Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/zwT6-4Tinl0p-NlcnGzmMPRl048.roa
File: zwT6-4Tinl0p-NlcnGzmMPRl048.roa (raw, json)
Hash identifier: voPQ7sjsbtuEmv79m2zb45F0oU7EfV++7zlQwXKCW3U=
Subject key identifier: CF:04:FA:FB:84:E2:9E:5D:29:F8:D9:5C:9C:6C:E6:30:F4:65:D3:8F
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26DFE93633795F7A70076A495EEB3B
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/zwT6-4Tinl0p-NlcnGzmMPRl048.roa
Signing time: Sun 01 Jan 2023 21:04:56 +0000
ROA not before: Sun 01 Jan 2023 21:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39770
IP address blocks: 193.233.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:df:e9:36:33:79:5f:7a:70:07:6a:49:5e:eb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf04fafb84e29e5d29f8d95c9c6ce630f465d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:bc:d2:72:71:d6:30:05:ae:83:9b:25:4d:
ea:d3:0e:57:ba:a4:93:d0:21:ff:a9:29:42:0f:3e:
2b:e9:e7:4b:65:0b:ea:d4:6d:00:e5:e8:40:5b:74:
59:d6:52:d8:72:05:9a:1e:ff:1a:c3:da:d4:b9:4d:
6b:cb:0e:c8:3d:25:d9:7f:94:b4:93:2d:35:93:05:
c5:f2:0f:2c:35:44:95:f4:1b:e7:c6:01:7b:3b:e8:
9d:45:85:ba:79:5c:9f:40:51:f2:29:56:2d:3c:29:
1e:15:62:a8:79:58:e5:b8:6a:25:a1:59:ca:2a:ed:
c8:94:ad:14:fc:40:13:a4:f3:ec:07:75:3b:15:89:
7f:60:2d:3b:4c:b4:5e:e1:30:2f:b0:d8:27:1c:3a:
11:be:32:97:b6:54:60:30:3c:ca:4a:61:26:b7:9c:
28:5c:c3:2c:8c:76:b5:49:24:83:fc:0d:7a:ff:04:
4d:58:a1:5c:c9:c6:86:f7:25:15:26:a1:bf:25:3e:
12:98:6a:ae:a8:fe:83:b1:99:0a:47:b6:52:88:95:
10:52:49:a0:a1:fb:b0:c5:59:97:30:a6:12:6b:31:
d9:4f:64:01:91:9c:8a:08:f6:3a:77:c5:03:d4:72:
65:ef:72:d5:0b:20:eb:27:a1:a8:9a:e1:36:2e:5d:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:04:FA:FB:84:E2:9E:5D:29:F8:D9:5C:9C:6C:E6:30:F4:65:D3:8F
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/zwT6-4Tinl0p-NlcnGzmMPRl048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3d:3f:d2:e8:75:69:fd:06:4e:30:24:81:bd:92:a1:10:d7:
9c:1f:b3:9c:f0:bc:65:84:53:4d:a2:3c:2c:e5:fd:85:2f:82:
34:ad:28:6d:c5:d6:21:7a:c6:71:08:29:cd:75:00:6a:7c:d0:
f1:33:ce:00:83:4a:7e:5c:85:7b:b7:1b:eb:5a:fc:f1:15:99:
00:fe:ea:00:7c:d2:d3:6e:01:aa:6d:24:9b:bb:b2:18:62:af:
84:08:77:6c:b5:88:b8:1e:dd:b4:18:da:1f:aa:d2:99:18:8a:
8c:e4:8d:4f:93:5a:70:f3:9e:50:0f:d7:59:72:8d:ea:f9:a5:
af:2a:ed:6c:8b:48:d3:5d:86:f5:f3:ed:b2:6d:49:ca:a3:4a:
cd:6e:e3:ab:a1:e0:3e:16:a3:f3:8e:4a:b3:72:c0:6e:d4:4d:
a3:82:b4:b4:35:bc:90:0d:27:ed:b0:97:4b:54:64:95:5a:d3:
a4:ca:98:62:54:7a:9b:f1:3c:81:b1:ce:3f:0d:7d:b0:4a:0e:
71:01:0a:9c:8b:7b:3b:3a:ca:85:83:92:9e:91:bb:ea:ac:52:
2f:ef:d9:cb:da:2b:98:89:ed:4c:e2:da:a7:6a:b4:df:35:99:
7b:e2:ce:cc:32:f7:21:90:14:df:cc:25:c6:8e:75:12:eb:3d:
3b:68:49:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvJt/pNjN5X3pwB2pJXus7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMwMTAxMjEwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjA0ZmFmYjg0ZTI5ZTVkMjlmOGQ5NWM5YzZjZTYzMGY0NjVkMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1+80nJx1jAFroObJU3q0w5XuqST
0CH/qSlCDz4r6edLZQvq1G0A5ehAW3RZ1lLYcgWaHv8aw9rUuU1ryw7IPSXZf5S0
ky01kwXF8g8sNUSV9BvnxgF7O+idRYW6eVyfQFHyKVYtPCkeFWKoeVjluGoloVnK
Ku3IlK0U/EATpPPsB3U7FYl/YC07TLRe4TAvsNgnHDoRvjKXtlRgMDzKSmEmt5wo
XMMsjHa1SSSD/A16/wRNWKFcycaG9yUVJqG/JT4SmGquqP6DsZkKR7ZSiJUQUkmg
ofuwxVmXMKYSazHZT2QBkZyKCPY6d8UD1HJl73LVCyDrJ6GomuE2Ll2H5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8E+vuE4p5dKfjZXJxs5jD0ZdOPMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvendUNi00VGlubDBwLU5sY25Hem1NUFJsMDQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwelRMA0G
CSqGSIb3DQEBCwUAA4IBAQBLPT/S6HVp/QZOMCSBvZKhENecH7Oc8LxlhFNNojws
5f2FL4I0rShtxdYhesZxCCnNdQBqfNDxM84Ag0p+XIV7txvrWvzxFZkA/uoAfNLT
bgGqbSSbu7IYYq+ECHdstYi4Ht20GNofqtKZGIqM5I1Pk1pw855QD9dZco3q+aWv
Ku1si0jTXYb18+2ybUnKo0rNbuOroeA+FqPzjkqzcsBu1E2jgrS0NbyQDSftsJdL
VGSVWtOkyphiVHqb8TyBsc4/DX2wSg5xAQqci3s7OsqFg5KekbvqrFIv79nL2iuY
ie1M4tqnarTfNZl74s7MMvchkBTfzCXGjnUS6z07aEkU
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org