Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ZYLLDW8wI2cMMQCp9WCP2FJ1XpQ.roa
File: ZYLLDW8wI2cMMQCp9WCP2FJ1XpQ.roa (raw, json)
Hash identifier: UZ0qtfmdQY9FovMVDdjVBbqSWNiSbQYQgaEHryB6MRQ=
Subject key identifier: 65:82:CB:0D:6F:30:23:67:0C:31:00:A9:F5:60:8F:D8:52:75:5E:94
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018B57B7F8951EB69CF00CB1B1CC4B6617BF
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ZYLLDW8wI2cMMQCp9WCP2FJ1XpQ.roa
Signing time: Sun 22 Oct 2023 14:09:16 +0000
ROA not before: Sun 22 Oct 2023 14:09:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 85.8.160.0/22 maxlen: 22
193.38.44.0/22 maxlen: 22
139.28.240.0/22 maxlen: 22
92.249.60.0/22 maxlen: 22
139.28.48.0/22 maxlen: 22
176.96.128.0/22 maxlen: 22
194.93.48.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 22 Oct 2023 16:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:57:b7:f8:95:1e:b6:9c:f0:0c:b1:b1:cc:4b:66:17:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 22 14:09:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6582cb0d6f3023670c3100a9f5608fd852755e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:5e:6d:8b:a9:ef:4d:b4:cb:cb:d9:70:d6:
de:e1:90:10:b9:22:5e:bb:44:c7:79:54:c3:07:a4:
02:d4:34:d6:ef:d3:37:d1:42:47:48:71:14:32:2a:
7e:9a:87:e0:1c:74:7e:d4:3a:b2:18:6d:a2:89:e2:
2f:e5:82:a4:48:cb:11:76:36:06:55:0a:f4:de:b7:
90:20:a5:db:f3:0b:57:80:c9:f4:7d:05:6f:78:70:
68:02:47:aa:5d:bd:e0:64:fa:2d:b8:f0:86:d2:84:
09:70:87:98:0a:7b:41:0b:fd:a2:1a:91:99:aa:d8:
e1:59:1c:9f:d1:24:9c:9d:68:9c:8c:af:5b:aa:84:
81:9d:1f:5c:d1:64:4e:2a:87:8c:8b:d7:54:f9:34:
d2:bb:29:56:3d:3c:52:cd:b6:1a:04:d8:e3:6e:ae:
18:13:a0:c4:79:9d:60:4a:b9:be:d6:eb:f2:21:84:
7e:81:2f:26:cc:2d:8e:af:06:76:b9:39:bc:95:e1:
54:f5:fe:bf:f7:b4:8f:70:0f:62:4a:4f:37:53:1b:
67:8b:b2:a4:af:2c:63:04:ed:72:7d:d7:f7:eb:6f:
7c:0a:06:de:70:c5:0c:cf:11:fa:ee:f4:97:5b:28:
55:de:da:73:4e:72:40:87:37:71:57:38:e0:65:82:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:82:CB:0D:6F:30:23:67:0C:31:00:A9:F5:60:8F:D8:52:75:5E:94
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ZYLLDW8wI2cMMQCp9WCP2FJ1XpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.244.0/22
85.8.160.0/22
92.249.60.0/22
139.28.48.0/22
139.28.240.0/22
176.96.128.0/22
193.38.44.0/22
194.93.48.0/22
Signature Algorithm: sha256WithRSAEncryption
17:25:e4:0e:97:e8:f1:3a:64:c2:be:33:54:f1:d8:7e:d1:7c:
77:e7:04:c2:d3:af:bd:4f:66:0b:52:a5:f7:26:79:eb:80:9f:
f2:34:3f:97:05:ef:9c:2e:92:1c:ab:9c:e5:32:a8:89:71:81:
95:14:e8:4b:0e:83:dc:f1:17:f5:78:65:e9:83:30:6c:50:83:
82:60:74:d6:78:76:e8:7f:19:7d:2e:1a:fc:cc:36:d8:f2:1e:
75:0f:e1:b8:03:f5:5b:38:41:bf:da:98:83:97:eb:cb:29:a1:
65:e7:c8:af:13:cb:56:11:b4:51:86:cd:a8:eb:24:c7:c9:1e:
5c:3f:bb:32:2d:7d:2f:8b:39:1f:4a:5f:89:d4:ce:92:54:69:
50:e2:4a:75:f3:f8:55:e1:e0:e3:e6:22:d0:96:75:e2:d8:a9:
31:26:db:f7:6a:76:15:17:85:bb:72:a4:6f:4f:47:32:c1:6c:
43:e6:d1:14:73:a1:ab:55:10:96:4b:32:b3:d5:c4:d7:3c:d2:
3c:46:e7:48:aa:73:0a:42:f3:03:27:ca:eb:e5:30:ec:4b:89:
55:d9:60:f1:d0:f4:c0:1f:12:db:08:a3:a9:24:a7:bb:58:2c:
dd:7d:14:1b:7e:a3:ee:92:24:c8:23:f2:1c:c0:8e:2b:3c:d1:
26:8b:99:1f
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYtXt/iVHrac8AyxscxLZhe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjMxMDIyMTQwOTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTgyY2IwZDZmMzAyMzY3MGMzMTAwYTlmNTYwOGZkODUyNzU1ZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryVebYup7020y8vZcNbe4ZAQuSJe
u0THeVTDB6QC1DTW79M30UJHSHEUMip+mofgHHR+1DqyGG2iieIv5YKkSMsRdjYG
VQr03reQIKXb8wtXgMn0fQVveHBoAkeqXb3gZPotuPCG0oQJcIeYCntBC/2iGpGZ
qtjhWRyf0SScnWicjK9bqoSBnR9c0WROKoeMi9dU+TTSuylWPTxSzbYaBNjjbq4Y
E6DEeZ1gSrm+1uvyIYR+gS8mzC2OrwZ2uTm8leFU9f6/97SPcA9iSk83Uxtni7Kk
ryxjBO1yfdf36298CgbecMUMzxH67vSXWyhV3tpzTnJAhzdxVzjgZYLWfQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFGWCyw1vMCNnDDEAqfVgj9hSdV6UMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvWllMTERXOHdJMmNNTVFDcDlXQ1AyRkoxWHBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCU6v0AwQC
VQigAwQCXPk8AwQCixwwAwQCixzwAwQCsGCAAwQCwSYsAwQCwl0wMA0GCSqGSIb3
DQEBCwUAA4IBAQAXJeQOl+jxOmTCvjNU8dh+0Xx35wTC06+9T2YLUqX3JnnrgJ/y
ND+XBe+cLpIcq5zlMqiJcYGVFOhLDoPc8Rf1eGXpgzBsUIOCYHTWeHbofxl9Lhr8
zDbY8h51D+G4A/VbOEG/2piDl+vLKaFl58ivE8tWEbRRhs2o6yTHyR5cP7syLX0v
izkfSl+J1M6SVGlQ4kp18/hV4eDj5iLQlnXi2KkxJtv3anYVF4W7cqRvT0cywWxD
5tEUc6GrVRCWSzKz1cTXPNI8RudIqnMKQvMDJ8rr5TDsS4lV2WDx0PTAHxLbCKOp
JKe7WCzdfRQbfqPukiTII/IcwI4rPNEmi5kf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org