Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ZDKTZUT69zTX8dNwbHsahXtyhrQ.roa
File: ZDKTZUT69zTX8dNwbHsahXtyhrQ.roa (raw, json)
Hash identifier: YDXcoLfskOD6x1pG0Rh598WioRkiJpVHWP0Bl4sIbCs=
Subject key identifier: 64:32:93:65:44:FA:F7:34:D7:F1:D3:70:6C:7B:1A:85:7B:72:86:B4
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CD303A795C41F0F3D0258C1A03E46
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ZDKTZUT69zTX8dNwbHsahXtyhrQ.roa
Signing time: Mon 02 Jan 2023 03:35:55 +0000
ROA not before: Mon 02 Jan 2023 03:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8443
IP address blocks: 95.159.128.0/18 maxlen: 18
95.159.174.0/23 maxlen: 23
95.159.182.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d3:03:a7:95:c4:1f:0f:3d:02:58:c1:a0:3e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6432936544faf734d7f1d3706c7b1a857b7286b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:ab:a4:99:8f:61:db:cf:9c:90:00:cc:8a:
46:fc:e6:09:34:5c:a9:bd:a4:90:9c:d6:a6:c1:fa:
4a:14:d3:d3:9b:9a:81:9d:2a:34:14:5d:57:93:45:
b0:9d:7b:b3:6c:55:91:20:3a:5b:44:19:9f:85:d3:
ae:2d:fa:c9:74:7e:39:03:8f:79:65:b7:77:41:cf:
94:c7:bc:70:cc:44:60:83:03:6a:53:29:02:22:03:
0b:63:ec:df:50:a9:bb:d0:00:c6:aa:d8:5d:e4:f7:
a4:1c:95:0d:ce:68:6a:19:aa:24:ee:41:e0:a5:30:
63:2a:ca:2f:74:25:1e:3e:31:6f:4c:3d:09:75:d9:
6f:87:e4:49:a5:7a:bf:43:1e:4f:aa:0d:6c:b0:e0:
f3:fc:b5:13:53:69:f5:64:01:c4:a5:a7:cc:5b:1a:
7c:02:05:a7:08:76:f9:71:ea:1b:d5:3d:71:34:22:
71:36:5d:8b:05:86:24:89:df:17:6c:80:6c:e6:74:
dd:5f:e1:aa:ca:78:08:2b:48:fb:f8:d7:db:28:c1:
99:90:b7:fb:db:7d:04:d6:d4:95:6b:c1:dd:fe:b9:
02:53:fd:fd:c9:fe:df:58:c3:10:89:87:49:ed:0b:
ba:00:e0:c7:b5:16:02:e6:06:40:c8:29:99:24:fd:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:32:93:65:44:FA:F7:34:D7:F1:D3:70:6C:7B:1A:85:7B:72:86:B4
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ZDKTZUT69zTX8dNwbHsahXtyhrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.159.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:d7:9d:bd:8a:59:1e:3d:d4:a5:99:ab:a8:e1:cd:be:da:2c:
71:30:6b:0d:9c:04:2a:22:88:72:56:24:6f:7d:ea:e2:6e:30:
61:ff:60:7b:ca:46:cf:bc:94:e6:c1:27:f6:03:65:f5:1e:b2:
ad:ec:04:7e:50:74:fa:36:c4:81:7b:7d:5a:70:92:e6:e0:b6:
75:8b:9d:01:1f:c9:fe:72:b2:fe:ef:10:e8:c5:6e:ee:56:38:
e7:bb:0f:56:b4:a9:d3:c6:a1:75:e9:ec:14:20:99:27:87:ec:
d4:93:08:9c:1d:b9:93:66:8c:fc:aa:94:a0:b7:38:ba:fd:7a:
d1:57:f3:96:59:77:f8:7e:02:34:db:21:49:c3:8a:db:f7:e1:
ef:32:c0:96:40:75:6b:3e:a1:7c:6f:62:01:f1:8d:17:63:14:
6f:77:7c:d0:ae:13:2d:25:79:12:ec:76:a3:ee:47:68:36:96:
07:04:de:60:e3:7f:ee:c1:b4:b9:1d:ca:46:66:bd:c1:34:4c:
19:f9:10:99:39:bc:74:a1:32:e0:8b:3d:b8:65:93:c2:eb:ff:
d1:37:e3:89:ba:c2:e4:ed:07:0f:b9:16:66:3e:ed:9e:6b:37:
43:79:7f:42:dd:33:be:c8:c5:4b:7a:63:43:92:50:f5:59:09:
15:11:e5:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjNMDp5XEHw89AljBoD5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjMwMTAyMDMzNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDMyOTM2NTQ0ZmFmNzM0ZDdmMWQzNzA2YzdiMWE4NTdiNzI4NmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuGrpJmPYdvPnJAAzIpG/OYJNFyp
vaSQnNamwfpKFNPTm5qBnSo0FF1Xk0WwnXuzbFWRIDpbRBmfhdOuLfrJdH45A495
Zbd3Qc+Ux7xwzERggwNqUykCIgMLY+zfUKm70ADGqthd5PekHJUNzmhqGaok7kHg
pTBjKsovdCUePjFvTD0Jddlvh+RJpXq/Qx5Pqg1ssODz/LUTU2n1ZAHEpafMWxp8
AgWnCHb5ceob1T1xNCJxNl2LBYYkid8XbIBs5nTdX+GqyngIK0j7+NfbKMGZkLf7
230E1tSVa8Hd/rkCU/39yf7fWMMQiYdJ7Qu6AODHtRYC5gZAyCmZJP0ZtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQyk2VE+vc01/HTcGx7GoV7coa0MB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvWkRLVFpVVDY5elRYOGROd2JIc2FoWHR5aHJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGX5+AMA0G
CSqGSIb3DQEBCwUAA4IBAQAd1529ilkePdSlmauo4c2+2ixxMGsNnAQqIohyViRv
feribjBh/2B7ykbPvJTmwSf2A2X1HrKt7AR+UHT6NsSBe31acJLm4LZ1i50BH8n+
crL+7xDoxW7uVjjnuw9WtKnTxqF16ewUIJknh+zUkwicHbmTZoz8qpSgtzi6/XrR
V/OWWXf4fgI02yFJw4rb9+HvMsCWQHVrPqF8b2IB8Y0XYxRvd3zQrhMtJXkS7Haj
7kdoNpYHBN5g43/uwbS5HcpGZr3BNEwZ+RCZObx0oTLgiz24ZZPC6//RN+OJusLk
7QcPuRZmPu2eazdDeX9C3TO+yMVLemNDklD1WQkVEeXj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:25 2024 by rpki-client on console-ams.rpki-client.org