Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ZWjlUutjJHbUZjFrbJjbh_HDreg.roa
File: ZWjlUutjJHbUZjFrbJjbh_HDreg.roa (raw, json)
Hash identifier: AzdVUcb2Oth/PEApDH2O2ek/Dta8Q1reo22L3Nkge2w=
Subject key identifier: 65:68:E5:52:EB:63:24:76:D4:66:31:6B:6C:98:DB:87:F1:C3:AD:E8
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E73D35F6CB925FF00FCC44CC25A3B
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ZWjlUutjJHbUZjFrbJjbh_HDreg.roa
Signing time: Mon 02 Jan 2023 08:34:47 +0000
ROA not before: Mon 02 Jan 2023 08:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19551
IP address blocks: 213.253.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:73:d3:5f:6c:b9:25:ff:00:fc:c4:4c:c2:5a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6568e552eb632476d466316b6c98db87f1c3ade8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:65:de:f3:07:4d:39:b0:16:c2:7f:48:65:
6c:2e:4d:1e:ef:c1:65:6a:df:65:49:37:82:3c:b1:
c5:df:67:d4:bb:e3:2f:bd:5b:f7:d7:d4:2f:79:92:
61:e7:1e:c4:f4:6b:b6:97:b3:bc:cd:53:32:01:3b:
1b:ce:5f:93:b6:bc:91:bb:9f:3a:7b:d7:36:b1:55:
34:0b:df:99:9c:b8:ce:bc:f8:eb:f4:e6:fb:1c:d7:
7e:f7:d9:2f:4c:37:a2:fb:94:04:d2:09:20:29:ee:
b4:65:74:8f:04:c3:ef:ab:f5:2e:15:85:63:c7:95:
e7:4e:90:8a:62:f1:9e:65:d9:7a:f4:a3:72:1c:3e:
d5:84:cf:45:68:ea:e2:57:07:fd:fa:de:4f:51:9f:
a9:fa:25:53:df:51:54:eb:80:cc:28:c0:1f:27:2e:
7c:a0:51:65:ed:b7:97:00:dd:6d:10:1d:8e:27:14:
21:07:5a:ea:10:9c:3e:71:e0:0d:ab:6e:41:5a:a9:
0d:f6:03:4e:48:f5:aa:80:ec:15:d2:dc:64:5a:04:
38:7b:47:44:ba:6c:1d:88:a9:55:6a:ee:43:68:de:
4a:d3:fe:8d:a0:59:ae:7f:5c:db:c3:74:d6:f8:ab:
5c:e3:fc:23:00:cc:3d:22:90:0d:3a:be:71:eb:cc:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:68:E5:52:EB:63:24:76:D4:66:31:6B:6C:98:DB:87:F1:C3:AD:E8
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ZWjlUutjJHbUZjFrbJjbh_HDreg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:13:73:a0:8c:83:b3:87:6b:a3:ba:2d:f5:2a:18:3c:48:13:
09:16:b6:a0:25:df:ca:3a:57:f8:6f:50:ce:89:cb:db:a5:00:
df:95:79:a3:0a:76:6a:f0:a8:b9:a1:fc:0e:7f:0d:80:34:55:
b1:e2:c5:1f:e4:ef:18:9c:41:6a:0e:31:4e:0e:e4:f2:b3:ad:
c7:26:7d:d6:4f:01:f8:e1:3f:c0:cc:17:65:72:9d:af:f3:bd:
61:84:9c:38:ef:51:92:8f:2d:0d:7c:2f:88:55:d3:7a:14:ad:
0b:bd:f6:8b:9f:eb:b7:37:f1:08:9a:09:2c:66:c3:be:1c:03:
db:da:74:cc:40:09:99:36:3d:23:30:6b:6a:fb:5b:49:f8:f5:
52:9a:11:0c:88:3a:dc:6d:28:33:41:57:b0:f6:95:19:8d:6a:
ad:ac:1f:e7:67:79:23:8c:bb:f1:cb:9c:69:e6:ec:33:8c:43:
32:75:ba:09:16:49:51:e6:b5:7a:89:9a:fd:78:10:b4:6e:78:
b0:77:c9:aa:7c:ad:78:9e:01:44:0c:21:e8:4b:6d:11:cf:88:
1a:cd:75:17:8e:e3:78:d8:fc:12:14:50:07:b6:16:2b:6e:8d:
f6:1d:35:8d:4d:ba:d5:09:59:8d:a4:dd:95:34:ec:f3:88:d2:
3f:35:2b:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxnnPTX2y5Jf8A/MRMwlo7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5
ZDQyODgwHhcNMjMwMTAyMDgzNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTY4ZTU1MmViNjMyNDc2ZDQ2NjMxNmI2Yzk4ZGI4N2YxYzNhZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEJl3vMHTTmwFsJ/SGVsLk0e78Fl
at9lSTeCPLHF32fUu+MvvVv319QveZJh5x7E9Gu2l7O8zVMyATsbzl+TtryRu586
e9c2sVU0C9+ZnLjOvPjr9Ob7HNd+99kvTDei+5QE0gkgKe60ZXSPBMPvq/UuFYVj
x5XnTpCKYvGeZdl69KNyHD7VhM9FaOriVwf9+t5PUZ+p+iVT31FU64DMKMAfJy58
oFFl7beXAN1tEB2OJxQhB1rqEJw+ceANq25BWqkN9gNOSPWqgOwV0txkWgQ4e0dE
umwdiKlVau5DaN5K0/6NoFmuf1zbw3TW+Ktc4/wjAMw9IpANOr5x68xT3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGVo5VLrYyR21GYxa2yY24fxw63oMB8GA1UdIwQY
MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It
ZWNjNDliZGMyYWQ4LzEvWldqbFV1dGpKSGJVWmpGcmJKamJoX0hEcmVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4
LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1f3XMA0G
CSqGSIb3DQEBCwUAA4IBAQC1E3OgjIOzh2ujui31Khg8SBMJFragJd/KOlf4b1DO
icvbpQDflXmjCnZq8Ki5ofwOfw2ANFWx4sUf5O8YnEFqDjFODuTys63HJn3WTwH4
4T/AzBdlcp2v871hhJw471GSjy0NfC+IVdN6FK0LvfaLn+u3N/EImgksZsO+HAPb
2nTMQAmZNj0jMGtq+1tJ+PVSmhEMiDrcbSgzQVew9pUZjWqtrB/nZ3kjjLvxy5xp
5uwzjEMydboJFklR5rV6iZr9eBC0bniwd8mqfK14ngFEDCHoS20Rz4gazXUXjuN4
2PwSFFAHthYrbo32HTWNTbrVCVmNpN2VNOzziNI/NSuq
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:34 2024 by rpki-client on console-ams.rpki-client.org