Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZcuApVVoAM3TxaMmQXuK6wGAbKs.roa
File: ZcuApVVoAM3TxaMmQXuK6wGAbKs.roa (raw, json)
Hash identifier: SF89x/5lT4rOctI/jPtgqDySoJjStzYVi8OPSi3eZM8=
Subject key identifier: 65:CB:80:A5:55:68:00:CD:D3:C5:A3:26:41:7B:8A:EB:01:80:6C:AB
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0192AB339407EB1AA440E18087DF2ED99666
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZcuApVVoAM3TxaMmQXuK6wGAbKs.roa
Signing time: Sun 20 Oct 2024 18:32:17 +0000
ROA not before: Sun 20 Oct 2024 18:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.21.84.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 11:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ab:33:94:07:eb:1a:a4:40:e1:80:87:df:2e:d9:96:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 20 18:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65cb80a5556800cdd3c5a326417b8aeb01806cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:5b:ed:b8:14:70:69:ec:bf:fc:af:47:d0:
f6:f1:1e:3f:84:83:a3:17:92:35:a2:4a:7e:e6:82:
95:2c:b5:20:99:23:d6:0b:5c:c1:1f:5a:93:8b:dd:
c7:2e:d7:22:fb:d9:92:c6:19:51:3f:cc:5f:51:7d:
cb:c8:97:57:f7:fe:a5:75:e1:51:28:4c:33:31:19:
c5:8c:ba:1c:2c:4a:2a:95:df:8c:88:be:21:6e:06:
44:ac:b6:8f:36:8c:00:cb:a5:4a:00:53:c6:08:af:
9c:73:ab:e7:9a:d6:d4:04:74:61:77:f2:3d:0e:52:
24:e2:9d:63:6b:a7:cb:5b:8f:fd:d2:20:c4:e4:c9:
93:a2:e6:d8:48:23:cd:4e:73:12:f6:49:dd:a1:b5:
cd:05:40:a9:09:91:d4:36:64:80:b5:ff:76:45:37:
a8:0f:49:09:9c:31:6d:80:03:4b:9e:4c:b5:3d:92:
9a:10:3e:a2:01:8c:82:bc:04:f4:0e:78:17:e6:4d:
c8:1c:e3:ea:95:91:b4:89:20:62:7c:1e:aa:3a:9f:
75:34:55:44:5d:52:9a:3c:5d:28:f8:d0:34:1f:8e:
18:86:23:ad:ad:4a:a9:c8:b1:7e:12:51:ff:08:46:
47:0a:cd:11:c3:ed:91:79:c1:86:e2:07:b8:3e:d9:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CB:80:A5:55:68:00:CD:D3:C5:A3:26:41:7B:8A:EB:01:80:6C:AB
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZcuApVVoAM3TxaMmQXuK6wGAbKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:de:de:b2:0e:e3:39:16:39:90:67:bc:40:95:af:13:0b:a5:
3e:ae:00:9d:a2:ba:2e:b8:ac:c2:4e:75:63:d9:2e:f7:85:44:
7a:79:52:0b:1a:2d:dd:eb:fe:48:13:c6:1c:c4:c8:00:cc:06:
4c:84:46:f8:46:53:d4:2d:57:1f:fa:1d:e6:20:9c:84:a8:bb:
6f:6b:a1:70:4d:6f:66:53:75:83:c9:9f:64:1a:37:68:e7:46:
f7:10:64:4a:c6:38:4e:f5:e7:63:5a:be:97:24:80:33:1d:48:
e7:d4:c6:7c:48:02:96:5b:12:5d:f3:e5:8e:ff:19:1b:06:8b:
5b:10:c1:a3:98:3b:3c:60:15:c8:0f:17:11:be:c4:65:1b:51:
19:a8:62:ed:dd:bb:70:0f:c0:75:b4:66:fb:96:a8:d8:c1:f1:
36:4b:c0:f6:28:c7:b0:07:df:0b:a9:87:af:31:a7:c7:17:92:
fd:e4:b7:d6:2a:b7:c3:3f:0c:6f:44:b2:cf:e2:7b:47:e7:84:
6f:ab:3e:5c:bd:88:f4:8b:6f:01:8b:f2:72:38:32:f0:a2:cd:
9e:45:69:c0:b1:7f:17:35:6a:0c:94:58:6a:c0:b5:3e:e5:b1:
3b:58:f9:eb:d1:b1:e1:b7:11:cc:12:f9:64:d3:a2:44:b1:e4:
22:69:e7:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZKrM5QH6xqkQOGAh98u2ZZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjQxMDIwMTgzMjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWNiODBhNTU1NjgwMGNkZDNjNWEzMjY0MTdiOGFlYjAxODA2Y2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteJb7bgUcGnsv/yvR9D28R4/hIOj
F5I1okp+5oKVLLUgmSPWC1zBH1qTi93HLtci+9mSxhlRP8xfUX3LyJdX9/6ldeFR
KEwzMRnFjLocLEoqld+MiL4hbgZErLaPNowAy6VKAFPGCK+cc6vnmtbUBHRhd/I9
DlIk4p1ja6fLW4/90iDE5MmToubYSCPNTnMS9kndobXNBUCpCZHUNmSAtf92RTeo
D0kJnDFtgANLnky1PZKaED6iAYyCvAT0DngX5k3IHOPqlZG0iSBifB6qOp91NFVE
XVKaPF0o+NA0H44YhiOtrUqpyLF+ElH/CEZHCs0Rw+2RecGG4ge4PtmX3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGXLgKVVaADN08WjJkF7iusBgGyrMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvWmN1QXBWVm9BTTNUeGFNbVFYdUs2d0dBYktzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRVUAwQA
bXouMA0GCSqGSIb3DQEBCwUAA4IBAQBN3t6yDuM5FjmQZ7xAla8TC6U+rgCdorou
uKzCTnVj2S73hUR6eVILGi3d6/5IE8YcxMgAzAZMhEb4RlPULVcf+h3mIJyEqLtv
a6FwTW9mU3WDyZ9kGjdo50b3EGRKxjhO9edjWr6XJIAzHUjn1MZ8SAKWWxJd8+WO
/xkbBotbEMGjmDs8YBXIDxcRvsRlG1EZqGLt3btwD8B1tGb7lqjYwfE2S8D2KMew
B98LqYevMafHF5L95LfWKrfDPwxvRLLP4ntH54Rvqz5cvYj0i28Bi/JyODLwos2e
RWnAsX8XNWoMlFhqwLU+5bE7WPnr0bHhtxHMEvlk06JEseQiaedj
-----END CERTIFICATE-----
Generated at Fri Oct 25 15:00:20 2024 by rpki-client on console-ams.rpki-client.org