Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/zExMHCDabz-oDMopyc-HhWsCeg0.roa
File: zExMHCDabz-oDMopyc-HhWsCeg0.roa (raw, json)
Hash identifier: KvHkYZEBgG2kw89z+ZLtS63VMXuTvlLnEAMwFe2K9hw=
Subject key identifier: CC:4C:4C:1C:20:DA:6F:3F:A8:0C:CA:29:C9:CF:87:85:6B:02:7A:0D
Certificate issuer: /CN=954b071a03db5d233d05ab0394548007767f83e7
Certificate serial: 018BD1D4825C42CEB920646E7BDAA7F6660C
Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/zExMHCDabz-oDMopyc-HhWsCeg0.roa
Signing time: Wed 15 Nov 2023 07:14:06 +0000
ROA not before: Wed 15 Nov 2023 07:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47204
IP address blocks: 194.88.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:d4:82:5c:42:ce:b9:20:64:6e:7b:da:a7:f6:66:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7
Validity
Not Before: Nov 15 07:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc4c4c1c20da6f3fa80cca29c9cf87856b027a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:cb:d7:63:18:1a:d2:b0:52:b2:42:05:60:
43:06:20:33:55:1f:3a:fa:13:56:e3:f8:ee:63:87:
23:ff:73:13:c7:5f:8a:ac:b6:0a:d3:6b:3e:fa:44:
af:20:b1:e1:19:61:32:bc:b3:91:cb:7a:ee:71:84:
fd:17:28:04:48:b1:57:1e:cb:27:97:10:ce:f6:88:
4a:d4:e1:cf:09:55:2e:bd:4b:83:91:5e:f7:74:17:
41:72:75:c8:eb:6c:b1:84:34:7a:31:c0:0a:aa:40:
d6:18:90:90:8d:1d:bb:da:4d:91:8a:8a:b9:f2:b3:
11:8a:a4:41:1e:fb:dc:f3:90:63:a0:f1:58:7f:17:
36:ae:5d:16:de:23:34:da:bd:d8:0e:e4:98:ab:ce:
80:c4:db:98:b3:9e:47:f2:27:8a:39:cd:68:ad:32:
d4:49:fe:7e:e0:41:9a:78:4c:e4:f4:a9:b7:87:d0:
6f:7f:9a:a2:ef:6e:d1:1d:cd:50:57:6f:0a:db:f1:
00:bc:b6:a6:3b:5d:63:15:b3:41:80:c4:bd:2f:81:
69:51:8e:1c:bf:60:6c:9b:22:1a:ad:ae:b6:fd:9d:
0a:58:cf:1c:7c:b9:6c:c0:84:f4:a0:2b:87:2a:dd:
ce:b3:92:51:d2:51:00:dc:55:a2:9b:08:b3:8e:97:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4C:4C:1C:20:DA:6F:3F:A8:0C:CA:29:C9:CF:87:85:6B:02:7A:0D
X509v3 Authority Key Identifier:
keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/zExMHCDabz-oDMopyc-HhWsCeg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.199.0/24
Signature Algorithm: sha256WithRSAEncryption
10:96:05:82:5c:19:25:a6:91:12:7b:33:70:54:0b:8e:8d:8d:
56:70:05:ca:bc:bf:77:9e:37:55:00:38:a2:fd:ba:83:54:37:
80:db:e7:94:01:33:f0:ef:3f:9a:e5:06:74:91:d3:5b:b6:fa:
c7:92:72:1e:4f:a4:f9:5b:a3:6d:cf:50:a2:46:c3:76:b7:e3:
b6:ee:a0:d1:9f:83:b9:07:21:1b:87:95:58:8c:ba:d7:2a:89:
ae:eb:9d:00:70:bd:8e:fb:d7:93:b2:13:d0:a8:66:25:f8:19:
1a:4a:69:21:86:8a:13:f6:f6:0f:15:8d:24:b9:d4:d7:1e:96:
4d:5d:8b:41:a1:a0:ee:fc:13:10:f9:69:d4:ce:da:95:96:52:
49:49:21:6d:93:ed:32:ce:f0:ea:c7:b5:30:31:cf:3a:ff:a2:
b1:47:f9:c6:86:a3:5f:6c:fa:9d:8a:13:39:31:d5:b8:26:62:
02:e2:c8:0b:6c:06:c6:40:85:ab:95:cd:f7:cf:b2:8d:fd:f6:
d2:88:4c:e2:95:48:a8:45:c3:91:79:84:5c:e3:e6:d6:dc:e9:
92:ca:4f:9a:94:6d:bc:c2:14:af:b4:d3:15:ae:40:d2:bb:34:
48:a7:87:77:da:d8:b5:e2:48:93:1f:42:28:4a:52:8b:5b:32:
7b:7f:aa:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvR1IJcQs65IGRue9qn9mYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGIwNzFhMDNkYjVkMjMzZDA1YWIwMzk0NTQ4MDA3NzY3
ZjgzZTcwHhcNMjMxMTE1MDcxNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzRjNGMxYzIwZGE2ZjNmYTgwY2NhMjljOWNmODc4NTZiMDI3YTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1HL12MYGtKwUrJCBWBDBiAzVR86
+hNW4/juY4cj/3MTx1+KrLYK02s++kSvILHhGWEyvLORy3rucYT9FygESLFXHssn
lxDO9ohK1OHPCVUuvUuDkV73dBdBcnXI62yxhDR6McAKqkDWGJCQjR272k2Rioq5
8rMRiqRBHvvc85BjoPFYfxc2rl0W3iM02r3YDuSYq86AxNuYs55H8ieKOc1orTLU
Sf5+4EGaeEzk9Km3h9Bvf5qi727RHc1QV28K2/EAvLamO11jFbNBgMS9L4FpUY4c
v2BsmyIara62/Z0KWM8cfLlswIT0oCuHKt3Os5JR0lEA3FWimwizjpeUzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMxMTBwg2m8/qAzKKcnPh4VrAnoNMB8GA1UdIwQY
MBaAFJVLBxoD210jPQWrA5RUgAd2f4PnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1Njkt
MjY2YWMxMDRmN2I0LzEvekV4TUhDRGFiei1vRE1vcHljLUhoV3NDZWcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1NjktMjY2YWMxMDRmN2I0
LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwljHMA0G
CSqGSIb3DQEBCwUAA4IBAQAQlgWCXBklppESezNwVAuOjY1WcAXKvL93njdVADii
/bqDVDeA2+eUATPw7z+a5QZ0kdNbtvrHknIeT6T5W6Ntz1CiRsN2t+O27qDRn4O5
ByEbh5VYjLrXKomu650AcL2O+9eTshPQqGYl+BkaSmkhhooT9vYPFY0kudTXHpZN
XYtBoaDu/BMQ+WnUztqVllJJSSFtk+0yzvDqx7UwMc86/6KxR/nGhqNfbPqdihM5
MdW4JmIC4sgLbAbGQIWrlc33z7KN/fbSiEzilUioRcOReYRc4+bW3OmSyk+alG28
whSvtNMVrkDSuzRIp4d32ti14kiTH0IoSlKLWzJ7f6ot
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:05 2024 by rpki-client on console-fra.rpki-client.org