Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DZUirfdp7nVIdY49LtDg_47W9OM.roa
File: DZUirfdp7nVIdY49LtDg_47W9OM.roa (raw, json)
Hash identifier: KIEtnzL+Muj5GyPv2MWWc0HCyOVeX8d4x5lQWnJYNeg=
Subject key identifier: 0D:95:22:AD:F7:69:EE:75:48:75:8E:3D:2E:D0:E0:FF:8E:D6:F4:E3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188B3EA6885CD6980CBF938C1957334505C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DZUirfdp7nVIdY49LtDg_47W9OM.roa
Signing time: Tue 13 Jun 2023 08:41:03 +0000
ROA not before: Tue 13 Jun 2023 08:41:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 178.215.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:ea:68:85:cd:69:80:cb:f9:38:c1:95:73:34:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 13 08:41:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d9522adf769ee7548758e3d2ed0e0ff8ed6f4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:b4:96:82:60:57:db:ec:19:12:f8:40:4a:
50:1d:5a:a3:94:cb:22:41:69:02:a8:4f:53:3b:ec:
7c:ec:53:f5:28:50:b8:ee:19:49:ad:76:91:6b:c1:
89:c1:03:8c:9d:31:b0:ca:bc:6a:f6:36:e8:89:17:
54:01:29:5b:5a:c7:6a:e2:f2:29:a6:f4:d7:db:56:
46:41:b6:68:07:8b:a8:46:c3:5d:d9:cb:cb:8d:1c:
a5:5e:1f:4b:e7:9f:0d:a9:72:d5:9f:03:80:52:4c:
6c:87:2b:02:7e:86:4c:d3:04:d7:8d:c4:66:02:07:
f5:34:df:6b:e1:be:a1:1a:8c:43:ae:79:d5:73:dc:
9c:f6:df:1f:e5:44:d4:fb:ae:ca:ea:7c:98:20:a0:
8b:01:96:55:4f:29:54:e6:0b:0a:80:bc:2a:2d:d8:
c4:de:28:d9:cc:48:c8:40:42:ce:3a:02:9c:62:d4:
48:d0:9c:b4:20:ea:81:f9:a7:19:25:d3:6a:48:16:
24:7a:c0:d0:fc:0e:a3:85:11:e9:1c:4c:ae:3b:99:
4a:8a:45:d7:73:b0:d3:da:f2:49:a9:2c:dd:c1:18:
f0:e1:9e:16:85:a1:e8:01:23:1c:b7:46:d1:dd:9e:
ff:8f:4f:18:d5:00:5d:37:2b:9a:cc:ba:0e:9b:c0:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:95:22:AD:F7:69:EE:75:48:75:8E:3D:2E:D0:E0:FF:8E:D6:F4:E3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DZUirfdp7nVIdY49LtDg_47W9OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.239.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cb:70:2c:bc:ae:3d:c4:91:f7:b7:51:5b:ae:3b:83:68:c1:
42:7a:df:da:8f:ac:ce:a5:a7:8c:24:3b:81:91:50:58:fc:2a:
1c:a5:14:38:89:4a:e0:d2:43:92:ab:2d:ce:7f:4e:f7:eb:39:
5b:c8:d8:5a:ba:23:23:b7:e7:ef:09:c0:c8:ad:3d:23:4d:9a:
b0:32:2e:8b:e9:ac:20:c9:87:63:5e:b2:3f:67:af:c9:cf:f3:
9f:ad:5d:4e:b6:1b:c5:7f:ce:09:87:19:7c:7c:26:80:40:b3:
55:31:f0:32:1a:ad:c7:9a:c3:79:a0:31:f8:d0:ba:e1:cc:db:
81:08:5d:d7:80:f6:ab:e6:cc:57:59:11:92:3f:df:81:c8:32:
c4:ea:75:38:c9:0e:55:94:fa:0b:01:e3:dc:c9:55:2e:7a:68:
92:ff:d2:f7:03:34:6a:15:52:ba:9f:e0:5c:f4:c7:94:4d:10:
25:e1:2d:2f:07:7f:4d:3c:d7:af:7b:d1:b7:f0:85:1b:be:4d:
e5:3d:cb:fd:6c:ed:8f:67:bf:8b:a5:af:56:d0:91:8f:6d:91:
ac:da:cf:03:06:99:ee:a5:98:a8:4e:6a:02:b1:bf:2c:86:8d:
7b:f0:b8:1b:d8:de:45:1a:5c:a9:49:aa:2a:15:eb:0a:69:54:
a7:99:09:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiz6miFzWmAy/k4wZVzNFBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNjEzMDg0MTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDk1MjJhZGY3NjllZTc1NDg3NThlM2QyZWQwZTBmZjhlZDZmNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAe0loJgV9vsGRL4QEpQHVqjlMsi
QWkCqE9TO+x87FP1KFC47hlJrXaRa8GJwQOMnTGwyrxq9jboiRdUASlbWsdq4vIp
pvTX21ZGQbZoB4uoRsNd2cvLjRylXh9L558NqXLVnwOAUkxshysCfoZM0wTXjcRm
Agf1NN9r4b6hGoxDrnnVc9yc9t8f5UTU+67K6nyYIKCLAZZVTylU5gsKgLwqLdjE
3ijZzEjIQELOOgKcYtRI0Jy0IOqB+acZJdNqSBYkesDQ/A6jhRHpHEyuO5lKikXX
c7DT2vJJqSzdwRjw4Z4WhaHoASMct0bR3Z7/j08Y1QBdNyuazLoOm8AdRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA2VIq33ae51SHWOPS7Q4P+O1vTjMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRFpVaXJmZHA3blZJZFk0OUx0RGdfNDdXOU9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstfvMA0G
CSqGSIb3DQEBCwUAA4IBAQAEy3AsvK49xJH3t1FbrjuDaMFCet/aj6zOpaeMJDuB
kVBY/CocpRQ4iUrg0kOSqy3Of0736zlbyNhauiMjt+fvCcDIrT0jTZqwMi6L6awg
yYdjXrI/Z6/Jz/OfrV1OthvFf84Jhxl8fCaAQLNVMfAyGq3HmsN5oDH40LrhzNuB
CF3XgPar5sxXWRGSP9+ByDLE6nU4yQ5VlPoLAePcyVUuemiS/9L3AzRqFVK6n+Bc
9MeUTRAl4S0vB39NPNeve9G38IUbvk3lPcv9bO2PZ7+Lpa9W0JGPbZGs2s8DBpnu
pZioTmoCsb8sho178Lgb2N5FGlypSaoqFesKaVSnmQnn
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org