Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/pZix6b73Wsg6jar4QSd77EIZTH0.roa
File: pZix6b73Wsg6jar4QSd77EIZTH0.roa (raw, json)
Hash identifier: SE3BaJvfLTqojf9n1krSDkW6Qe1ujhXF/aj3VHo0jXg=
Subject key identifier: A5:98:B1:E9:BE:F7:5A:C8:3A:8D:AA:F8:41:27:7B:EC:42:19:4C:7D
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 018C90CAC9F661B0F685B103CBE9F4E2C158
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/pZix6b73Wsg6jar4QSd77EIZTH0.roa
Signing time: Fri 22 Dec 2023 09:10:58 +0000
ROA not before: Fri 22 Dec 2023 09:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 185.90.220.0/22 maxlen: 22
83.229.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:ca:c9:f6:61:b0:f6:85:b1:03:cb:e9:f4:e2:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Dec 22 09:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a598b1e9bef75ac83a8daaf841277bec42194c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:2d:8c:eb:0c:a4:e4:ff:dd:c0:7e:34:68:
43:7b:be:07:ee:0c:a3:5e:6c:b2:9e:75:48:b5:a9:
cb:19:f4:39:39:b2:9d:bd:95:9e:d5:0e:a0:7e:91:
1a:69:94:2e:be:fc:10:98:86:34:d3:42:43:23:86:
c5:05:d9:7f:8e:4c:de:56:e0:0f:c4:6b:14:f8:b0:
e4:f0:4d:06:ed:39:16:db:df:c6:c9:17:ff:2f:d8:
13:0b:9d:86:90:a2:29:02:3f:5a:7a:97:97:09:9b:
91:c2:c6:eb:9e:72:9b:86:fd:82:3e:f9:12:db:84:
19:8c:9d:10:ca:86:ae:6b:86:a9:3c:8c:02:0c:88:
24:ba:3f:9e:dd:c3:0d:d0:27:56:b9:79:d4:1c:55:
e6:97:9a:a0:ec:52:df:cd:49:3c:09:b1:82:b9:a5:
de:82:bd:9d:ab:65:d7:db:8c:64:c7:95:57:ed:51:
0c:da:37:37:d9:84:bf:de:63:0a:7a:09:4e:61:39:
d0:46:47:75:a1:da:cb:a9:c1:d2:14:0e:a1:7a:66:
0c:bd:9d:58:02:aa:ca:26:a2:2e:5e:2e:c1:21:1d:
f6:1d:9a:23:8a:71:cb:e2:8c:bd:c0:b7:23:ec:b3:
f0:86:0e:be:e1:3e:2e:4f:58:f4:3c:ff:b6:b4:ba:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:98:B1:E9:BE:F7:5A:C8:3A:8D:AA:F8:41:27:7B:EC:42:19:4C:7D
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/pZix6b73Wsg6jar4QSd77EIZTH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.113.0/24
185.90.220.0/22
Signature Algorithm: sha256WithRSAEncryption
21:54:d1:c9:65:f3:68:cb:11:62:a0:66:65:3c:13:24:3b:b6:
1d:45:a4:22:ec:1c:83:31:70:77:05:f6:40:bf:3a:04:0e:3c:
cb:15:14:25:ac:32:f5:06:62:73:e1:22:aa:a2:41:ed:32:31:
c5:ce:c7:76:71:f5:73:8f:5b:fa:55:b4:bc:20:e6:dc:11:56:
0a:ec:f8:c1:80:d4:0e:1b:1a:15:37:25:7f:90:fc:bb:a7:bc:
90:69:77:0a:46:ed:3b:bc:7b:11:44:78:7f:b5:b9:48:10:2d:
27:80:b1:0b:7b:d1:c6:ea:bc:56:68:5d:77:bd:e2:45:ab:13:
8e:b5:32:03:68:fe:46:8a:73:42:c1:82:ec:92:3e:24:7f:8d:
e2:90:fc:45:67:93:87:0f:fb:42:b4:d0:7d:89:8f:7b:9e:38:
07:fd:55:fb:84:d7:8d:39:8e:0d:73:36:41:51:bd:23:e2:b8:
96:62:fa:dc:01:8c:44:da:0f:2e:8c:77:a1:3b:24:be:51:a9:
55:0b:51:c2:74:aa:78:34:aa:ef:39:9b:4a:1c:d6:b3:df:ee:
7c:16:f4:3f:b2:1d:8f:9f:cc:08:45:c3:ae:58:75:b5:c5:a6:
2e:87:7e:22:fa:db:fc:c4:df:7e:4b:ce:87:a8:15:d7:cb:df:
44:21:e7:88
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYyQysn2YbD2hbEDy+n04sFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky
ZDMwYTkwHhcNMjMxMjIyMDkxMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTk4YjFlOWJlZjc1YWM4M2E4ZGFhZjg0MTI3N2JlYzQyMTk0YzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdQtjOsMpOT/3cB+NGhDe74H7gyj
XmyynnVItanLGfQ5ObKdvZWe1Q6gfpEaaZQuvvwQmIY000JDI4bFBdl/jkzeVuAP
xGsU+LDk8E0G7TkW29/GyRf/L9gTC52GkKIpAj9aepeXCZuRwsbrnnKbhv2CPvkS
24QZjJ0Qyoaua4apPIwCDIgkuj+e3cMN0CdWuXnUHFXml5qg7FLfzUk8CbGCuaXe
gr2dq2XX24xkx5VX7VEM2jc32YS/3mMKeglOYTnQRkd1odrLqcHSFA6hemYMvZ1Y
AqrKJqIuXi7BIR32HZojinHL4oy9wLcj7LPwhg6+4T4uT1j0PP+2tLrDlwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKWYsem+91rIOo2q+EEne+xCGUx9MB8GA1UdIwQY
MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt
Yjk0NjQ3MThiYTM3LzEvcFppeDZiNzNXc2c2amFyNFFTZDc3RUlaVEgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3
LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU+VxAwQC
uVrcMA0GCSqGSIb3DQEBCwUAA4IBAQAhVNHJZfNoyxFioGZlPBMkO7YdRaQi7ByD
MXB3BfZAvzoEDjzLFRQlrDL1BmJz4SKqokHtMjHFzsd2cfVzj1v6VbS8IObcEVYK
7PjBgNQOGxoVNyV/kPy7p7yQaXcKRu07vHsRRHh/tblIEC0ngLELe9HG6rxWaF13
veJFqxOOtTIDaP5GinNCwYLskj4kf43ikPxFZ5OHD/tCtNB9iY97njgH/VX7hNeN
OY4NczZBUb0j4riWYvrcAYxE2g8ujHehOyS+UalVC1HCdKp4NKrvOZtKHNaz3+58
FvQ/sh2Pn8wIRcOuWHW1xaYuh34i+tv8xN9+S86HqBXXy99EIeeI
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org