Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zwYDrFJyT0kzeFASa3fpaVdnIWE.roa
File: zwYDrFJyT0kzeFASa3fpaVdnIWE.roa (raw, json)
Hash identifier: 9vWoWaVI1rd5hnF361cRHRz6ko3jSdU432GEyFGlx6A=
Subject key identifier: CF:06:03:AC:52:72:4F:49:33:78:50:12:6B:77:E9:69:57:67:21:61
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F67162C9272E4E6333AEB0D60045A98
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zwYDrFJyT0kzeFASa3fpaVdnIWE.roa
Signing time: Sun 01 Jan 2023 22:15:04 +0000
ROA not before: Sun 01 Jan 2023 22:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212411
IP address blocks: 194.87.228.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:16:2c:92:72:e4:e6:33:3a:eb:0d:60:04:5a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf0603ac52724f49337850126b77e96957672161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:90:e9:3c:c1:ab:9f:f0:51:84:c4:5f:30:
30:06:e6:d0:53:ce:8e:bb:06:5b:95:85:3e:ef:9f:
d9:52:6a:09:b8:1b:50:f2:44:f4:e1:14:6b:01:de:
d8:71:02:eb:81:7e:82:98:09:23:31:81:ee:94:c5:
ce:43:8a:4e:57:2c:af:c3:24:39:63:c8:37:6a:aa:
c9:dc:eb:e9:07:42:fd:ae:52:78:f5:be:3f:9c:d7:
0d:ef:7f:e7:91:6b:97:11:c9:27:dd:64:de:95:94:
96:61:bf:a5:80:7c:9a:b4:f4:be:2d:86:f7:19:23:
61:e3:70:b4:8b:54:20:f5:78:78:ea:03:a3:4e:fb:
99:48:b8:cd:7b:33:68:cf:ff:13:3f:bb:6f:a5:f7:
a7:38:09:87:a1:ce:92:a4:ba:a3:8d:b2:ac:92:e0:
6d:f2:90:96:30:8b:ee:4d:76:d9:01:28:2b:59:32:
c3:38:21:6e:82:65:10:27:1d:b6:a4:7c:29:22:30:
7d:50:55:e3:1f:4e:26:f3:dd:56:0b:be:77:80:80:
d2:ce:c2:be:bf:78:d3:0b:17:fb:c7:ed:12:28:ee:
51:71:e8:40:98:d9:3d:5a:f4:2f:4c:57:59:59:cf:
64:a4:06:4f:ac:48:89:b4:a0:bc:c8:58:8f:ac:3a:
51:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:06:03:AC:52:72:4F:49:33:78:50:12:6B:77:E9:69:57:67:21:61
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zwYDrFJyT0kzeFASa3fpaVdnIWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.228.0/23
Signature Algorithm: sha256WithRSAEncryption
32:c5:12:b2:be:1f:7f:c4:2d:60:b7:ad:3c:98:1e:17:0d:46:
02:0a:a0:60:71:4f:14:24:7d:41:cb:ff:d0:3d:ec:2e:45:1d:
18:f7:15:40:77:61:55:9d:72:e2:5c:e0:25:1e:bd:d2:c7:41:
bb:f1:54:fb:68:8d:35:0d:07:0c:7a:1b:1c:5c:04:c1:4e:73:
75:79:b3:ff:b5:f0:ad:4d:0c:3b:8e:34:c8:dd:df:1c:ae:e0:
7a:eb:fc:6f:64:17:eb:40:38:ef:6d:a9:24:bf:f9:f3:d1:7c:
3a:e1:7c:e4:c5:74:08:72:08:ab:94:c8:75:0b:a3:d8:6b:93:
27:ac:64:e6:c6:f0:48:fc:7a:b1:77:a0:7d:34:11:68:5e:f0:
81:c2:67:52:db:03:72:30:cd:60:c7:11:01:d8:2b:3c:8e:c2:
73:e4:b6:b0:e6:ed:7a:ca:69:bc:fa:5d:b7:85:0f:a5:cd:b4:
85:f3:60:6c:89:6a:c4:ac:03:82:20:e9:40:e7:c1:b0:f9:c4:
5a:6e:3d:89:de:e9:d1:d9:7b:ed:b8:d1:9f:25:37:7c:30:df:
0f:1c:b2:91:64:b9:7a:ba:dd:20:4b:b5:ba:c7:fa:cc:08:19:
4a:1d:d3:22:9d:c6:96:43:17:7e:c7:01:e2:43:86:84:d3:56:
dc:1e:90:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvZxYsknLk5jM66w1gBFqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTAxMjIxNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjA2MDNhYzUyNzI0ZjQ5MzM3ODUwMTI2Yjc3ZTk2OTU3NjcyMTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmKQ6TzBq5/wUYTEXzAwBubQU86O
uwZblYU+75/ZUmoJuBtQ8kT04RRrAd7YcQLrgX6CmAkjMYHulMXOQ4pOVyyvwyQ5
Y8g3aqrJ3OvpB0L9rlJ49b4/nNcN73/nkWuXEckn3WTelZSWYb+lgHyatPS+LYb3
GSNh43C0i1Qg9Xh46gOjTvuZSLjNezNoz/8TP7tvpfenOAmHoc6SpLqjjbKskuBt
8pCWMIvuTXbZASgrWTLDOCFugmUQJx22pHwpIjB9UFXjH04m891WC753gIDSzsK+
v3jTCxf7x+0SKO5RcehAmNk9WvQvTFdZWc9kpAZPrEiJtKC8yFiPrDpRbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8GA6xSck9JM3hQEmt36WlXZyFhMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvendZRHJGSnlUMGt6ZUZBU2EzZnBhVmRuSVdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwlfkMA0G
CSqGSIb3DQEBCwUAA4IBAQAyxRKyvh9/xC1gt608mB4XDUYCCqBgcU8UJH1By//Q
PewuRR0Y9xVAd2FVnXLiXOAlHr3Sx0G78VT7aI01DQcMehscXATBTnN1ebP/tfCt
TQw7jjTI3d8cruB66/xvZBfrQDjvbakkv/nz0Xw64XzkxXQIcgirlMh1C6PYa5Mn
rGTmxvBI/Hqxd6B9NBFoXvCBwmdS2wNyMM1gxxEB2Cs8jsJz5Law5u16ymm8+l23
hQ+lzbSF82BsiWrErAOCIOlA58Gw+cRabj2J3unR2XvtuNGfJTd8MN8PHLKRZLl6
ut0gS7W6x/rMCBlKHdMincaWQxd+xwHiQ4aE01bcHpC2
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:15 2023 by rpki-client on console-fra.rpki-client.org