Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZTNL_qUe-0ir35auAY7CkcOUIN0.roa
File: ZTNL_qUe-0ir35auAY7CkcOUIN0.roa (raw, json)
Hash identifier: dVjYptu9aBIYsKi3VrEJ0wHWze/kwfZit7hD5ruLJg4=
Subject key identifier: 65:33:4B:FE:A5:1E:FB:48:AB:DF:96:AE:01:8E:C2:91:C3:94:20:DD
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018B48AE2D2EBC2DEC4ECF682060823E09DE
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZTNL_qUe-0ir35auAY7CkcOUIN0.roa
Signing time: Thu 19 Oct 2023 16:04:16 +0000
ROA not before: Thu 19 Oct 2023 16:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151604
IP address blocks: 109.72.117.0/24 maxlen: 24
81.22.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Nov 2023 10:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:ae:2d:2e:bc:2d:ec:4e:cf:68:20:60:82:3e:09:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 19 16:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65334bfea51efb48abdf96ae018ec291c39420dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:ec:61:44:5b:98:8a:7d:8b:d6:d9:f8:7a:
6a:80:86:57:d4:6a:f0:93:36:9f:f7:e4:2f:b9:27:
c4:a2:11:99:fc:cf:97:88:0e:09:44:61:8f:c3:60:
7e:ae:a7:db:f8:d7:01:66:5c:99:cd:b9:3e:19:9e:
81:a6:b7:51:a2:26:56:54:20:7b:d1:20:4d:1d:80:
ef:d1:e3:1c:20:d4:8c:9e:ee:2a:04:3a:ed:d2:03:
fd:3a:5b:4f:6e:54:a3:a4:83:54:59:cc:e9:19:42:
e8:41:24:fa:92:e6:e7:05:b6:2e:2f:77:0d:91:a1:
cc:34:b7:e4:fb:fc:7e:02:fd:3d:8d:16:e7:b7:76:
3d:9e:9d:f5:6e:0d:9c:5b:56:61:fc:06:83:f8:d0:
bd:d1:be:fc:d8:0c:93:e4:75:c5:c5:a1:43:32:fd:
af:99:08:25:04:3a:91:b1:8e:62:da:9d:9b:fd:42:
92:41:ce:92:43:c7:67:81:63:03:7e:b6:d0:b7:72:
1d:50:ab:8e:3c:68:d2:9c:06:99:55:74:c7:eb:17:
53:26:78:ba:33:2d:af:4e:3d:6c:04:61:87:8a:23:
09:40:e4:34:2c:9f:57:13:a9:50:7c:7c:7d:7e:3e:
14:52:44:fd:b3:85:85:fe:01:9b:6d:25:03:1f:8d:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:33:4B:FE:A5:1E:FB:48:AB:DF:96:AE:01:8E:C2:91:C3:94:20:DD
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZTNL_qUe-0ir35auAY7CkcOUIN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.130.0/24
109.72.117.0/24
Signature Algorithm: sha256WithRSAEncryption
67:7e:0b:79:73:09:bd:b1:2b:e7:55:d1:c4:05:bb:51:9f:dd:
22:d7:de:8a:e9:2d:14:4c:c0:b2:d6:5e:a1:29:34:3c:a7:a4:
c0:f7:5b:bd:00:d7:b2:1e:b3:c9:23:51:9c:1c:42:5a:0d:f2:
9a:29:3d:f6:45:a0:49:f7:2c:8f:77:99:f5:c5:a4:f5:b2:38:
d6:10:df:8d:ce:99:60:24:7b:25:16:27:1e:ab:8d:84:60:c5:
b0:b6:60:21:88:0b:d4:e2:d3:97:36:5c:d5:bc:46:cb:81:f8:
5d:be:d4:2d:89:19:ed:fc:dd:f4:1e:50:b7:b6:3a:88:d9:1d:
f7:90:19:93:ea:29:f2:f8:c8:04:15:15:6e:ab:8d:3d:05:39:
a2:12:49:14:24:14:0c:45:6a:39:a5:7d:16:e8:0a:28:ab:1b:
ca:a3:c8:d7:cd:fd:e0:b2:4a:8f:ec:04:be:44:a0:e5:7a:7b:
61:7d:09:de:ba:f8:dc:d6:a1:b7:4c:03:99:4a:22:c4:c8:d6:
17:23:5c:bb:e1:03:c2:46:a0:1a:1b:0a:b6:26:dd:33:42:15:
85:47:f4:e1:9d:38:f7:86:97:9a:c7:16:20:bf:31:3e:2c:d4:
75:f2:2a:2a:8f:1c:20:84:93:7a:8e:26:22:35:0b:07:2c:d9:
a8:4a:81:28
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtIri0uvC3sTs9oIGCCPgneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMxMDE5MTYwNDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTMzNGJmZWE1MWVmYjQ4YWJkZjk2YWUwMThlYzI5MWMzOTQyMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxrsYURbmIp9i9bZ+HpqgIZX1Grw
kzaf9+QvuSfEohGZ/M+XiA4JRGGPw2B+rqfb+NcBZlyZzbk+GZ6BprdRoiZWVCB7
0SBNHYDv0eMcINSMnu4qBDrt0gP9OltPblSjpINUWczpGULoQST6kubnBbYuL3cN
kaHMNLfk+/x+Av09jRbnt3Y9np31bg2cW1Zh/AaD+NC90b782AyT5HXFxaFDMv2v
mQglBDqRsY5i2p2b/UKSQc6SQ8dngWMDfrbQt3IdUKuOPGjSnAaZVXTH6xdTJni6
My2vTj1sBGGHiiMJQOQ0LJ9XE6lQfHx9fj4UUkT9s4WF/gGbbSUDH43ZaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGUzS/6lHvtIq9+WrgGOwpHDlCDdMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvWlROTF9xVWUtMGlyMzVhdUFZN0NrY09VSU4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAURaCAwQA
bUh1MA0GCSqGSIb3DQEBCwUAA4IBAQBnfgt5cwm9sSvnVdHEBbtRn90i196K6S0U
TMCy1l6hKTQ8p6TA91u9ANeyHrPJI1GcHEJaDfKaKT32RaBJ9yyPd5n1xaT1sjjW
EN+NzplgJHslFiceq42EYMWwtmAhiAvU4tOXNlzVvEbLgfhdvtQtiRnt/N30HlC3
tjqI2R33kBmT6iny+MgEFRVuq409BTmiEkkUJBQMRWo5pX0W6AooqxvKo8jXzf3g
skqP7AS+RKDlenthfQneuvjc1qG3TAOZSiLEyNYXI1y74QPCRqAaGwq2Jt0zQhWF
R/ThnTj3hpeaxxYgvzE+LNR18ioqjxwghJN6jiYiNQsHLNmoSoEo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org