Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C_ZznDLdQ29gJIxstFoThPQz9ko.roa
File: C_ZznDLdQ29gJIxstFoThPQz9ko.roa (raw, json)
Hash identifier: tVxt8LMrU7s2dC/IVklxxlt0MF8WP+QfX2hvHmmDTFk=
Subject key identifier: 0B:F6:73:9C:32:DD:43:6F:60:24:8C:6C:B4:5A:13:84:F4:33:F6:4A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187A45EFF2E9AAC1B0F05900768050EB774
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C_ZznDLdQ29gJIxstFoThPQz9ko.roa
Signing time: Fri 21 Apr 2023 15:11:41 +0000
ROA not before: Fri 21 Apr 2023 15:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49716
IP address blocks: 171.22.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:5e:ff:2e:9a:ac:1b:0f:05:90:07:68:05:0e:b7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 21 15:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bf6739c32dd436f60248c6cb45a1384f433f64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:a6:46:f8:39:90:0a:79:48:ed:2e:7e:eb:
f0:b7:7a:96:b9:1d:b4:f6:86:fb:c6:52:99:4f:74:
ce:af:b0:b8:13:3b:c0:7c:0e:14:fb:f0:96:b0:c5:
c2:9a:5e:12:15:a2:48:06:4c:0e:ec:e6:f9:83:07:
cc:a8:97:35:16:7c:b9:c3:64:30:83:0e:33:13:46:
9f:fc:a8:04:fc:e6:34:01:3f:4c:f6:31:a6:d2:41:
d9:c5:85:c2:a2:64:5d:d5:7e:4e:3f:53:4b:58:cb:
8c:93:a0:be:bb:db:10:07:70:e8:ad:92:56:48:e6:
33:c9:f4:88:52:b9:7a:34:19:8e:e6:e7:6c:4a:d5:
06:b5:bb:e3:8e:52:9c:75:d6:28:39:40:b9:dc:57:
43:2e:23:4a:68:c0:21:d1:0d:2a:ab:87:1e:d9:97:
13:e8:23:b0:1e:78:ae:14:37:39:74:c6:0c:e9:4a:
ba:0d:88:66:a9:13:29:cd:34:6a:dd:ef:fe:e7:d1:
86:fc:a3:52:e0:c8:74:d8:b2:46:7e:f3:de:5a:16:
d9:eb:18:c3:cc:95:88:00:25:66:b1:f8:69:0b:66:
30:ef:eb:3a:86:cd:bd:bb:f2:8c:76:ce:08:dd:93:
29:25:01:5e:ef:4f:57:6d:d0:19:fe:91:59:12:a1:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F6:73:9C:32:DD:43:6F:60:24:8C:6C:B4:5A:13:84:F4:33:F6:4A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C_ZznDLdQ29gJIxstFoThPQz9ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ff:02:f4:a6:b0:16:25:92:25:be:3b:df:93:f4:4f:a7:10:
3c:8d:95:a4:77:d1:51:9b:d6:a8:12:06:70:d4:7b:22:8c:26:
cf:9d:e2:b8:a3:96:e1:5a:1b:d7:e2:16:e4:4a:0a:e7:68:b2:
47:8e:c4:fb:3e:8b:fd:86:70:78:e3:f6:b0:43:a9:41:bb:68:
64:84:a0:e1:8a:22:d4:0d:10:88:5e:54:cf:3a:ee:33:72:3e:
92:c9:04:55:fa:82:de:89:bf:09:10:a7:34:6b:74:ce:23:3a:
f3:07:54:9f:e6:72:4b:17:06:3d:63:2c:34:ea:1f:e5:38:09:
47:0f:b3:e5:b8:43:1f:4f:53:84:68:8e:d2:51:ea:80:3e:95:
5e:b0:04:d6:fe:66:b4:42:af:06:38:5a:9a:d1:8d:a7:eb:a9:
47:d4:40:51:48:69:85:a6:a4:ed:a8:4e:62:85:74:12:6a:81:
a9:4b:78:48:cb:1b:b7:60:93:7d:75:18:0b:4e:03:8b:c3:2b:
8a:4c:dd:30:c0:33:3f:6a:56:bf:88:7a:02:65:3f:60:c6:77:
27:a5:8b:3a:d7:14:df:bf:7c:81:f0:7e:f1:2f:a7:63:bc:8d:
1d:c2:1e:60:f9:b4:62:38:65:ad:04:09:9d:d2:66:51:7b:d4:
54:0f:82:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYekXv8umqwbDwWQB2gFDrd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNDIxMTUxMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmY2NzM5YzMyZGQ0MzZmNjAyNDhjNmNiNDVhMTM4NGY0MzNmNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjqmRvg5kAp5SO0ufuvwt3qWuR20
9ob7xlKZT3TOr7C4EzvAfA4U+/CWsMXCml4SFaJIBkwO7Ob5gwfMqJc1Fny5w2Qw
gw4zE0af/KgE/OY0AT9M9jGm0kHZxYXComRd1X5OP1NLWMuMk6C+u9sQB3DorZJW
SOYzyfSIUrl6NBmO5udsStUGtbvjjlKcddYoOUC53FdDLiNKaMAh0Q0qq4ce2ZcT
6COwHniuFDc5dMYM6Uq6DYhmqRMpzTRq3e/+59GG/KNS4Mh02LJGfvPeWhbZ6xjD
zJWIACVmsfhpC2Yw7+s6hs29u/KMds4I3ZMpJQFe709XbdAZ/pFZEqGxiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAv2c5wy3UNvYCSMbLRaE4T0M/ZKMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQ19aem5ETGRRMjlnSkl4c3RGb1RoUFF6OWtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxYcMA0G
CSqGSIb3DQEBCwUAA4IBAQBq/wL0prAWJZIlvjvfk/RPpxA8jZWkd9FRm9aoEgZw
1HsijCbPneK4o5bhWhvX4hbkSgrnaLJHjsT7Pov9hnB44/awQ6lBu2hkhKDhiiLU
DRCIXlTPOu4zcj6SyQRV+oLeib8JEKc0a3TOIzrzB1Sf5nJLFwY9Yyw06h/lOAlH
D7PluEMfT1OEaI7SUeqAPpVesATW/ma0Qq8GOFqa0Y2n66lH1EBRSGmFpqTtqE5i
hXQSaoGpS3hIyxu3YJN9dRgLTgOLwyuKTN0wwDM/ala/iHoCZT9gxncnpYs61xTf
v3yB8H7xL6djvI0dwh5g+bRiOGWtBAmd0mZRe9RUD4IE
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org