Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/ztraZ-FrurEYjOty8DPinvniGhA.roa
File: ztraZ-FrurEYjOty8DPinvniGhA.roa (raw, json)
Hash identifier: 1LGJud6sXTBgXZxsPlMVxgRcqGOFFzEL/n1uW2ns1T8=
Subject key identifier: CE:DA:DA:67:E1:6B:BA:B1:18:8C:EB:72:F0:33:E2:9E:F9:E2:1A:10
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 01888B4BFA26210228DB378704B1640955D1
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/ztraZ-FrurEYjOty8DPinvniGhA.roa
Signing time: Mon 05 Jun 2023 11:23:12 +0000
ROA not before: Mon 05 Jun 2023 11:23:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206924
IP address blocks: 91.198.241.0/24 maxlen: 24
185.230.223.0/24 maxlen: 24
2a0c:2f07:d::/48 maxlen: 48
2a0c:2f07:f::/48 maxlen: 48
2a0c:2f07:384::/48 maxlen: 48
2a0c:2f07:29::/48 maxlen: 48
2a0c:2f07:9459::/48 maxlen: 48
2a0c:2f07:ac1::/48 maxlen: 48
2a0c:2f07:4896::/48 maxlen: 48
2a0c:2f07:4663::/48 maxlen: 48
2a0c:2f07::/64 maxlen: 64
2a0c:2f07::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:4b:fa:26:21:02:28:db:37:87:04:b1:64:09:55:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Jun 5 11:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cedada67e16bbab1188ceb72f033e29ef9e21a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:a9:fb:6f:46:24:94:3b:7c:f8:fc:29:10:
a4:99:33:72:26:2b:43:8a:f0:33:70:42:7f:e5:cc:
ab:6f:84:49:c9:e8:f4:64:b4:c3:7f:09:d6:5c:e0:
2c:8e:14:e4:93:0b:6c:51:a8:fc:02:6b:c7:75:69:
a2:cd:cd:a9:d9:e7:16:ab:88:13:7d:3d:cd:91:fb:
ec:52:3d:8f:56:84:88:23:f6:31:5a:45:44:ee:4e:
e4:0f:4e:bf:32:40:e5:13:3a:92:4a:2c:f3:e9:e0:
e0:9e:68:51:7d:bf:a6:f7:2a:05:68:41:ca:48:5e:
bb:fd:95:72:72:66:b4:d0:96:0b:1e:e7:cf:07:99:
2c:1e:4f:5c:d3:a7:dc:f1:e8:cc:cb:50:d6:43:0d:
b8:6e:fb:d4:e1:cb:cc:af:85:ac:06:43:16:9f:e5:
b4:73:79:df:18:f3:bf:7e:2f:59:1f:6d:48:79:c7:
85:10:57:d2:0d:d8:f8:fa:fa:b7:26:ec:93:d9:ce:
3a:82:25:e6:21:8e:bc:f2:62:cc:67:a2:9c:8c:9c:
6d:88:a8:1c:cf:ff:02:9a:8a:8c:b1:1a:d0:a5:c0:
81:d3:3f:83:e7:54:04:bb:e6:8b:36:43:6e:64:3e:
44:eb:34:3b:43:e6:53:c1:5a:b0:24:0b:70:8a:ed:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DA:DA:67:E1:6B:BA:B1:18:8C:EB:72:F0:33:E2:9E:F9:E2:1A:10
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/ztraZ-FrurEYjOty8DPinvniGhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.241.0/24
185.230.223.0/24
IPv6:
2a0c:2f07::/48
2a0c:2f07:d::/48
2a0c:2f07:f::/48
2a0c:2f07:29::/48
2a0c:2f07:384::/48
2a0c:2f07:ac1::/48
2a0c:2f07:4663::/48
2a0c:2f07:4896::/48
2a0c:2f07:9459::/48
Signature Algorithm: sha256WithRSAEncryption
6d:39:32:1d:32:f4:db:c1:4c:46:84:a8:71:b5:79:d7:5c:93:
56:63:4a:68:97:d9:5e:de:d8:c1:52:22:54:4e:4e:cb:15:9f:
74:a8:38:5f:0c:97:f8:20:89:f9:ea:35:ba:86:2f:c9:8e:3c:
e6:ff:32:1e:b3:e7:e7:d8:fc:07:d5:93:5a:a1:c8:8a:44:23:
ac:87:15:5b:05:64:d4:70:04:ec:6f:43:83:d8:0d:63:58:c8:
be:54:67:06:80:41:e2:a3:9d:19:17:97:93:9b:50:84:91:08:
32:6e:76:ed:76:bd:3d:00:83:e4:03:1f:9a:58:01:17:31:22:
ff:c7:42:c7:c4:83:7f:21:a1:88:38:3a:58:39:9d:ba:f4:7e:
f2:7b:f1:54:bb:1f:94:e5:94:ce:d9:f8:8d:80:80:dc:da:87:
61:88:d0:e5:ea:e2:27:ed:3b:48:9f:bf:ff:0f:c9:f1:b2:df:
7d:32:10:25:5c:6c:ac:dd:2f:bf:33:b1:52:2f:a1:61:9a:8b:
74:d8:86:f8:48:b0:75:93:93:cf:48:c9:16:f5:00:c6:75:8c:
66:68:66:d4:aa:53:8d:c6:be:1e:69:f4:ac:b5:d1:34:23:3d:
0b:26:c4:33:42:37:8a:a3:1a:0d:94:04:20:45:9c:82:3c:50:
d0:8a:e8:15
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAYiLS/omIQIo2zeHBLFkCVXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTFkMjk1MDE0NWRjZWFjMDBjMGNhNGViNTM2ZDkyODY3
YjM4ZDMwHhcNMjMwNjA1MTEyMzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWRhZGE2N2UxNmJiYWIxMTg4Y2ViNzJmMDMzZTI5ZWY5ZTIxYTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcmp+29GJJQ7fPj8KRCkmTNyJitD
ivAzcEJ/5cyrb4RJyej0ZLTDfwnWXOAsjhTkkwtsUaj8AmvHdWmizc2p2ecWq4gT
fT3NkfvsUj2PVoSII/YxWkVE7k7kD06/MkDlEzqSSizz6eDgnmhRfb+m9yoFaEHK
SF67/ZVycma00JYLHufPB5ksHk9c06fc8ejMy1DWQw24bvvU4cvMr4WsBkMWn+W0
c3nfGPO/fi9ZH21IeceFEFfSDdj4+vq3JuyT2c46giXmIY688mLMZ6KcjJxtiKgc
z/8CmoqMsRrQpcCB0z+D51QEu+aLNkNuZD5E6zQ7Q+ZTwVqwJAtwiu20AwIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFM7a2mfha7qxGIzrcvAz4p754hoQMB8GA1UdIwQY
MBaAFDaR0pUBRdzqwAwMpOtTbZKGezjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEt
MWRlYzQwNTg0ODA2LzEvenRyYVotRnJ1ckVZak90eThEUGludm5pR2hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEtMWRlYzQwNTg0ODA2
LzEvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTASBAIAATAMAwQAW8bxAwQA
uebfMFcEAgACMFEDBwAqDC8HAAADBwAqDC8HAA0DBwAqDC8HAA8DBwAqDC8HACkD
BwAqDC8HA4QDBwAqDC8HCsEDBwAqDC8HRmMDBwAqDC8HSJYDBwAqDC8HlFkwDQYJ
KoZIhvcNAQELBQADggEBAG05Mh0y9NvBTEaEqHG1eddck1ZjSmiX2V7e2MFSIlRO
TssVn3SoOF8Ml/ggifnqNbqGL8mOPOb/Mh6z5+fY/AfVk1qhyIpEI6yHFVsFZNRw
BOxvQ4PYDWNYyL5UZwaAQeKjnRkXl5ObUISRCDJudu12vT0Ag+QDH5pYARcxIv/H
QsfEg38hoYg4Olg5nbr0fvJ78VS7H5TllM7Z+I2AgNzah2GI0OXq4iftO0ifv/8P
yfGy330yECVcbKzdL78zsVIvoWGai3TYhvhIsHWTk89IyRb1AMZ1jGZoZtSqU43G
vh5p9Ky10TQjPQsmxDNCN4qjGg2UBCBFnII8UNCK6BU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:42 2024 by rpki-client on console-ams.rpki-client.org