Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z-4ZV-tBM4md2QExwdm-VoRIlFc.roa
File: Z-4ZV-tBM4md2QExwdm-VoRIlFc.roa (raw, json)
Hash identifier: lPeJlcJXDlDHkHNLfC80Yl+fTJuZOFc8RJq7oM91VMk=
Subject key identifier: 67:EE:19:57:EB:41:33:89:9D:D9:01:31:C1:D9:BE:56:84:48:94:57
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191D0FCEF7285A3345381D90BCA6452B73E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z-4ZV-tBM4md2QExwdm-VoRIlFc.roa
Signing time: Sun 08 Sep 2024 09:35:22 +0000
ROA not before: Sun 08 Sep 2024 09:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 94.156.177.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 12:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d0:fc:ef:72:85:a3:34:53:81:d9:0b:ca:64:52:b7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 8 09:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67ee1957eb4133899dd90131c1d9be5684489457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:86:38:33:d9:f1:14:b1:49:55:9f:74:1b:
26:e0:a1:3b:d3:4b:c8:74:ba:d6:03:74:c2:80:b4:
14:70:6b:13:61:6f:b7:19:88:bd:4e:bb:fd:77:f7:
4a:11:1c:a7:e9:25:09:7d:0e:8a:2b:5f:61:e0:f1:
a8:a2:04:c6:e1:41:6e:cc:55:69:17:7a:15:90:8d:
4e:e8:8a:87:dd:9d:74:24:6d:51:d8:94:98:0b:32:
2b:3c:81:84:4c:b9:86:b7:1f:9e:8d:68:02:eb:1a:
4f:d6:54:fe:67:83:83:a6:ff:f4:2b:42:61:5d:df:
3d:18:fe:da:29:61:3f:f5:f0:85:92:49:c1:c3:6c:
7a:8f:07:27:40:4f:28:79:1d:4d:a0:91:49:9c:2a:
d2:4f:4b:b4:2e:ca:73:87:bd:08:4f:22:e4:84:94:
7d:2c:32:62:0b:79:44:01:45:86:44:a2:1e:ed:0c:
d2:67:94:6a:d4:4f:a2:43:b7:42:68:66:07:ed:ef:
b8:b0:45:3a:8b:c0:96:1d:09:19:56:31:06:77:e7:
8c:0f:d9:9c:9c:25:e3:66:06:fe:db:fe:13:f1:16:
c7:39:52:dc:4d:01:da:ab:c0:aa:6c:cd:21:44:6f:
21:89:c3:76:4d:e8:c4:c5:10:12:69:a2:5f:97:ec:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EE:19:57:EB:41:33:89:9D:D9:01:31:C1:D9:BE:56:84:48:94:57
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z-4ZV-tBM4md2QExwdm-VoRIlFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.177.0/24
185.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ad:f5:be:4a:fd:44:43:b4:52:55:e2:a9:b7:69:7c:55:17:
f3:f5:20:23:17:ee:48:18:e7:67:cc:8b:67:56:fd:06:ea:42:
bb:42:5e:5c:ce:c7:9b:80:62:80:47:b6:f8:36:75:aa:2f:cd:
11:82:d2:80:86:ad:80:74:7e:93:02:71:6f:33:d7:a1:f9:5f:
27:61:c3:bc:70:84:5b:75:56:fe:50:04:30:a1:7a:b8:74:16:
6b:07:44:37:6a:b7:a0:31:74:b6:40:21:b9:86:b0:c3:e6:bb:
0d:0d:f6:b8:a2:d1:39:bb:d1:41:7f:5e:26:6b:45:30:61:0e:
68:48:87:16:22:e1:71:88:35:2c:43:9f:ad:59:40:70:0a:8d:
57:1f:ad:3c:11:f4:f3:1b:d1:0f:f6:d1:28:cd:92:a7:7f:f4:
d7:ba:37:1a:56:b0:05:cb:7a:35:61:82:64:20:49:ad:ef:52:
8c:64:e9:39:5c:e4:6a:6b:35:ac:81:a1:32:dc:bd:ea:3a:a2:
56:a3:cd:a8:1c:c8:ba:d9:02:42:bc:72:22:5f:f9:45:4c:e7:
68:a0:ae:ed:58:33:d8:0a:01:76:24:e4:40:ae:60:74:b0:03:
5f:b8:e3:cf:b2:ec:bc:60:e0:57:09:30:a8:04:86:77:04:03:
5d:c3:cb:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHQ/O9yhaM0U4HZC8pkUrc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwOTA4MDkzNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2VlMTk1N2ViNDEzMzg5OWRkOTAxMzFjMWQ5YmU1Njg0NDg5NDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbyGODPZ8RSxSVWfdBsm4KE700vI
dLrWA3TCgLQUcGsTYW+3GYi9Trv9d/dKERyn6SUJfQ6KK19h4PGoogTG4UFuzFVp
F3oVkI1O6IqH3Z10JG1R2JSYCzIrPIGETLmGtx+ejWgC6xpP1lT+Z4ODpv/0K0Jh
Xd89GP7aKWE/9fCFkknBw2x6jwcnQE8oeR1NoJFJnCrST0u0Lspzh70ITyLkhJR9
LDJiC3lEAUWGRKIe7QzSZ5Rq1E+iQ7dCaGYH7e+4sEU6i8CWHQkZVjEGd+eMD9mc
nCXjZgb+2/4T8RbHOVLcTQHaq8CqbM0hRG8hicN2TejExRASaaJfl+xWNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGfuGVfrQTOJndkBMcHZvlaESJRXMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWi00WlYtdEJNNG1kMlFFeHdkbS1Wb1JJbEZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpyxAwQA
udhHMA0GCSqGSIb3DQEBCwUAA4IBAQAQrfW+Sv1EQ7RSVeKpt2l8VRfz9SAjF+5I
GOdnzItnVv0G6kK7Ql5czsebgGKAR7b4NnWqL80RgtKAhq2AdH6TAnFvM9eh+V8n
YcO8cIRbdVb+UAQwoXq4dBZrB0Q3aregMXS2QCG5hrDD5rsNDfa4otE5u9FBf14m
a0UwYQ5oSIcWIuFxiDUsQ5+tWUBwCo1XH608EfTzG9EP9tEozZKnf/TXujcaVrAF
y3o1YYJkIEmt71KMZOk5XORqazWsgaEy3L3qOqJWo82oHMi62QJCvHIiX/lFTOdo
oK7tWDPYCgF2JORArmB0sANfuOPPsuy8YOBXCTCoBIZ3BANdw8sa
-----END CERTIFICATE-----
Generated at Mon Oct 7 16:59:05 2024 by rpki-client on console-fra.rpki-client.org