Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zmAgSEN5YIkKv5Yg2O25u_16lzo.roa
File: zmAgSEN5YIkKv5Yg2O25u_16lzo.roa (raw, json)
Hash identifier: 8F3NT3CR+/M/KrgWeJNv6pIy9rr1AmtrVhWCIgi8Mso=
Subject key identifier: CE:60:20:48:43:79:60:89:0A:BF:96:20:D8:ED:B9:BB:FD:7A:97:3A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190C48A6F8E8AEA4CD3C4D89CC8EC25BA35
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zmAgSEN5YIkKv5Yg2O25u_16lzo.roa
Signing time: Thu 18 Jul 2024 06:32:05 +0000
ROA not before: Thu 18 Jul 2024 06:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31490
IP address blocks: 85.217.188.0/24 maxlen: 24
93.123.23.0/24 maxlen: 24
2a00:1728:20::/48 maxlen: 48
2a00:1728:20:100::/56 maxlen: 56
2a00:1728:33::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 23 Jul 2024 10:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:8a:6f:8e:8a:ea:4c:d3:c4:d8:9c:c8:ec:25:ba:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 18 06:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce602048437960890abf9620d8edb9bbfd7a973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:fd:30:e1:bd:33:c8:4c:78:50:50:23:12:
d2:8c:5d:ae:dd:85:a4:30:64:cf:cf:4a:8a:98:b0:
65:b1:28:7f:16:4b:85:c8:82:c6:0b:6e:be:6d:6a:
97:21:29:16:26:68:8e:e8:8b:3b:20:54:80:c3:ef:
a3:40:38:5f:7e:9d:e3:59:c8:c0:26:24:ac:f3:16:
b6:5e:ad:c2:52:eb:f8:50:18:1c:10:7b:4d:66:ad:
59:66:9e:b6:28:87:34:d3:c5:05:b1:be:13:0f:2d:
e7:8f:26:f1:32:59:11:41:0e:26:4d:2a:55:db:a3:
db:89:27:20:56:17:23:86:17:ec:34:8b:1c:e2:27:
7d:c6:36:f1:b2:be:93:6d:54:6a:b0:db:da:7a:0f:
43:c8:fa:a6:83:67:e2:9b:57:00:ca:47:9f:99:b1:
66:ac:8c:bd:6f:ff:5a:80:46:b0:c4:f3:3a:88:23:
0d:43:52:56:fb:71:cc:dc:9c:53:c8:07:88:9f:a6:
96:0e:65:fa:7e:65:ec:37:8e:f2:77:60:27:12:2e:
69:8a:b7:ff:ef:97:7f:e8:e4:d0:8b:40:f4:c6:fb:
a4:eb:14:59:88:ee:8b:34:28:6b:6a:02:26:ec:70:
a8:29:75:7c:d3:a4:fb:1b:3a:78:52:d3:45:83:ca:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:60:20:48:43:79:60:89:0A:BF:96:20:D8:ED:B9:BB:FD:7A:97:3A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zmAgSEN5YIkKv5Yg2O25u_16lzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.188.0/24
93.123.23.0/24
IPv6:
2a00:1728:20::/48
2a00:1728:33::/48
Signature Algorithm: sha256WithRSAEncryption
81:e4:c9:fb:d5:68:c8:2a:fe:56:be:44:13:40:5c:34:4c:f0:
1e:60:e5:48:c7:eb:86:a5:0d:47:02:00:f3:e9:87:8e:a5:8e:
24:d6:ba:26:9e:28:a8:5f:af:7b:f0:27:2b:36:95:4a:a3:1a:
a2:25:b2:4c:ba:81:7b:ba:2b:8f:24:83:43:22:b6:a2:8d:e9:
3f:3e:35:be:12:18:f8:09:54:ca:f1:3a:ef:5e:06:87:b4:bc:
ea:c2:37:9a:33:08:08:92:7b:e3:f7:6b:af:d7:b2:57:aa:20:
95:db:dd:e7:4c:bc:cf:21:f5:03:88:4f:3d:eb:7d:c1:18:cc:
53:c7:12:c7:4c:c7:aa:56:f9:17:e5:93:28:df:c5:33:ba:cc:
5c:d8:4b:e4:e3:6b:88:69:c5:13:10:22:18:3e:bc:20:28:93:
45:5d:0e:e7:e0:d4:f3:be:5c:a3:a7:11:86:39:e7:e7:4e:fc:
40:d6:53:31:27:93:9d:42:7e:0b:c7:df:e7:bf:86:68:92:9c:
ed:2e:34:5a:d0:f0:7c:20:33:46:7f:8e:d9:41:04:38:e0:dc:
a6:57:f4:b4:53:ef:db:dd:6b:39:c8:04:fa:4e:29:ab:b7:83:
b1:ec:f6:59:d8:9b:ba:58:ab:21:05:63:ff:c1:05:b4:82:00:
8e:4c:00:ef
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZDEim+OiupM08TYnMjsJbo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNzE4MDYzMjA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTYwMjA0ODQzNzk2MDg5MGFiZjk2MjBkOGVkYjliYmZkN2E5NzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyon9MOG9M8hMeFBQIxLSjF2u3YWk
MGTPz0qKmLBlsSh/FkuFyILGC26+bWqXISkWJmiO6Is7IFSAw++jQDhffp3jWcjA
JiSs8xa2Xq3CUuv4UBgcEHtNZq1ZZp62KIc008UFsb4TDy3njybxMlkRQQ4mTSpV
26PbiScgVhcjhhfsNIsc4id9xjbxsr6TbVRqsNvaeg9DyPqmg2fim1cAykefmbFm
rIy9b/9agEawxPM6iCMNQ1JW+3HM3JxTyAeIn6aWDmX6fmXsN47yd2AnEi5pirf/
75d/6OTQi0D0xvuk6xRZiO6LNChragIm7HCoKXV806T7Gzp4UtNFg8oJKwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFM5gIEhDeWCJCr+WINjtubv9epc6MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvem1BZ1NFTjVZSWtLdjVZZzJPMjV1XzE2bHpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAVdm8AwQA
XXsXMBgEAgACMBIDBwAqABcoACADBwAqABcoADMwDQYJKoZIhvcNAQELBQADggEB
AIHkyfvVaMgq/la+RBNAXDRM8B5g5UjH64alDUcCAPPph46ljiTWuiaeKKhfr3vw
Jys2lUqjGqIlsky6gXu6K48kg0MitqKN6T8+Nb4SGPgJVMrxOu9eBoe0vOrCN5oz
CAiSe+P3a6/XsleqIJXb3edMvM8h9QOITz3rfcEYzFPHEsdMx6pW+RflkyjfxTO6
zFzYS+Tja4hpxRMQIhg+vCAok0VdDufg1PO+XKOnEYY55+dO/EDWUzEnk51CfgvH
3+e/hmiSnO0uNFrQ8HwgM0Z/jtlBBDjg3KZX9LRT79vdaznIBPpOKau3g7Hs9lnY
m7pYqyEFY//BBbSCAI5MAO8=
-----END CERTIFICATE-----
Generated at Tue Jul 23 14:10:15 2024 by rpki-client on console-fra.rpki-client.org