Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Z-c_bP9p30CTemNx2Bsb1OwYtfo.roa
File: Z-c_bP9p30CTemNx2Bsb1OwYtfo.roa (raw, json)
Hash identifier: RGRH+HlW2ypgGANZxJp0dwhgfJ0RtQESEiky0DWhC2o=
Subject key identifier: 67:E7:3F:6C:FF:69:DF:40:93:7A:63:71:D8:1B:1B:D4:EC:18:B5:FA
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01857247123DE6DDC484B6C40611D8646A4D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Z-c_bP9p30CTemNx2Bsb1OwYtfo.roa
Signing time: Mon 02 Jan 2023 11:38:58 +0000
ROA not before: Mon 02 Jan 2023 11:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200391
IP address blocks: 5.188.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:12:3d:e6:dd:c4:84:b6:c4:06:11:d8:64:6a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67e73f6cff69df40937a6371d81b1bd4ec18b5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:8b:44:22:d7:19:a2:12:87:e9:a7:ef:e5:
f9:e3:b8:6c:f7:b8:90:c2:6c:5f:d1:77:2b:5a:e0:
9c:76:04:e4:ac:48:19:3c:21:49:33:c2:98:f3:74:
ba:10:f9:b5:3b:4a:14:dd:5e:88:c5:9d:5d:7b:ef:
6b:ba:56:c7:f1:8f:a4:4f:0b:91:08:90:cf:52:ba:
fa:18:6c:cc:bb:e1:81:37:b0:67:24:c7:8e:9b:4c:
dd:77:90:de:05:68:fd:00:50:56:1f:08:91:0e:c0:
e6:60:c0:76:0d:61:63:52:e3:90:11:e6:c7:40:b4:
df:f0:9f:1f:6f:7e:d2:d0:51:2a:50:1e:cd:7a:6b:
e9:43:5a:7f:5e:be:08:f8:d6:2a:ea:38:f3:40:29:
d7:bb:3e:bb:bc:17:92:eb:62:6b:8b:95:16:9b:a0:
00:32:a7:ac:f7:c6:1d:37:52:56:fe:7c:3f:fe:d3:
ca:db:5f:3b:6b:66:46:39:90:9b:f1:79:06:84:62:
61:32:85:66:b1:ca:b3:5c:de:cb:db:a9:ef:2d:87:
91:12:e1:e9:3a:30:0e:e3:e0:32:b0:11:86:ba:ee:
3c:74:a4:f3:9a:24:38:4e:bb:ef:ba:79:2b:ae:1c:
46:4e:10:a4:0f:92:4d:d1:12:09:a4:0f:41:ed:90:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:3F:6C:FF:69:DF:40:93:7A:63:71:D8:1B:1B:D4:EC:18:B5:FA
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Z-c_bP9p30CTemNx2Bsb1OwYtfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f0:34:75:e1:73:35:20:9c:22:97:bf:20:88:11:36:23:70:
ef:4b:91:32:c2:6b:a1:8e:a5:e9:b0:16:a9:8a:0c:9d:d7:a5:
02:a6:6d:01:8e:9b:b7:ea:68:7a:a3:73:1f:72:d5:c8:f8:aa:
4d:9c:9a:1b:06:cc:90:8d:b2:da:c6:d0:71:2c:c8:da:64:23:
fa:20:01:05:84:e3:d8:63:82:8a:92:8f:5a:75:ca:64:76:95:
d7:18:17:18:e2:6e:ef:94:23:fd:00:bd:97:03:70:f9:a6:37:
d3:6b:f1:e1:b3:f3:1f:c3:22:7a:9f:9a:29:95:cc:87:8e:6d:
21:e6:7d:5a:f2:19:73:a2:b0:52:f1:1c:68:6c:5b:d6:7a:7d:
bb:79:fc:3a:aa:cb:65:e2:31:4a:a5:2b:e2:08:7a:f6:c5:d3:
5f:fe:ca:5d:ec:68:db:76:5a:31:ce:6e:98:4e:5e:4f:16:5c:
3c:d9:ee:48:d0:86:f1:fd:0c:01:80:e2:4e:7a:49:a8:fd:69:
23:e0:b9:34:a5:07:6a:a7:a4:bb:95:bd:c1:90:e2:ff:fe:47:
13:cf:c3:e7:3c:d8:45:72:72:d6:f5:58:5f:1e:f4:92:95:14:
3d:40:9c:99:ea:b7:b5:04:75:a7:83:fe:67:d5:9e:76:55:a8:
7b:e5:68:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRxI95t3EhLbEBhHYZGpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMwMTAyMTEzODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2U3M2Y2Y2ZmNjlkZjQwOTM3YTYzNzFkODFiMWJkNGVjMThiNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AaLRCLXGaISh+mn7+X547hs97iQ
wmxf0XcrWuCcdgTkrEgZPCFJM8KY83S6EPm1O0oU3V6IxZ1de+9rulbH8Y+kTwuR
CJDPUrr6GGzMu+GBN7BnJMeOm0zdd5DeBWj9AFBWHwiRDsDmYMB2DWFjUuOQEebH
QLTf8J8fb37S0FEqUB7NemvpQ1p/Xr4I+NYq6jjzQCnXuz67vBeS62Jri5UWm6AA
Mqes98YdN1JW/nw//tPK2187a2ZGOZCb8XkGhGJhMoVmscqzXN7L26nvLYeREuHp
OjAO4+AysBGGuu48dKTzmiQ4TrvvunkrrhxGThCkD5JN0RIJpA9B7ZAS9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGfnP2z/ad9Ak3pjcdgbG9TsGLX6MB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvWi1jX2JQOXAzMENUZW1OeDJCc2IxT3dZdGZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbzOMA0G
CSqGSIb3DQEBCwUAA4IBAQCk8DR14XM1IJwil78giBE2I3DvS5EywmuhjqXpsBap
igyd16UCpm0Bjpu36mh6o3MfctXI+KpNnJobBsyQjbLaxtBxLMjaZCP6IAEFhOPY
Y4KKko9adcpkdpXXGBcY4m7vlCP9AL2XA3D5pjfTa/Hhs/MfwyJ6n5oplcyHjm0h
5n1a8hlzorBS8RxobFvWen27efw6qstl4jFKpSviCHr2xdNf/spd7Gjbdloxzm6Y
Tl5PFlw82e5I0Ibx/QwBgOJOekmo/Wkj4Lk0pQdqp6S7lb3BkOL//kcTz8PnPNhF
cnLW9VhfHvSSlRQ9QJyZ6re1BHWng/5n1Z52Vah75Wjl
-----END CERTIFICATE-----
Generated at Fri Aug 4 12:22:07 2023 by rpki-client on console-fra.rpki-client.org