Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zp5uCfvIZU9hROGf0kxLNcQ3q0s.roa
File: zp5uCfvIZU9hROGf0kxLNcQ3q0s.roa (raw, json)
Hash identifier: nAmV3HGDHG8Z/TGErkkEiCWN0fz7OhYG71Vi2YwbKyM=
Subject key identifier: CE:9E:6E:09:FB:C8:65:4F:61:44:E1:9F:D2:4C:4B:35:C4:37:AB:4B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BAA2E39645009518F7D624D9164BF9CE2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zp5uCfvIZU9hROGf0kxLNcQ3q0s.roa
Signing time: Tue 07 Nov 2023 14:27:17 +0000
ROA not before: Tue 07 Nov 2023 14:27:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 212.192.221.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:2e:39:64:50:09:51:8f:7d:62:4d:91:64:bf:9c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 7 14:27:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce9e6e09fbc8654f6144e19fd24c4b35c437ab4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:76:c6:07:e8:eb:f1:0f:21:d1:da:d0:4f:
2a:e4:51:f3:46:2f:a8:fd:81:2f:f1:a0:4c:4e:78:
0d:19:23:68:36:f9:c7:81:df:42:e0:96:e4:dd:c5:
a4:e2:d9:5d:3c:8d:64:31:33:9c:e6:88:1e:a5:0e:
f5:36:59:3f:12:8e:a5:7c:b3:eb:37:7e:2f:f5:97:
4f:7b:c4:7b:ca:3f:6d:ce:b9:1b:48:7e:f4:8b:88:
f5:2c:f1:3f:08:b3:e6:1e:1c:78:c0:98:e1:38:0a:
ee:cb:10:2f:94:35:94:32:42:95:26:d3:0a:96:0b:
58:bc:c0:86:d2:06:5c:b7:8c:7e:4a:ff:9a:d2:d2:
44:84:fd:86:d1:8d:9b:4a:2d:ac:d6:e6:17:57:28:
22:53:5b:44:58:10:37:52:87:20:73:67:d0:6d:61:
bc:0d:7a:f0:20:55:1a:f2:a9:db:9e:fb:52:dc:a9:
3b:f6:3d:49:7d:b8:a8:ac:ae:a4:e4:dd:81:0f:ff:
5f:31:30:1b:3d:d5:96:5f:72:dd:a7:eb:1f:de:0c:
7e:c0:28:d9:e5:55:c5:42:24:d9:d4:31:c6:ac:66:
3b:2a:48:42:b9:28:21:27:00:27:f1:14:c1:f4:e8:
69:26:05:5e:79:8f:39:e2:15:18:73:65:d0:4b:05:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9E:6E:09:FB:C8:65:4F:61:44:E1:9F:D2:4C:4B:35:C4:37:AB:4B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zp5uCfvIZU9hROGf0kxLNcQ3q0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.190.0/24
212.192.221.0/24
Signature Algorithm: sha256WithRSAEncryption
03:57:1f:50:79:a7:ed:37:2d:db:c5:b9:5f:a0:a4:19:77:ba:
dd:a9:73:0d:04:a0:9d:db:21:46:ba:81:8d:04:b0:a2:ec:6e:
41:d0:12:90:7e:ba:04:aa:50:4c:29:3e:5e:25:77:ae:5b:2d:
67:9e:03:37:6c:f0:e5:3b:da:64:72:f8:f9:0b:c1:d1:fd:a6:
14:e8:68:d0:82:e4:af:00:16:69:d3:3c:e4:99:00:7e:97:be:
64:e1:74:08:18:d8:2b:4e:ce:aa:1d:6a:26:c0:63:59:c7:de:
c0:9a:53:21:a5:1e:92:4a:42:a4:3e:79:42:d5:53:c8:cd:3d:
33:0e:83:7a:9d:ae:9c:d9:96:ec:ee:db:f0:c6:40:b3:89:e6:
60:f7:c1:79:b7:67:f6:31:e0:13:ba:55:00:a8:01:62:ae:17:
2b:f6:ac:cb:7a:3c:14:74:1b:06:de:05:27:03:7d:f5:08:3b:
32:51:26:ee:f4:37:76:17:39:c6:da:a3:19:f6:ea:f8:e2:1b:
d6:27:38:3f:33:21:f9:e5:73:04:70:2c:c7:ee:69:47:00:c2:
5b:23:11:d7:5c:6a:bf:f5:15:a9:8d:c5:31:ac:98:a8:76:81:
d9:59:e8:96:71:6f:02:4d:da:de:94:6a:27:47:6b:fb:e8:d6:
91:f7:d8:35
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuqLjlkUAlRj31iTZFkv5ziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMTA3MTQyNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTllNmUwOWZiYzg2NTRmNjE0NGUxOWZkMjRjNGIzNWM0MzdhYjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoB2xgfo6/EPIdHa0E8q5FHzRi+o
/YEv8aBMTngNGSNoNvnHgd9C4Jbk3cWk4tldPI1kMTOc5ogepQ71Nlk/Eo6lfLPr
N34v9ZdPe8R7yj9tzrkbSH70i4j1LPE/CLPmHhx4wJjhOAruyxAvlDWUMkKVJtMK
lgtYvMCG0gZct4x+Sv+a0tJEhP2G0Y2bSi2s1uYXVygiU1tEWBA3Uocgc2fQbWG8
DXrwIFUa8qnbnvtS3Kk79j1JfbiorK6k5N2BD/9fMTAbPdWWX3Ldp+sf3gx+wCjZ
5VXFQiTZ1DHGrGY7KkhCuSghJwAn8RTB9OhpJgVeeY854hUYc2XQSwU/gwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM6ebgn7yGVPYUThn9JMSzXEN6tLMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvenA1dUNmdklaVTloUk9HZjBreExOY1EzcTBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHy+AwQA
1MDdMA0GCSqGSIb3DQEBCwUAA4IBAQADVx9QeaftNy3bxblfoKQZd7rdqXMNBKCd
2yFGuoGNBLCi7G5B0BKQfroEqlBMKT5eJXeuWy1nngM3bPDlO9pkcvj5C8HR/aYU
6GjQguSvABZp0zzkmQB+l75k4XQIGNgrTs6qHWomwGNZx97AmlMhpR6SSkKkPnlC
1VPIzT0zDoN6na6c2Zbs7tvwxkCzieZg98F5t2f2MeATulUAqAFirhcr9qzLejwU
dBsG3gUnA331CDsyUSbu9Dd2FznG2qMZ9ur44hvWJzg/MyH55XMEcCzH7mlHAMJb
IxHXXGq/9RWpjcUxrJiodoHZWeiWcW8CTdrelGonR2v76NaR99g1
-----END CERTIFICATE-----
Generated at Tue Nov 7 15:24:56 2023 by rpki-client on console-fra.rpki-client.org