Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/ZwbTeUFolrmr7Uw_-HmgXBMS9Uo.roa
File: ZwbTeUFolrmr7Uw_-HmgXBMS9Uo.roa (raw, json)
Hash identifier: HvNxaDk8EHnswl0ahKbuzjovrhMkEyqJmKybdUyjz7g=
Subject key identifier: 67:06:D3:79:41:68:96:B9:AB:ED:4C:3F:F8:79:A0:5C:13:12:F5:4A
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 01856FA6E9605D4AADB3F9D447C88C56A58E
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/ZwbTeUFolrmr7Uw_-HmgXBMS9Uo.roa
Signing time: Sun 01 Jan 2023 23:24:47 +0000
ROA not before: Sun 01 Jan 2023 23:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.169.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:e9:60:5d:4a:ad:b3:f9:d4:47:c8:8c:56:a5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jan 1 23:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6706d379416896b9abed4c3ff879a05c1312f54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:90:b2:1d:6b:ec:db:ef:db:b1:9a:b3:cc:
ba:24:32:9b:37:b0:aa:e5:c4:25:86:cd:63:b0:f4:
94:2a:7c:65:1d:75:6a:d0:98:aa:a9:93:9f:04:09:
02:73:d2:02:d8:7c:cb:0b:7d:9d:93:f8:54:3a:fe:
92:1d:fb:1a:41:46:fe:b0:17:c9:d9:48:2a:b5:ee:
11:69:3d:a8:fd:dc:27:7a:39:44:13:8c:4c:9d:8e:
94:0a:6d:ef:c5:80:e2:41:d4:c7:d6:35:47:1e:88:
4e:e8:bf:1a:5d:4a:0e:06:a3:cd:ff:f7:43:41:5d:
ea:6c:5a:75:ab:ad:0d:b0:89:e0:a0:6f:b2:59:98:
21:1c:02:c8:b1:1a:68:20:db:9d:1d:e7:7f:7b:0b:
62:43:69:c9:6c:d0:4e:16:57:76:5a:50:ce:96:dd:
95:5a:f0:95:a7:d2:82:6c:8c:25:1f:99:4f:03:fa:
08:03:2b:31:dd:69:dd:1c:04:52:77:1c:aa:46:b7:
8a:3f:b5:93:24:a2:ff:43:2a:8b:d7:aa:bc:23:02:
cf:c2:58:8b:6c:2b:75:8d:73:e7:c1:87:2f:1c:aa:
8a:0c:69:e7:d9:90:5b:95:2e:79:44:f9:97:68:f1:
b6:e7:a9:c9:d5:4c:1e:15:6f:cd:d6:e3:8b:c8:b6:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:D3:79:41:68:96:B9:AB:ED:4C:3F:F8:79:A0:5C:13:12:F5:4A
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/ZwbTeUFolrmr7Uw_-HmgXBMS9Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4a:42:58:5c:64:aa:fe:bd:1e:66:ce:e6:da:a3:8d:d7:97:
25:32:ee:d2:3c:3b:56:ca:b2:94:7a:07:cf:7c:0f:d1:05:25:
ab:71:8e:3e:ed:b0:2f:1e:8f:c5:de:e1:c1:9d:c3:21:17:93:
ac:07:45:bb:e1:e9:03:29:eb:a0:43:00:fe:de:ed:c9:ed:52:
01:ec:c7:13:a4:1a:98:05:ca:cb:ec:b2:b8:e5:db:88:73:91:
31:a1:b1:ca:2e:8b:5d:47:91:88:f8:9a:4a:18:57:32:ac:88:
b0:3d:5d:2d:a8:ec:50:23:45:6e:cd:69:2a:67:68:85:96:40:
b3:65:15:1c:ee:d0:5a:67:43:5f:4e:74:9a:e9:33:4d:a2:8a:
42:54:d8:52:5a:d0:71:27:ad:62:ca:89:14:c4:23:7e:7d:f4:
65:5a:34:38:9a:c0:8d:49:b7:5e:d2:d6:ee:6b:27:66:7e:d3:
a6:2a:64:7f:b1:f9:e5:63:bc:66:8a:5a:b7:0b:47:d0:82:7a:
7e:99:a7:20:ba:0a:98:7e:9a:e6:25:78:80:80:fb:d6:ba:cb:
e1:f6:28:44:8e:8f:34:a9:66:f2:50:5c:df:fc:1c:89:5a:a0:
2a:11:65:f6:69:88:1c:e6:9c:54:e7:87:8b:fa:a1:fe:5b:04:
8e:2b:54:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvpulgXUqts/nUR8iMVqWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTk1MjlkZDMxNzA2NDVkNzZjZjZhYzA2NTk1MDZjYzY0
OWNhOTAwHhcNMjMwMTAxMjMyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzA2ZDM3OTQxNjg5NmI5YWJlZDRjM2ZmODc5YTA1YzEzMTJmNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbaQsh1r7Nvv27Gas8y6JDKbN7Cq
5cQlhs1jsPSUKnxlHXVq0JiqqZOfBAkCc9IC2HzLC32dk/hUOv6SHfsaQUb+sBfJ
2Ugqte4RaT2o/dwnejlEE4xMnY6UCm3vxYDiQdTH1jVHHohO6L8aXUoOBqPN//dD
QV3qbFp1q60NsIngoG+yWZghHALIsRpoINudHed/ewtiQ2nJbNBOFld2WlDOlt2V
WvCVp9KCbIwlH5lPA/oIAysx3WndHARSdxyqRreKP7WTJKL/QyqL16q8IwLPwliL
bCt1jXPnwYcvHKqKDGnn2ZBblS55RPmXaPG256nJ1UweFW/N1uOLyLaHswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcG03lBaJa5q+1MP/h5oFwTEvVKMB8GA1UdIwQY
MBaAFJdZUp3TFwZF12z2rAZZUGzGScqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYt
ZGU0YWNjYjAwZGQ3LzEvWndiVGVVRm9scm1yN1V3Xy1IbWdYQk1TOVVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYtZGU0YWNjYjAwZGQ3
LzEvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuakbMA0G
CSqGSIb3DQEBCwUAA4IBAQBsSkJYXGSq/r0eZs7m2qON15clMu7SPDtWyrKUegfP
fA/RBSWrcY4+7bAvHo/F3uHBncMhF5OsB0W74ekDKeugQwD+3u3J7VIB7McTpBqY
BcrL7LK45duIc5ExobHKLotdR5GI+JpKGFcyrIiwPV0tqOxQI0VuzWkqZ2iFlkCz
ZRUc7tBaZ0NfTnSa6TNNoopCVNhSWtBxJ61iyokUxCN+ffRlWjQ4msCNSbde0tbu
aydmftOmKmR/sfnlY7xmilq3C0fQgnp+macgugqYfprmJXiAgPvWusvh9ihEjo80
qWbyUFzf/ByJWqAqEWX2aYgc5pxU54eL+qH+WwSOK1R5
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:35 2023 by rpki-client on console-ams.rpki-client.org