Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zafSKlRGk8KtmoiGkkjeHnmGOaA.roa
File: zafSKlRGk8KtmoiGkkjeHnmGOaA.roa (raw, json)
Hash identifier: IdtfxdaQQDA2sUHyUaMDb4Iul7LwioMs4zNQ+xAyxJQ=
Subject key identifier: CD:A7:D2:2A:54:46:93:C2:AD:9A:88:86:92:48:DE:1E:79:86:39:A0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187A6DD204FF87DB0BAC9A6D7D0F9FAB285
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zafSKlRGk8KtmoiGkkjeHnmGOaA.roa
Signing time: Sat 22 Apr 2023 02:48:42 +0000
ROA not before: Sat 22 Apr 2023 02:48:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 87.120.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a6:dd:20:4f:f8:7d:b0:ba:c9:a6:d7:d0:f9:fa:b2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 22 02:48:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cda7d22a544693c2ad9a88869248de1e798639a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:3c:e7:a5:07:05:db:62:f6:8c:73:db:7d:
f8:5a:47:c3:26:d2:a6:4a:54:d6:21:1e:73:d2:ab:
5d:d5:3c:a8:87:96:ae:d5:db:53:74:11:bf:b9:ca:
22:62:5a:56:94:a9:0d:53:d7:a5:3a:f6:ef:c7:6d:
32:01:15:ec:1f:54:1f:48:31:11:b5:98:33:67:d4:
12:55:a6:f1:1b:88:83:e2:bb:d0:20:fa:0b:c0:bf:
72:06:dc:b9:1e:19:30:1f:48:fc:b2:3f:5a:b4:95:
03:a7:9a:af:55:d8:1e:ce:ac:2c:47:56:a7:41:8b:
7f:fa:30:ad:0b:39:e6:1e:49:e0:92:83:2e:27:8d:
af:ca:9f:12:61:ba:ce:e4:64:99:30:77:26:06:e1:
f5:90:82:c5:39:86:9b:8b:d3:fe:55:c5:60:30:1f:
93:c7:44:eb:d9:dd:ac:1f:1a:be:87:67:d2:13:fe:
13:ea:8e:bd:1e:7d:50:d9:03:55:ba:36:60:3a:0b:
57:54:f1:c7:31:0b:9d:1b:d7:ef:41:23:48:12:29:
13:6c:e2:b6:1b:fa:c6:28:c9:d2:30:f2:e7:46:e6:
ea:2a:75:1f:aa:75:3c:5e:02:be:ae:25:26:59:e4:
5c:b4:be:9b:d4:51:67:9c:ce:8d:6a:ff:42:33:8b:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:D2:2A:54:46:93:C2:AD:9A:88:86:92:48:DE:1E:79:86:39:A0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zafSKlRGk8KtmoiGkkjeHnmGOaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1a:eb:a4:96:d9:ec:f9:be:95:09:0b:ed:a2:5a:29:19:e3:
76:df:83:7a:69:90:4c:ee:e2:7e:40:06:76:be:31:51:6e:a2:
ba:bf:3d:c8:27:aa:d7:32:58:8c:06:06:3b:1f:58:64:21:3c:
b5:21:74:ee:08:89:ca:9f:1a:df:91:67:44:9c:bd:da:4c:38:
91:cc:d9:b3:fb:b8:08:4c:b6:b6:ec:1d:e8:64:c0:91:14:1e:
df:62:5e:0e:82:99:91:f6:4e:d4:ae:28:f7:f4:95:b1:e1:cc:
ee:4a:23:78:88:a7:f7:ee:f0:05:26:3c:19:5d:6b:31:54:cd:
4d:2d:f0:e5:1d:05:f2:c2:ce:0d:ec:0e:49:27:95:92:ff:82:
0b:91:5b:8a:28:54:37:86:f3:86:fd:20:e2:ba:72:b1:87:bf:
e2:0b:41:f9:75:ee:dc:ce:8e:ab:80:45:55:14:b4:86:90:7b:
a6:fe:27:e8:39:dd:c9:03:b9:2c:47:7f:4c:19:00:52:a5:2c:
18:77:e4:92:38:56:9a:12:fe:72:60:44:47:a7:bb:fb:c1:2d:
c8:b4:9f:3b:43:98:4b:e8:b4:f5:00:47:83:55:49:6d:06:62:
ca:57:55:9d:03:a1:0e:e6:7c:c0:de:ad:fe:fd:d0:de:bc:fe:
ce:a7:64:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYem3SBP+H2wusmm19D5+rKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNDIyMDI0ODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGE3ZDIyYTU0NDY5M2MyYWQ5YTg4ODY5MjQ4ZGUxZTc5ODYzOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIE856UHBdti9oxz2334WkfDJtKm
SlTWIR5z0qtd1Tyoh5au1dtTdBG/ucoiYlpWlKkNU9elOvbvx20yARXsH1QfSDER
tZgzZ9QSVabxG4iD4rvQIPoLwL9yBty5HhkwH0j8sj9atJUDp5qvVdgezqwsR1an
QYt/+jCtCznmHkngkoMuJ42vyp8SYbrO5GSZMHcmBuH1kILFOYabi9P+VcVgMB+T
x0Tr2d2sHxq+h2fSE/4T6o69Hn1Q2QNVujZgOgtXVPHHMQudG9fvQSNIEikTbOK2
G/rGKMnSMPLnRubqKnUfqnU8XgK+riUmWeRctL6b1FFnnM6Nav9CM4s3BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM2n0ipURpPCrZqIhpJI3h55hjmgMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvemFmU0tsUkdrOEt0bW9pR2tramVIbm1HT2FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3hEMA0G
CSqGSIb3DQEBCwUAA4IBAQAyGuukltns+b6VCQvtolopGeN234N6aZBM7uJ+QAZ2
vjFRbqK6vz3IJ6rXMliMBgY7H1hkITy1IXTuCInKnxrfkWdEnL3aTDiRzNmz+7gI
TLa27B3oZMCRFB7fYl4OgpmR9k7Urij39JWx4czuSiN4iKf37vAFJjwZXWsxVM1N
LfDlHQXyws4N7A5JJ5WS/4ILkVuKKFQ3hvOG/SDiunKxh7/iC0H5de7czo6rgEVV
FLSGkHum/ifoOd3JA7ksR39MGQBSpSwYd+SSOFaaEv5yYERHp7v7wS3ItJ87Q5hL
6LT1AEeDVUltBmLKV1WdA6EO5nzA3q3+/dDevP7Op2Sw
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-ams.rpki-client.org