Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/Zz7ZCPjJ9swwdyVkYyn-hWRFvow.roa
File: Zz7ZCPjJ9swwdyVkYyn-hWRFvow.roa (raw, json)
Hash identifier: HWESe60xPlHBt3oaCShayFb/BwHAnFimXrj+je8E/4Y=
Subject key identifier: 67:3E:D9:08:F8:C9:F6:CC:30:77:25:64:63:29:FE:85:64:45:BE:8C
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 018B14A146C16CF9CCD7E2E20F3469CD8A02
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/Zz7ZCPjJ9swwdyVkYyn-hWRFvow.roa
Signing time: Mon 09 Oct 2023 13:29:55 +0000
ROA not before: Mon 09 Oct 2023 13:29:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29063
IP address blocks: 83.138.0.0/21 maxlen: 21
212.25.192.0/20 maxlen: 20
212.25.212.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:a1:46:c1:6c:f9:cc:d7:e2:e2:0f:34:69:cd:8a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Oct 9 13:29:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=673ed908f8c9f6cc307725646329fe856445be8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:12:72:6f:27:4e:02:9e:f5:80:b1:d4:2e:
c3:5c:c0:bd:b4:7d:54:59:57:9d:70:54:13:67:df:
5d:ba:6a:38:6b:a9:d6:0f:08:c6:a1:ba:2b:9e:93:
99:63:d7:d9:f9:7b:e2:96:c9:ab:d0:b4:64:8a:4a:
d2:fb:c8:8f:2b:94:01:4c:10:dc:ae:fa:60:63:fb:
28:f8:54:8b:90:6a:2e:95:13:54:10:8c:cf:ca:8b:
46:2e:ff:2f:84:91:b4:d4:9f:5b:4f:5b:d2:70:c3:
d7:87:5f:9e:45:95:67:40:9a:3d:ad:a9:2a:b3:1a:
62:d2:07:02:d9:ed:30:b8:30:9a:d2:59:ec:ec:3a:
c8:98:d3:c0:6e:16:49:37:e6:e9:f5:a0:5d:e3:5c:
53:c7:39:20:66:53:66:05:18:45:58:a2:27:70:30:
b1:f2:50:86:1c:af:7a:3a:d4:01:ae:9d:43:b3:7e:
51:f8:87:19:8e:7d:0c:ca:3a:da:ac:49:fa:81:fe:
86:66:b4:12:29:36:39:f0:be:3c:bb:26:ce:dc:59:
54:c3:78:47:7f:8e:b4:c7:e3:80:53:f8:a5:62:86:
08:1f:82:20:88:da:0d:d9:73:82:38:b4:80:ca:7c:
c3:8f:54:bb:9a:a4:24:7f:2f:b2:c5:d7:fe:79:19:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3E:D9:08:F8:C9:F6:CC:30:77:25:64:63:29:FE:85:64:45:BE:8C
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/Zz7ZCPjJ9swwdyVkYyn-hWRFvow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.0.0/21
212.25.192.0/20
212.25.212.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:d6:2d:4f:6d:a0:66:b6:01:9f:44:aa:47:70:87:79:f3:0b:
44:2e:f7:04:04:11:04:9d:25:2c:d7:6a:ec:f2:a7:34:1a:fa:
f9:3e:7d:3e:56:0f:78:a9:69:ce:10:5d:77:b7:f5:77:ba:2f:
6b:ac:e5:94:58:ef:71:f3:4d:31:6f:6c:1b:ce:5b:86:db:82:
c0:dd:57:29:db:03:f7:6c:71:60:a5:a9:0c:a4:43:40:36:b7:
b1:41:bf:61:4c:ae:29:4b:b9:3d:eb:02:51:ea:f6:a7:05:7e:
0a:a0:c5:14:4b:60:6f:80:3d:a1:88:b2:b7:fe:e4:62:43:1d:
5c:b9:97:0c:ce:4a:4e:a1:60:43:6f:70:3c:78:a0:c1:59:3c:
1f:b1:8a:70:d9:cb:a5:c7:c3:6c:73:17:87:ef:1d:de:1b:10:
e6:18:30:b3:95:47:51:12:98:75:59:32:43:f4:40:dd:f6:24:
e9:49:85:fd:be:d6:e8:af:b2:de:e8:58:c9:f5:ff:89:8f:b7:
4f:9b:04:f0:b0:64:15:e2:6f:e4:11:59:d6:61:38:54:0d:b5:
b6:4b:5e:d9:52:6c:9e:83:f1:ea:c2:b5:18:8f:d9:b1:8d:1e:
fc:6e:42:eb:24:b7:39:87:ec:36:fa:28:c1:a9:61:fe:3e:ce:
14:ea:81:b5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYsUoUbBbPnM1+LiDzRpzYoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmJmZDkyOGJjY2I0MmFkOWM0NjhhNTUyYWI3MzkzZmRk
ODcwOTUwHhcNMjMxMDA5MTMyOTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzNlZDkwOGY4YzlmNmNjMzA3NzI1NjQ2MzI5ZmU4NTY0NDViZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi28Scm8nTgKe9YCx1C7DXMC9tH1U
WVedcFQTZ99dumo4a6nWDwjGobornpOZY9fZ+Xvilsmr0LRkikrS+8iPK5QBTBDc
rvpgY/so+FSLkGoulRNUEIzPyotGLv8vhJG01J9bT1vScMPXh1+eRZVnQJo9rakq
sxpi0gcC2e0wuDCa0lns7DrImNPAbhZJN+bp9aBd41xTxzkgZlNmBRhFWKIncDCx
8lCGHK96OtQBrp1Ds35R+IcZjn0MyjrarEn6gf6GZrQSKTY58L48uybO3FlUw3hH
f460x+OAU/ilYoYIH4IgiNoN2XOCOLSAynzDj1S7mqQkfy+yxdf+eRlUVwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGc+2Qj4yfbMMHclZGMp/oVkRb6MMB8GA1UdIwQY
MBaAFNNr/ZKLzLQq2cRopVKrc5P92HCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjkt
YTc0ZTRhODg3ODA0LzEvWno3WkNQako5c3d3ZHlWa1l5bi1oV1JGdm93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjktYTc0ZTRhODg3ODA0
LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDU4oAAwQE
1BnAAwQB1BnUMA0GCSqGSIb3DQEBCwUAA4IBAQBP1i1PbaBmtgGfRKpHcId58wtE
LvcEBBEEnSUs12rs8qc0Gvr5Pn0+Vg94qWnOEF13t/V3ui9rrOWUWO9x800xb2wb
zluG24LA3Vcp2wP3bHFgpakMpENANrexQb9hTK4pS7k96wJR6vanBX4KoMUUS2Bv
gD2hiLK3/uRiQx1cuZcMzkpOoWBDb3A8eKDBWTwfsYpw2culx8NscxeH7x3eGxDm
GDCzlUdREph1WTJD9EDd9iTpSYX9vtbor7Le6FjJ9f+Jj7dPmwTwsGQV4m/kEVnW
YThUDbW2S17ZUmyeg/HqwrUYj9mxjR78bkLrJLc5h+w2+ijBqWH+Ps4U6oG1
-----END CERTIFICATE-----
Generated at Wed Dec 6 15:45:01 2023 by rpki-client on console-fra.rpki-client.org