Sun 01 Jan 2023 12:44:51 +0000
ROA not before: Sun 01 Jan 2023 12:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15943
IP address blocks: 185.45.16.0/22 maxlen: 22
2a01:7960::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:0a:95:e0:59:c9:6f:88:04:44:a2:1f:4d:ac:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Jan 1 12:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=670b85c6661bb23bee4986b87a47ac5622d1c13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:b1:55:66:92:36:f7:52:b7:06:12:60:34:
2b:7c:59:53:bd:b7:e5:82:f8:86:60:f4:48:d9:09:
84:b3:7f:45:cc:81:6c:2b:62:5f:cc:21:9f:72:38:
f6:18:ea:60:0c:84:90:b0:07:d9:bd:a3:10:1a:2a:
af:c4:e7:c5:2d:25:f4:05:f0:df:6e:87:b3:d4:46:
18:4e:ab:89:b1:db:a5:8a:d8:08:bd:c2:fb:67:3a:
a2:fb:98:f8:59:7c:0d:66:92:28:6f:04:55:80:61:
e2:17:a8:20:26:18:8e:33:95:87:26:4b:a7:b5:dd:
ea:20:ed:cd:cf:8c:ac:4e:b5:ef:20:30:f7:95:a0:
01:50:91:2e:b2:c1:b1:d8:8b:63:c3:77:c5:ba:3e:
48:aa:e2:75:ab:6c:5b:c0:37:a9:31:6a:37:7e:fb:
30:85:c2:f5:19:a3:31:e1:2c:2a:97:d1:aa:d3:38:
85:1d:27:48:80:10:de:4a:2e:4c:a8:26:3d:4d:32:
22:3f:cc:e4:16:f2:5b:be:c2:fb:6e:19:c0:15:0b:
9b:5c:f1:34:00:c4:d1:9c:82:e7:df:bd:3c:cb:a4:
22:a7:cd:ea:ff:f3:3e:a5:4e:64:12:a3:37:bc:41:
e7:ca:f7:a7:4e:6a:7d:7f:10:51:fc:d0:f2:cf:13:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0B:85:C6:66:1B:B2:3B:EE:49:86:B8:7A:47:AC:56:22:D1:C1:3B
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/ZwuFxmYbsjvuSYa4ekesViLRwTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.16.0/22
IPv6:
2a01:7960::/32
Signature Algorithm: sha256WithRSAEncryption
43:e3:90:60:d5:17:0b:52:ca:1c:5c:a6:c8:04:4d:5a:a5:21:
45:10:c1:63:c8:d4:20:ef:d0:f6:07:fa:a5:ba:1c:8b:ff:e2:
db:29:a6:d5:d9:3f:58:e8:c3:f1:56:d0:00:41:94:e9:40:3f:
dc:37:93:02:c6:67:72:b8:50:c5:85:34:21:8a:03:4b:f1:be:
35:47:f3:7c:92:d1:b8:97:d9:a4:7a:87:77:d0:61:d6:b9:03:
96:58:1e:58:e4:25:cd:65:ef:42:09:84:f7:69:16:57:32:9a:
88:f1:e5:dd:ff:96:e9:39:e6:6e:68:00:33:b3:1a:6c:d8:f9:
d0:7e:d1:98:75:ab:93:f5:d3:d1:c5:b8:36:79:6f:aa:6d:ce:
4b:9d:b6:7e:b6:a3:ca:97:a6:9f:a3:44:36:7c:7e:ad:b0:88:
36:f5:10:a1:e6:df:3c:0b:ca:4d:88:49:61:5a:ee:22:d7:2f:
51:26:2a:a9:06:11:97:8b:bb:e0:27:23:30:5c:51:75:7a:8c:
29:95:16:c3:4d:3b:40:22:55:1d:ca:1e:38:56:b0:80:0b:6a:
e7:d3:a6:4f:e7:10:7c:47:84:2d:bc:23:2f:97:68:eb:a5:62:
70:c7:fa:8b:e2:6f:71:7a:13:87:c8:b7:de:39:5d:cd:e4:89:
d6:53:7f:43
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtXQqV4FnJb4gERKIfTayfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Nzc3NWNlODgwNDY5NTk5NmNlNzdjN2QzNjgxYjljMjQx
YjM2MmYwHhcNMjMwMTAxMTI0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzBiODVjNjY2MWJiMjNiZWU0OTg2Yjg3YTQ3YWM1NjIyZDFjMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCmxVWaSNvdStwYSYDQrfFlTvbfl
gviGYPRI2QmEs39FzIFsK2JfzCGfcjj2GOpgDISQsAfZvaMQGiqvxOfFLSX0BfDf
boez1EYYTquJsdulitgIvcL7Zzqi+5j4WXwNZpIobwRVgGHiF6ggJhiOM5WHJkun
td3qIO3Nz4ysTrXvIDD3laABUJEussGx2Itjw3fFuj5IquJ1q2xbwDepMWo3fvsw
hcL1GaMx4Swql9Gq0ziFHSdIgBDeSi5MqCY9TTIiP8zkFvJbvsL7bhnAFQubXPE0
AMTRnILn3708y6Qip83q//M+pU5kEqM3vEHnyvenTmp9fxBR/NDyzxPMZwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGcLhcZmG7I77kmGuHpHrFYi0cE7MB8GA1UdIwQY
MBaAFJd3dc6IBGlZls53x9NoG5wkGzYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTkt
NjIzOTczM2M2MTg0LzEvWnd1RnhtWWJzanZ1U1lhNGVrZXNWaUxSd1RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTktNjIzOTczM2M2MTg0
LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuS0QMA0E
AgACMAcDBQAqAXlgMA0GCSqGSIb3DQEBCwUAA4IBAQBD45Bg1RcLUsocXKbIBE1a
pSFFEMFjyNQg79D2B/qluhyL/+LbKabV2T9Y6MPxVtAAQZTpQD/cN5MCxmdyuFDF
hTQhigNL8b41R/N8ktG4l9mkeod30GHWuQOWWB5Y5CXNZe9CCYT3aRZXMpqI8eXd
/5bpOeZuaAAzsxps2PnQftGYdauT9dPRxbg2eW+qbc5LnbZ+tqPKl6afo0Q2fH6t
sIg29RCh5t88C8pNiElhWu4i1y9RJiqpBhGXi7vgJyMwXFF1eowplRbDTTtAIlUd
yh44VrCAC2rn06ZP5xB8R4QtvCMvl2jrpWJwx/qL4m9xehOHyLfeOV3N5InWU39D
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:22 2024 by rpki-client on console-fra.rpki-client.org