Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/ZdF_WrSQR59TpPsrLMSC9Q17j_0.roa
File: ZdF_WrSQR59TpPsrLMSC9Q17j_0.roa (raw, json)
Hash identifier: mXmhus8EfNga7WgXNf+3jFwML3dPLJLGGUwyZrZ9JlI=
Subject key identifier: 65:D1:7F:5A:B4:90:47:9F:53:A4:FB:2B:2C:C4:82:F5:0D:7B:8F:FD
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 0187C18CC8654839563FDD959AF131EB1FCF
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/ZdF_WrSQR59TpPsrLMSC9Q17j_0.roa
Signing time: Thu 27 Apr 2023 07:10:41 +0000
ROA not before: Thu 27 Apr 2023 07:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142032
IP address blocks: 45.145.230.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:8c:c8:65:48:39:56:3f:dd:95:9a:f1:31:eb:1f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Apr 27 07:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d17f5ab490479f53a4fb2b2cc482f50d7b8ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:80:d5:37:8c:27:73:2f:1d:7a:80:0e:98:6b:
c2:5c:73:83:e1:0f:2e:8b:2f:bb:f4:f1:25:ff:37:
4c:f8:af:6e:d7:03:26:94:ea:58:a8:7e:1b:0a:bc:
64:7d:51:cd:cc:66:55:cf:0e:80:92:7e:2d:c8:c9:
41:5d:cf:4b:98:08:21:42:8d:bb:26:d0:26:f9:e2:
38:40:ec:1b:89:20:b8:3a:0c:87:99:ff:e2:d2:b5:
4f:6d:7a:f3:d7:66:ba:4c:a1:ff:c4:f7:fb:2d:a9:
4e:23:84:c8:b2:89:7b:2f:fa:e3:47:c5:c8:15:70:
db:58:35:6d:ca:23:d0:ad:ae:81:7d:14:d5:9c:a9:
0a:84:57:4e:cc:93:4a:9f:0d:e4:ad:39:75:61:1e:
86:a5:bc:81:af:84:7a:f1:3c:bc:fa:5a:47:85:fc:
0b:ec:56:3f:04:6b:26:a7:2f:89:ed:81:e4:6e:d2:
77:91:92:7c:cd:5d:e9:51:dd:3e:da:24:85:f8:c8:
53:cb:de:56:36:82:6d:6e:c5:ba:23:d0:89:fd:a4:
85:9a:df:fb:e7:12:90:15:f3:5e:49:be:07:c3:3b:
78:a8:fa:ec:12:ee:83:34:58:5e:5a:cd:e4:fc:48:
54:ea:7f:44:9e:a8:85:0b:3d:45:6e:aa:30:7e:af:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:7F:5A:B4:90:47:9F:53:A4:FB:2B:2C:C4:82:F5:0D:7B:8F:FD
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/ZdF_WrSQR59TpPsrLMSC9Q17j_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.230.0/23
Signature Algorithm: sha256WithRSAEncryption
08:ba:24:ac:8d:13:3e:fb:c4:21:dd:83:a8:75:7d:36:9a:aa:
59:be:15:9a:89:5f:18:fe:94:17:5b:c3:79:85:f1:51:54:bd:
03:a8:52:28:dc:cb:18:2d:c2:42:11:17:bc:7e:0f:42:5d:8a:
11:39:b7:02:15:42:35:03:89:67:74:93:dd:0f:de:be:8c:d1:
b6:f8:b0:14:18:87:c6:dc:ce:fd:dc:db:c1:d3:81:35:41:b9:
eb:dd:63:18:32:65:62:a3:46:9c:49:a3:e4:d4:cc:1c:2d:30:
f9:04:8a:4a:e0:e9:6e:cd:35:f1:a4:f4:cb:57:26:61:92:af:
bf:69:43:69:9d:de:56:44:a9:47:e2:64:1c:ac:cd:a6:53:45:
7c:dc:bf:43:9d:7e:79:08:8a:b0:8d:10:90:b6:d7:45:73:c0:
dd:aa:89:72:53:7d:ed:00:46:7c:fe:7e:30:cc:00:cc:5e:b0:
b9:ce:a7:f3:f5:7d:37:0d:78:fd:c1:b9:e8:14:01:8b:76:52:
88:0c:29:95:5d:3e:3b:b4:08:d2:fe:8d:12:a5:79:59:73:7e:
ef:c4:de:b0:3e:6a:ab:2c:64:66:14:b2:7f:aa:8b:68:72:73:
e3:f4:84:97:0b:a0:3a:07:b8:9c:3d:a6:67:e1:53:ae:75:15:
47:b2:d5:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfBjMhlSDlWP92VmvEx6x/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzM2MWZiYTg0MDkxNzRmYjNjNDgyYjhjYTI2ZjIzNWVi
ZDIyYzIwHhcNMjMwNDI3MDcxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWQxN2Y1YWI0OTA0NzlmNTNhNGZiMmIyY2M0ODJmNTBkN2I4ZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIDVN4wncy8deoAOmGvCXHOD4Q8u
iy+79PEl/zdM+K9u1wMmlOpYqH4bCrxkfVHNzGZVzw6Akn4tyMlBXc9LmAghQo27
JtAm+eI4QOwbiSC4OgyHmf/i0rVPbXrz12a6TKH/xPf7LalOI4TIsol7L/rjR8XI
FXDbWDVtyiPQra6BfRTVnKkKhFdOzJNKnw3krTl1YR6GpbyBr4R68Ty8+lpHhfwL
7FY/BGsmpy+J7YHkbtJ3kZJ8zV3pUd0+2iSF+MhTy95WNoJtbsW6I9CJ/aSFmt/7
5xKQFfNeSb4Hwzt4qPrsEu6DNFheWs3k/EhU6n9EnqiFCz1Fbqowfq/EEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXRf1q0kEefU6T7KyzEgvUNe4/9MB8GA1UdIwQY
MBaAFDMzYfuoQJF0+zxIK4yibyNevSLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xMWUxM2YtNGNlYS00NGFmLTgxZjkt
YjJjY2NmMGVhZGFiLzEvWmRGX1dyU1FSNTlUcFBzckxNU0M5UTE3al8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xMWUxM2YtNGNlYS00NGFmLTgxZjktYjJjY2NmMGVhZGFi
LzEvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZHmMA0G
CSqGSIb3DQEBCwUAA4IBAQAIuiSsjRM++8Qh3YOodX02mqpZvhWaiV8Y/pQXW8N5
hfFRVL0DqFIo3MsYLcJCERe8fg9CXYoRObcCFUI1A4lndJPdD96+jNG2+LAUGIfG
3M793NvB04E1Qbnr3WMYMmVio0acSaPk1MwcLTD5BIpK4OluzTXxpPTLVyZhkq+/
aUNpnd5WRKlH4mQcrM2mU0V83L9DnX55CIqwjRCQttdFc8DdqolyU33tAEZ8/n4w
zADMXrC5zqfz9X03DXj9wbnoFAGLdlKIDCmVXT47tAjS/o0SpXlZc37vxN6wPmqr
LGRmFLJ/qotocnPj9ISXC6A6B7icPaZn4VOudRVHstX6
-----END CERTIFICATE-----
Generated at Tue Jan 2 16:34:51 2024 by rpki-client on console.sobornost.net