Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0ZaXJCxkFkjKFhBwjVMPkPEjyoU.roa
File: 0ZaXJCxkFkjKFhBwjVMPkPEjyoU.roa (raw, json)
Hash identifier: fVGijzj+9hdgPsufw/78C2nuNCULr8aMGzzAy9lD1DI=
Subject key identifier: D1:96:97:24:2C:64:16:48:CA:16:10:70:8D:53:0F:90:F1:23:CA:85
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A690DD3F58E90ED3E828D7289C147A672
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0ZaXJCxkFkjKFhBwjVMPkPEjyoU.roa
Signing time: Wed 06 Sep 2023 05:53:48 +0000
ROA not before: Wed 06 Sep 2023 05:53:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63018
IP address blocks: 212.193.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:0d:d3:f5:8e:90:ed:3e:82:8d:72:89:c1:47:a6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 6 05:53:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d19697242c641648ca1610708d530f90f123ca85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e1:ed:15:d5:e5:d1:66:cb:9e:49:3c:dd:a7:
15:bf:e5:82:4c:4f:14:d4:c5:d8:a9:85:2c:01:c4:
e7:2f:d7:2a:27:8e:3f:79:1a:ae:19:54:eb:5b:ef:
49:91:e0:44:ac:fa:30:41:be:f0:3d:09:8e:25:c9:
77:8d:78:a6:e3:9d:54:d5:fe:2a:ac:8e:bb:e4:15:
0d:f1:a6:60:c7:ef:6c:04:bd:82:00:3a:60:f1:a1:
80:de:85:1a:50:94:d5:a9:61:9e:65:09:7c:c6:d4:
e8:4a:3b:df:7e:47:f8:b5:58:f4:97:3a:ac:ee:ea:
4b:2e:68:4f:a1:72:e6:6b:3f:16:f1:a4:35:93:77:
37:c9:74:8b:4e:08:31:fa:85:48:65:a8:7b:a6:02:
fa:8a:2a:8d:53:74:df:c5:51:cb:c9:cb:d4:8c:07:
56:5d:d2:e9:ab:ce:26:e0:2d:90:e0:1f:c3:49:0c:
cf:6c:92:97:4d:21:1e:ad:5d:15:27:eb:5b:19:20:
2d:7b:ef:63:22:32:2d:0c:77:a6:29:80:fb:37:68:
e7:59:b5:02:39:94:50:a6:49:e6:a7:bd:48:ba:93:
09:45:cb:d7:b6:7a:94:9c:b5:27:8c:9c:5c:4a:ab:
57:94:2e:56:e4:78:1c:50:ad:9e:51:70:a5:46:a7:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:96:97:24:2C:64:16:48:CA:16:10:70:8D:53:0F:90:F1:23:CA:85
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0ZaXJCxkFkjKFhBwjVMPkPEjyoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:84:c5:d6:f4:3c:1a:26:dc:b1:c7:32:e7:29:9f:1b:2c:e9:
25:ed:58:73:4e:61:5d:17:be:e5:45:19:e6:69:d7:8a:15:af:
cd:03:2c:f6:e4:c6:e0:dd:f7:18:98:a8:24:01:c4:65:8a:69:
c4:03:17:c3:4c:e1:12:21:7a:1b:d4:4c:0a:97:5b:f5:b2:86:
c2:70:25:79:6e:75:69:66:de:29:11:00:b3:3c:fe:ee:f5:30:
05:98:72:97:24:ac:b6:1f:71:ed:58:35:bc:3a:2e:9b:26:6a:
b9:27:88:6e:36:f5:4f:99:7b:1b:af:fa:29:25:d7:9e:09:d0:
7d:20:e0:bf:1b:4b:2a:5e:84:b4:e1:12:dd:f9:32:4b:29:61:
e7:f6:33:be:a3:f9:b0:59:e7:6c:0b:af:f1:f9:a6:ac:44:7a:
3c:e4:71:96:de:74:e2:6e:fd:ef:6b:5c:c3:02:c5:5c:8e:b3:
84:05:39:eb:5f:20:3f:06:1b:7e:79:e2:74:46:29:81:d7:e2:
4b:16:3e:85:60:8a:64:94:65:57:d3:b7:91:75:99:fc:c4:33:
92:d1:7a:2e:46:ff:10:e7:92:c9:26:60:b4:f4:c3:de:15:1c:
cb:ad:4d:8b:ea:51:cf:0a:0f:36:16:00:27:b6:69:3b:89:00:
62:bc:c8:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYppDdP1jpDtPoKNconBR6ZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwOTA2MDU1MzQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTk2OTcyNDJjNjQxNjQ4Y2ExNjEwNzA4ZDUzMGY5MGYxMjNjYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOHtFdXl0WbLnkk83acVv+WCTE8U
1MXYqYUsAcTnL9cqJ44/eRquGVTrW+9JkeBErPowQb7wPQmOJcl3jXim451U1f4q
rI675BUN8aZgx+9sBL2CADpg8aGA3oUaUJTVqWGeZQl8xtToSjvffkf4tVj0lzqs
7upLLmhPoXLmaz8W8aQ1k3c3yXSLTggx+oVIZah7pgL6iiqNU3TfxVHLycvUjAdW
XdLpq84m4C2Q4B/DSQzPbJKXTSEerV0VJ+tbGSAte+9jIjItDHemKYD7N2jnWbUC
OZRQpknmp71IupMJRcvXtnqUnLUnjJxcSqtXlC5W5HgcUK2eUXClRqdz4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNGWlyQsZBZIyhYQcI1TD5DxI8qFMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMFphWEpDeGtGa2pLRmhCd2pWTVBrUEVqeW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MEGMA0G
CSqGSIb3DQEBCwUAA4IBAQAchMXW9DwaJtyxxzLnKZ8bLOkl7VhzTmFdF77lRRnm
adeKFa/NAyz25Mbg3fcYmKgkAcRlimnEAxfDTOESIXob1EwKl1v1sobCcCV5bnVp
Zt4pEQCzPP7u9TAFmHKXJKy2H3HtWDW8Oi6bJmq5J4huNvVPmXsbr/opJdeeCdB9
IOC/G0sqXoS04RLd+TJLKWHn9jO+o/mwWedsC6/x+aasRHo85HGW3nTibv3va1zD
AsVcjrOEBTnrXyA/Bht+eeJ0RimB1+JLFj6FYIpklGVX07eRdZn8xDOS0XouRv8Q
55LJJmC09MPeFRzLrU2L6lHPCg82FgAntmk7iQBivMgd
-----END CERTIFICATE-----
Generated at Wed Nov 15 17:59:33 2023 by rpki-client on console-fra.rpki-client.org