Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/0_ZcmPMS9wRo9x35DtgYvxvCKf8.roa
File: 0_ZcmPMS9wRo9x35DtgYvxvCKf8.roa (raw, json)
Hash identifier: 1rMv5tIIIYrc+bQBUQx+xSFQba7HEoxx6MO4yJ7nkCQ=
Subject key identifier: D3:F6:5C:98:F3:12:F7:04:68:F7:1D:F9:0E:D8:18:BF:1B:C2:29:FF
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 01856D4AB2F8A3A1BCF5B668201AFDF8EAF1
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/0_ZcmPMS9wRo9x35DtgYvxvCKf8.roa
Signing time: Sun 01 Jan 2023 12:24:50 +0000
ROA not before: Sun 01 Jan 2023 12:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52033
IP address blocks: 46.254.49.0/24 maxlen: 24
46.254.50.0/24 maxlen: 24
46.254.51.0/24 maxlen: 24
46.254.48.0/24 maxlen: 24
46.254.52.0/24 maxlen: 24
46.254.53.0/24 maxlen: 24
46.254.54.0/24 maxlen: 24
46.254.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b2:f8:a3:a1:bc:f5:b6:68:20:1a:fd:f8:ea:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Jan 1 12:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3f65c98f312f70468f71df90ed818bf1bc229ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:21:45:b1:f0:63:b7:aa:6f:91:b4:37:1b:3d:
3c:3e:73:1a:a6:77:1e:8c:07:5d:45:05:ad:c5:f1:
fc:e0:1c:8e:a8:92:90:9e:67:a9:44:9e:93:5a:80:
7e:de:8c:b5:a3:d9:99:b5:e1:81:3a:cc:69:8e:38:
c6:15:1c:57:b1:90:77:65:98:9d:d7:74:55:b4:d4:
e7:b4:8d:d7:18:1a:f9:c5:65:be:ca:8c:8d:b7:81:
fc:e1:ee:a6:1f:ab:65:13:be:d0:2b:d8:06:25:74:
d0:2b:6c:e5:f5:90:6e:ce:ac:31:8e:3a:eb:10:c8:
48:42:1e:b6:9e:eb:97:4a:61:6b:53:49:cf:1e:8a:
30:6d:2d:83:10:27:8c:80:78:79:cc:68:e3:8b:04:
a4:4d:4e:1d:79:9e:ab:ff:f1:c7:57:ef:0b:6d:03:
ee:b5:57:59:b6:e8:09:78:48:67:71:95:29:76:60:
0d:57:6b:bf:ab:f0:09:c6:ae:06:cd:e2:16:a6:2b:
b4:b2:f0:dc:6c:14:e9:ff:14:ac:2f:9d:9c:d7:83:
3e:c0:e7:26:08:64:07:c8:a2:cd:47:c9:e2:46:c6:
84:f8:15:6f:83:72:52:e8:3d:68:43:ab:9c:9a:66:
36:4e:3b:1c:ab:13:f0:4a:1a:01:8b:00:a7:0f:4c:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F6:5C:98:F3:12:F7:04:68:F7:1D:F9:0E:D8:18:BF:1B:C2:29:FF
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/0_ZcmPMS9wRo9x35DtgYvxvCKf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.48.0/21
Signature Algorithm: sha256WithRSAEncryption
69:12:4e:cb:33:a3:a5:d2:6d:0e:22:c6:15:79:7a:f6:c0:b0:
5e:0c:98:d2:3d:55:ca:95:53:0a:5c:65:c9:05:63:ae:2f:eb:
9c:40:19:06:ee:7b:e3:78:da:b3:02:e9:47:83:c9:fb:cf:c1:
66:c8:6b:c1:22:33:7d:99:54:19:20:ce:73:a5:ed:c4:74:15:
14:be:90:5b:f2:01:61:07:ca:1c:10:4a:6e:cd:39:6e:50:f0:
15:88:3f:81:12:c4:de:07:eb:d3:bd:bb:f0:ce:7b:59:36:ad:
96:20:67:cb:d8:8f:98:6c:46:f8:06:d1:b2:e4:50:a3:3a:f9:
1b:6f:da:e7:c6:bd:e9:07:21:03:5c:a9:ef:35:c7:7b:33:55:
53:56:e1:be:ce:da:4b:a9:12:be:2f:d5:9b:ed:64:60:d3:fd:
e0:48:26:aa:08:84:13:07:dc:a9:dc:a8:5d:2d:d3:18:95:16:
90:a0:09:18:cd:80:a2:86:d7:be:72:0a:c6:72:d4:97:48:d4:
b8:2d:3d:a2:0a:27:54:c3:7e:21:c7:ce:c8:8f:46:6b:b2:0c:
c6:1e:87:fb:e2:c4:3d:5e:d1:f2:87:29:7b:ec:1f:33:6c:2c:
e2:05:81:13:fc:15:67:e1:b7:6d:41:df:8d:80:46:80:ea:15:
33:1d:ca:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtSrL4o6G89bZoIBr9+OrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3
MzJlZTAwHhcNMjMwMTAxMTIyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2Y2NWM5OGYzMTJmNzA0NjhmNzFkZjkwZWQ4MThiZjFiYzIyOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCFFsfBjt6pvkbQ3Gz08PnMapnce
jAddRQWtxfH84ByOqJKQnmepRJ6TWoB+3oy1o9mZteGBOsxpjjjGFRxXsZB3ZZid
13RVtNTntI3XGBr5xWW+yoyNt4H84e6mH6tlE77QK9gGJXTQK2zl9ZBuzqwxjjrr
EMhIQh62nuuXSmFrU0nPHoowbS2DECeMgHh5zGjjiwSkTU4deZ6r//HHV+8LbQPu
tVdZtugJeEhncZUpdmANV2u/q/AJxq4GzeIWpiu0svDcbBTp/xSsL52c14M+wOcm
CGQHyKLNR8niRsaE+BVvg3JS6D1oQ6ucmmY2TjscqxPwShoBiwCnD0ytKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNP2XJjzEvcEaPcd+Q7YGL8bwin/MB8GA1UdIwQY
MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt
Y2VjMjJlYTc5NTEzLzEvMF9aY21QTVM5d1JvOXgzNUR0Z1l2eHZDS2Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz
LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLv4wMA0G
CSqGSIb3DQEBCwUAA4IBAQBpEk7LM6Ol0m0OIsYVeXr2wLBeDJjSPVXKlVMKXGXJ
BWOuL+ucQBkG7nvjeNqzAulHg8n7z8FmyGvBIjN9mVQZIM5zpe3EdBUUvpBb8gFh
B8ocEEpuzTluUPAViD+BEsTeB+vTvbvwzntZNq2WIGfL2I+YbEb4BtGy5FCjOvkb
b9rnxr3pByEDXKnvNcd7M1VTVuG+ztpLqRK+L9Wb7WRg0/3gSCaqCIQTB9yp3Khd
LdMYlRaQoAkYzYCihte+cgrGctSXSNS4LT2iCidUw34hx87Ij0ZrsgzGHof74sQ9
XtHyhyl77B8zbCziBYET/BVn4bdtQd+NgEaA6hUzHcr5
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:00 2024 by rpki-client on console.sobornost.net