Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/zDNP0dtALHgEem6CPfXzWcDd1Gs.roa
File: zDNP0dtALHgEem6CPfXzWcDd1Gs.roa (raw, json)
Hash identifier: ESX4chEuppDWjUCzBf+Z/APARHbKT4yBTiuvr+AAuhA=
Subject key identifier: CC:33:4F:D1:DB:40:2C:78:04:7A:6E:82:3D:F5:F3:59:C0:DD:D4:6B
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 0188E7AAE45BC9CC9934110DD106E26FB845
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/zDNP0dtALHgEem6CPfXzWcDd1Gs.roa
Signing time: Fri 23 Jun 2023 09:51:56 +0000
ROA not before: Fri 23 Jun 2023 09:51:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 195.216.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 08:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:aa:e4:5b:c9:cc:99:34:11:0d:d1:06:e2:6f:b8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Jun 23 09:51:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc334fd1db402c78047a6e823df5f359c0ddd46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:52:a5:0d:3e:79:e4:85:c1:b7:b5:c3:ce:
5f:bb:c2:80:f9:14:41:cd:9e:85:2f:9a:4f:8d:11:
e0:53:9b:a4:30:1c:0d:70:26:0c:a6:99:68:45:c2:
14:4d:73:08:3c:de:dd:ef:a8:44:f0:59:ca:10:f8:
1c:e9:06:a9:0b:c6:33:f2:25:cb:fc:28:b6:dd:f1:
e0:96:6b:75:52:ce:3c:e7:db:11:e6:d5:0a:d7:02:
87:b1:5a:2c:a2:ad:c5:1d:cb:9d:46:ad:9d:73:a3:
1e:44:e9:8d:01:f5:9f:2e:9e:81:26:4c:61:4e:62:
e4:a2:47:ea:8b:da:d5:ff:dc:8a:c9:a8:05:43:7e:
1f:35:e0:bf:e6:34:a6:0d:d7:10:c7:35:7c:8e:06:
6f:56:03:7d:ff:a6:47:17:d6:c8:4f:b3:fc:a1:a1:
67:cc:4f:f9:3a:ef:b8:46:f6:b2:0c:04:e5:e9:8c:
32:02:76:3a:ef:c8:89:0e:98:a3:ee:2e:9b:a5:7f:
9e:6a:15:c3:9a:ce:47:67:d4:b0:02:9e:eb:07:d2:
a5:7e:75:92:e1:2d:c6:54:1e:c3:f9:46:fb:13:ce:
cf:e6:d7:4a:b9:1b:ed:40:47:d4:fb:2e:f4:05:68:
70:d2:88:8d:9c:4f:23:f1:ae:74:18:51:b9:05:65:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:4F:D1:DB:40:2C:78:04:7A:6E:82:3D:F5:F3:59:C0:DD:D4:6B
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/zDNP0dtALHgEem6CPfXzWcDd1Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.249.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:92:c7:69:d1:89:85:06:79:59:33:81:bf:6f:7d:93:d1:4f:
cb:b4:44:0f:d0:0c:8c:f2:03:dc:09:a7:90:1c:34:45:73:46:
94:94:f4:fe:d8:8a:4d:46:56:30:4c:6e:cb:6d:e8:9e:cc:07:
e9:f5:8f:e4:a7:18:01:00:5a:12:0e:d2:27:0b:3f:98:12:09:
fe:a4:ef:af:09:29:b8:b4:d3:26:34:18:6e:19:9f:15:ef:97:
11:bc:81:3c:70:48:e0:df:cc:32:f4:1d:8b:18:0e:c2:0b:ed:
76:e9:84:12:01:44:28:98:92:16:7f:d3:80:e4:c0:53:56:b8:
c3:ae:8e:09:f2:d8:e0:3b:73:0a:8a:f8:96:78:15:b9:4f:fa:
70:98:20:e5:9e:1e:f2:0e:cf:08:56:ae:e4:2f:8c:e6:98:09:
68:d0:4b:ec:19:d4:dd:a7:2e:7f:38:7d:3e:bc:dd:1e:9a:b7:
fd:16:c9:01:13:50:cc:4d:3c:31:53:5e:8c:19:d1:93:3e:d0:
1c:3e:53:7e:76:b2:ae:7f:74:69:e1:6f:e4:ec:f6:cb:ae:a8:
14:2f:d2:bc:80:5d:ab:ae:91:c1:a1:40:4f:1b:73:55:b2:9b:
25:5d:3d:c6:59:9f:9d:0c:a2:7f:0a:6c:e4:47:6c:47:07:2b:
af:a4:1c:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjnquRbycyZNBEN0Qbib7hFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzE0YmMwMGE3ZTVhZTIzMzQ5ZTA1NDA2MjkzYTdkNjA2
MGNkYTEwHhcNMjMwNjIzMDk1MTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzMzNGZkMWRiNDAyYzc4MDQ3YTZlODIzZGY1ZjM1OWMwZGRkNDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4xSpQ0+eeSFwbe1w85fu8KA+RRB
zZ6FL5pPjRHgU5ukMBwNcCYMpploRcIUTXMIPN7d76hE8FnKEPgc6QapC8Yz8iXL
/Ci23fHglmt1Us4859sR5tUK1wKHsVosoq3FHcudRq2dc6MeROmNAfWfLp6BJkxh
TmLkokfqi9rV/9yKyagFQ34fNeC/5jSmDdcQxzV8jgZvVgN9/6ZHF9bIT7P8oaFn
zE/5Ou+4RvayDATl6YwyAnY678iJDpij7i6bpX+eahXDms5HZ9SwAp7rB9KlfnWS
4S3GVB7D+Ub7E87P5tdKuRvtQEfU+y70BWhw0oiNnE8j8a50GFG5BWVa+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMwzT9HbQCx4BHpugj3181nA3dRrMB8GA1UdIwQY
MBaAFC8xS8AKflriM0ngVAYpOn1gYM2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQt
N2MwYjliMTlmY2ZiLzEvekROUDBkdEFMSGdFZW02Q1BmWHpXY0RkMUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQtN2MwYjliMTlmY2Zi
LzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9j5MA0G
CSqGSIb3DQEBCwUAA4IBAQDiksdp0YmFBnlZM4G/b32T0U/LtEQP0AyM8gPcCaeQ
HDRFc0aUlPT+2IpNRlYwTG7LbeiezAfp9Y/kpxgBAFoSDtInCz+YEgn+pO+vCSm4
tNMmNBhuGZ8V75cRvIE8cEjg38wy9B2LGA7CC+126YQSAUQomJIWf9OA5MBTVrjD
ro4J8tjgO3MKiviWeBW5T/pwmCDlnh7yDs8IVq7kL4zmmAlo0EvsGdTdpy5/OH0+
vN0emrf9FskBE1DMTTwxU16MGdGTPtAcPlN+drKuf3Rp4W/k7PbLrqgUL9K8gF2r
rpHBoUBPG3NVspslXT3GWZ+dDKJ/CmzkR2xHByuvpBy8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-fra.rpki-client.org