Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZJDLyABQ86U9obayb1gAPEny2mI.roa
File: ZJDLyABQ86U9obayb1gAPEny2mI.roa (raw, json)
Hash identifier: L9Re6yykURa+hpx+fRG2/R7UVGdoKymjFECZbewVx+w=
Subject key identifier: 64:90:CB:C8:00:50:F3:A5:3D:A1:B6:B2:6F:58:00:3C:49:F2:DA:62
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B2836B5D5D125BC8F32D7A10D241EB37D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZJDLyABQ86U9obayb1gAPEny2mI.roa
Signing time: Fri 13 Oct 2023 08:45:55 +0000
ROA not before: Fri 13 Oct 2023 08:45:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 193.42.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:36:b5:d5:d1:25:bc:8f:32:d7:a1:0d:24:1e:b3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 13 08:45:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6490cbc80050f3a53da1b6b26f58003c49f2da62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:33:7e:4d:a5:69:ca:3d:ec:6f:c7:4a:04:
fe:26:8e:71:26:28:49:70:26:a0:c9:c0:7f:2f:1b:
7f:4b:6a:2f:b0:60:7c:04:cd:12:d1:f3:88:87:6a:
fb:c7:83:0a:c3:68:d2:c2:82:e8:d5:49:b9:d9:00:
c1:35:3f:a0:bb:8f:09:49:27:ba:a6:c2:f1:d2:50:
15:55:26:d6:6d:0c:ef:31:4f:6f:72:59:2b:5a:7b:
fe:4d:eb:85:90:a3:e5:d1:8c:c3:26:d8:c1:4e:a8:
59:55:57:21:49:5d:35:c4:4c:44:df:c5:4f:e4:06:
1a:a5:13:eb:12:73:a9:02:30:d2:50:78:3d:71:8a:
21:2e:9d:72:c0:41:43:5a:ed:75:10:50:72:2b:f6:
24:55:04:01:c5:a6:25:83:ef:b9:9f:32:68:5a:38:
84:03:95:da:40:97:ac:02:ca:79:bc:29:d7:fb:b2:
af:de:70:0a:bd:b7:72:7d:00:8b:ae:89:15:47:21:
aa:2e:6d:af:34:fd:88:c3:aa:76:fa:54:4a:2a:34:
16:17:ce:30:cf:69:c1:80:8d:93:c0:c0:55:1e:3d:
81:6b:9b:ae:4e:d8:ff:bd:72:ae:e2:0b:80:2a:15:
5b:81:9e:a1:6d:20:f9:f8:72:6e:1d:ed:2a:36:7e:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:CB:C8:00:50:F3:A5:3D:A1:B6:B2:6F:58:00:3C:49:F2:DA:62
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZJDLyABQ86U9obayb1gAPEny2mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:17:52:4a:54:1f:0c:6f:72:8d:e5:ab:46:4d:d9:93:88:aa:
5d:a5:4a:90:fa:9e:bf:91:8d:f8:d9:db:60:0e:68:6b:eb:e9:
94:71:7e:50:7d:da:58:c7:58:85:10:41:da:a5:11:0b:09:4c:
c9:c5:05:c0:7a:c1:e6:05:51:10:48:b7:5c:f1:75:eb:e5:31:
67:2c:5c:57:a2:43:52:c6:be:49:12:ff:c5:80:f0:63:59:46:
3c:aa:32:5b:4e:61:f1:e8:97:7c:ad:34:1a:be:34:3a:2c:f3:
8a:75:f5:0d:0a:86:18:ec:df:50:2c:a2:2c:a0:da:35:9e:e8:
17:dd:27:11:a7:80:4a:49:0b:5d:07:9d:bc:50:54:61:02:bc:
bf:57:aa:55:84:b3:29:3d:ad:53:4e:1f:6a:4f:18:41:9d:43:
5b:aa:3b:ff:d5:ae:64:cc:01:0b:58:5d:f7:99:89:5e:40:41:
2f:9a:23:19:9b:c5:5f:79:eb:8c:2d:cf:75:78:ca:71:6e:5c:
87:ca:b9:b6:53:06:a0:62:f6:34:13:4a:25:27:8b:72:34:98:
2d:a3:26:a6:f1:3c:37:34:09:54:43:15:76:76:83:64:30:56:
37:cd:81:ae:07:53:f3:e2:c9:8c:7c:a9:3d:7a:5e:f0:ea:9e:
a9:17:ca:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsoNrXV0SW8jzLXoQ0kHrN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMDEzMDg0NTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDkwY2JjODAwNTBmM2E1M2RhMWI2YjI2ZjU4MDAzYzQ5ZjJkYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRYzfk2laco97G/HSgT+Jo5xJihJ
cCagycB/Lxt/S2ovsGB8BM0S0fOIh2r7x4MKw2jSwoLo1Um52QDBNT+gu48JSSe6
psLx0lAVVSbWbQzvMU9vclkrWnv+TeuFkKPl0YzDJtjBTqhZVVchSV01xExE38VP
5AYapRPrEnOpAjDSUHg9cYohLp1ywEFDWu11EFByK/YkVQQBxaYlg++5nzJoWjiE
A5XaQJesAsp5vCnX+7Kv3nAKvbdyfQCLrokVRyGqLm2vNP2Iw6p2+lRKKjQWF84w
z2nBgI2TwMBVHj2Ba5uuTtj/vXKu4guAKhVbgZ6hbSD5+HJuHe0qNn4ycwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGSQy8gAUPOlPaG2sm9YADxJ8tpiMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWkpETHlBQlE4NlU5b2JheWIxZ0FQRW55Mm1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSohMA0G
CSqGSIb3DQEBCwUAA4IBAQCuF1JKVB8Mb3KN5atGTdmTiKpdpUqQ+p6/kY342dtg
Dmhr6+mUcX5QfdpYx1iFEEHapRELCUzJxQXAesHmBVEQSLdc8XXr5TFnLFxXokNS
xr5JEv/FgPBjWUY8qjJbTmHx6Jd8rTQavjQ6LPOKdfUNCoYY7N9QLKIsoNo1nugX
3ScRp4BKSQtdB528UFRhAry/V6pVhLMpPa1TTh9qTxhBnUNbqjv/1a5kzAELWF33
mYleQEEvmiMZm8VfeeuMLc91eMpxblyHyrm2UwagYvY0E0olJ4tyNJgtoyam8Tw3
NAlUQxV2doNkMFY3zYGuB1Pz4smMfKk9el7w6p6pF8oa
-----END CERTIFICATE-----
Generated at Fri Nov 3 07:57:12 2023 by rpki-client on console-ams.rpki-client.org