Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/zUyYDlm2cyZcxn6zJcw8oxB6oRE.roa
File: zUyYDlm2cyZcxn6zJcw8oxB6oRE.roa (raw, json)
Hash identifier: CmbPjhT9gc1BYVIsMrSt+epzwL1A8ypr78m84QvDA5k=
Subject key identifier: CD:4C:98:0E:59:B6:73:26:5C:C6:7E:B3:25:CC:3C:A3:10:7A:A1:11
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 018573160DA8D998160F84295F6E10EEFEA3
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/zUyYDlm2cyZcxn6zJcw8oxB6oRE.roa
Signing time: Mon 02 Jan 2023 15:25:03 +0000
ROA not before: Mon 02 Jan 2023 15:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8551
IP address blocks: 128.139.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:16:0d:a8:d9:98:16:0f:84:29:5f:6e:10:ee:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Jan 2 15:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd4c980e59b673265cc67eb325cc3ca3107aa111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:8c:61:9e:f6:7c:29:92:cc:04:ca:04:02:
12:dc:58:31:c7:ef:ca:63:f1:88:7c:28:53:10:05:
e6:99:46:99:f7:cd:bc:df:64:fb:04:e4:c4:39:da:
b1:7d:76:92:9e:0c:35:d2:d7:a0:63:c1:ee:6f:ea:
73:f5:45:15:fc:66:ce:80:65:41:da:fd:2d:94:78:
fe:be:17:b5:d5:73:4f:79:c7:ff:3d:ff:b8:5f:de:
c4:d9:99:c3:42:30:65:50:8a:41:3e:28:10:32:e4:
e7:dd:61:6a:1f:54:ea:4a:aa:bc:de:71:7d:b6:bf:
c9:b6:ea:23:e1:ad:25:db:a7:30:46:be:74:58:23:
54:3e:74:4b:e5:45:68:1e:d8:b9:ad:36:c9:31:36:
96:48:9b:d9:28:55:43:e4:34:da:9e:26:86:c5:71:
d5:96:ca:27:cc:4d:7a:55:ca:f9:26:b1:a7:68:c4:
8d:53:f3:40:b8:96:7b:e6:91:7a:e3:cb:59:e4:f4:
65:d9:a8:70:b9:25:1f:13:f8:6e:f2:6e:00:0d:03:
17:cd:0e:87:16:c4:de:62:20:9e:3e:11:66:4b:69:
e3:77:bf:52:df:30:b2:40:6e:3f:69:4e:52:ec:28:
ec:d1:27:e0:0e:5a:b4:c1:bc:46:81:f9:9f:40:72:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4C:98:0E:59:B6:73:26:5C:C6:7E:B3:25:CC:3C:A3:10:7A:A1:11
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/zUyYDlm2cyZcxn6zJcw8oxB6oRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.194.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:bd:36:97:d2:5f:cb:a9:af:df:a4:ac:1c:0c:a7:1f:4f:66:
8f:0b:8c:de:77:b5:4f:2f:7c:66:d9:33:38:99:e9:44:42:a4:
db:1f:97:96:f0:bf:8f:dd:e2:ef:33:47:03:c7:6c:12:60:83:
0f:52:e4:c9:b0:e7:cc:4b:0d:05:7d:fd:db:c2:ae:8d:44:fe:
e9:d1:76:98:5b:4d:4c:8a:80:07:6d:5e:47:2e:6b:70:11:e4:
a5:f4:2e:9c:80:4c:fa:e1:d1:0d:cf:2d:23:08:22:76:98:fa:
61:87:1c:5e:d6:60:07:b9:95:5e:e7:46:a4:74:28:09:ff:81:
d6:63:47:3d:5c:11:94:9a:0c:41:c8:48:c1:08:d0:a4:57:df:
94:fa:79:8c:33:5c:46:5e:19:93:60:fb:4a:78:7d:e7:28:03:
a4:77:e6:09:54:ad:76:7f:ac:a9:5c:2f:91:82:d2:a5:28:7b:
a7:e9:2b:0a:ce:21:60:55:e3:2b:c3:6d:2b:96:f4:9a:11:9e:
45:fd:37:35:15:3a:65:70:81:1c:82:d3:95:12:6d:42:eb:43:
f3:21:ef:19:0e:48:f2:7e:8a:c8:eb:d1:7f:7e:8e:5d:b4:e7:
8b:08:a4:1e:99:02:24:c1:07:4f:6b:09:96:8e:55:48:aa:3f:
1e:a6:c0:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzFg2o2ZgWD4QpX24Q7v6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz
OGJhMDYwHhcNMjMwMTAyMTUyNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDRjOTgwZTU5YjY3MzI2NWNjNjdlYjMyNWNjM2NhMzEwN2FhMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHqMYZ72fCmSzATKBAIS3Fgxx+/K
Y/GIfChTEAXmmUaZ982832T7BOTEOdqxfXaSngw10tegY8Hub+pz9UUV/GbOgGVB
2v0tlHj+vhe11XNPecf/Pf+4X97E2ZnDQjBlUIpBPigQMuTn3WFqH1TqSqq83nF9
tr/Jtuoj4a0l26cwRr50WCNUPnRL5UVoHti5rTbJMTaWSJvZKFVD5DTaniaGxXHV
lsonzE16Vcr5JrGnaMSNU/NAuJZ75pF648tZ5PRl2ahwuSUfE/hu8m4ADQMXzQ6H
FsTeYiCePhFmS2njd79S3zCyQG4/aU5S7Cjs0SfgDlq0wbxGgfmfQHKzYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1MmA5ZtnMmXMZ+syXMPKMQeqERMB8GA1UdIwQY
MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt
OWQwYzYyMDczNWYxLzEvelV5WURsbTJjeVpjeG42ekpjdzhveEI2b1JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx
LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgIvCMA0G
CSqGSIb3DQEBCwUAA4IBAQBbvTaX0l/Lqa/fpKwcDKcfT2aPC4zed7VPL3xm2TM4
melEQqTbH5eW8L+P3eLvM0cDx2wSYIMPUuTJsOfMSw0Fff3bwq6NRP7p0XaYW01M
ioAHbV5HLmtwEeSl9C6cgEz64dENzy0jCCJ2mPphhxxe1mAHuZVe50akdCgJ/4HW
Y0c9XBGUmgxByEjBCNCkV9+U+nmMM1xGXhmTYPtKeH3nKAOkd+YJVK12f6ypXC+R
gtKlKHun6SsKziFgVeMrw20rlvSaEZ5F/Tc1FTplcIEcgtOVEm1C60PzIe8ZDkjy
forI69F/fo5dtOeLCKQemQIkwQdPawmWjlVIqj8epsAw
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:29 2024 by rpki-client on console-fra.rpki-client.org