Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zAgCvxDqXWi-0wJ988BrxkBdkOo.roa
File: zAgCvxDqXWi-0wJ988BrxkBdkOo.roa (raw, json)
Hash identifier: ijrLm2Ndw9IdTR7LKvQnfY1/dkVlmq7LjuxgVKL/4A4=
Subject key identifier: CC:08:02:BF:10:EA:5D:68:BE:D3:02:7D:F3:C0:6B:C6:40:5D:90:EA
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A5B53364762EA03399BBD22ACA4FE
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zAgCvxDqXWi-0wJ988BrxkBdkOo.roa
Signing time: Sun 01 Jan 2023 08:54:44 +0000
ROA not before: Sun 01 Jan 2023 08:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60631
IP address blocks: 87.248.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:5b:53:36:47:62:ea:03:39:9b:bd:22:ac:a4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc0802bf10ea5d68bed3027df3c06bc6405d90ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:51:00:9b:a2:47:1d:1b:f6:43:58:2b:c5:32:
45:8c:d5:06:f3:06:63:7d:da:a1:4c:52:bc:20:9e:
b0:73:4f:53:23:39:b4:a4:52:29:4d:a4:89:f3:3e:
85:26:29:b7:59:4b:84:03:50:c9:51:a7:e5:1b:2e:
30:da:77:f4:d5:39:59:96:00:c5:a9:ec:4b:6b:e9:
ba:b1:57:b9:6b:e9:10:77:ad:9e:04:37:26:85:21:
0f:e1:b4:6f:cf:eb:fa:6f:87:aa:9c:45:a0:3a:a6:
03:58:a3:54:56:7f:e4:63:72:81:4f:f0:e5:f7:ba:
a1:43:55:de:6c:26:34:e0:07:e0:8c:4e:da:5f:e1:
b8:08:86:cf:78:d1:10:e5:30:14:a1:5d:9c:46:2d:
ae:d4:72:5d:d4:49:09:52:5d:76:b9:79:13:00:8b:
4e:52:7b:13:ec:68:da:00:61:94:c8:bd:98:56:4e:
42:e8:38:cb:e6:74:6f:18:21:13:81:5c:be:d6:3e:
ef:0e:00:bc:b8:b1:6d:9c:e0:aa:db:bb:6a:41:eb:
a8:52:ad:75:d5:01:a1:28:25:e8:f1:d2:1f:42:fc:
aa:e7:d8:d8:68:a5:9e:bd:83:07:7c:42:5e:c3:d1:
77:a0:23:93:a4:1c:68:cd:7a:57:d6:32:b1:e0:3b:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:08:02:BF:10:EA:5D:68:BE:D3:02:7D:F3:C0:6B:C6:40:5D:90:EA
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zAgCvxDqXWi-0wJ988BrxkBdkOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.135.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c1:3f:c5:27:f1:d0:21:55:dc:cf:85:5a:76:ed:42:a0:40:
a1:27:bd:af:bf:86:20:7e:2b:1f:cf:0d:94:8e:b4:9d:25:ad:
0c:99:e8:b7:29:77:b7:69:9a:39:25:46:40:83:9f:72:74:e4:
72:ff:66:a4:18:d4:e7:8f:96:69:a8:27:70:ca:8b:99:67:87:
3c:d7:63:b3:f5:31:13:18:93:ea:f8:b1:61:8f:b7:3c:f3:f7:
cf:f1:47:3a:f1:a9:5d:d7:40:72:dd:a5:23:16:16:7a:eb:9b:
ef:62:73:0b:83:77:00:f1:2e:e4:c0:68:7c:34:75:6c:1e:cd:
8f:f5:26:6d:76:a7:3d:fa:ca:2e:b4:de:b1:8b:61:5d:53:c2:
7e:8e:77:2e:11:9b:dd:43:51:a2:cf:67:2e:92:9a:2e:ec:a1:
af:88:db:2e:aa:ef:e1:46:b8:b9:f8:b4:d4:38:b2:2c:b1:56:
68:02:d4:c4:57:ce:fa:27:de:c3:a2:02:68:a2:fe:96:b9:34:
b8:10:bf:bc:cf:4c:ca:49:ab:84:d2:8f:58:84:60:32:94:6c:
51:9f:50:49:8f:e2:06:1b:58:08:9f:3f:23:59:3f:84:ad:49:
f2:ea:a6:31:86:a7:df:6c:1d:10:8a:32:71:a3:84:8a:28:9f:
e0:69:71:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsiltTNkdi6gM5m70irKT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwMTAxMDg1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzA4MDJiZjEwZWE1ZDY4YmVkMzAyN2RmM2MwNmJjNjQwNWQ5MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFEAm6JHHRv2Q1grxTJFjNUG8wZj
fdqhTFK8IJ6wc09TIzm0pFIpTaSJ8z6FJim3WUuEA1DJUaflGy4w2nf01TlZlgDF
qexLa+m6sVe5a+kQd62eBDcmhSEP4bRvz+v6b4eqnEWgOqYDWKNUVn/kY3KBT/Dl
97qhQ1XebCY04AfgjE7aX+G4CIbPeNEQ5TAUoV2cRi2u1HJd1EkJUl12uXkTAItO
UnsT7GjaAGGUyL2YVk5C6DjL5nRvGCETgVy+1j7vDgC8uLFtnOCq27tqQeuoUq11
1QGhKCXo8dIfQvyq59jYaKWevYMHfEJew9F3oCOTpBxozXpX1jKx4Dtw9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMwIAr8Q6l1ovtMCffPAa8ZAXZDqMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvekFnQ3Z4RHFYV2ktMHdKOTg4QnJ4a0Jka09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iHMA0G
CSqGSIb3DQEBCwUAA4IBAQBowT/FJ/HQIVXcz4Vadu1CoEChJ72vv4Ygfisfzw2U
jrSdJa0Mmei3KXe3aZo5JUZAg59ydORy/2akGNTnj5ZpqCdwyouZZ4c812Oz9TET
GJPq+LFhj7c88/fP8Uc68ald10By3aUjFhZ665vvYnMLg3cA8S7kwGh8NHVsHs2P
9SZtdqc9+soutN6xi2FdU8J+jncuEZvdQ1Giz2cukpou7KGviNsuqu/hRri5+LTU
OLIssVZoAtTEV876J97DogJoov6WuTS4EL+8z0zKSauE0o9YhGAylGxRn1BJj+IG
G1gInz8jWT+ErUny6qYxhqffbB0QijJxo4SKKJ/gaXGt
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:04 2024 by rpki-client on console-ams.rpki-client.org