Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Zscxu9LoE4dtC5agQOhwU8BIM5Y.roa
File: Zscxu9LoE4dtC5agQOhwU8BIM5Y.roa (raw, json)
Hash identifier: Cvv4f87T2fm6e3Tm4Ti9uOOCioQoZTvbErzg7JQh4qE=
Subject key identifier: 66:C7:31:BB:D2:E8:13:87:6D:0B:96:A0:40:E8:70:53:C0:48:33:96
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0190C1A1A4AB7EEE57FE36AE50FFE86953E6
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Zscxu9LoE4dtC5agQOhwU8BIM5Y.roa
Signing time: Wed 17 Jul 2024 16:58:34 +0000
ROA not before: Wed 17 Jul 2024 16:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 94.154.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 05:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:a1:a4:ab:7e:ee:57:fe:36:ae:50:ff:e8:69:53:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jul 17 16:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c731bbd2e813876d0b96a040e87053c0483396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:47:cf:b9:07:5e:d0:b9:46:22:d8:8b:23:
75:23:ce:ad:71:bb:96:64:52:de:48:b2:10:04:fa:
d1:ee:55:c1:77:df:d9:6b:c2:47:1e:17:b7:ce:2b:
d7:5b:71:f6:e1:28:45:52:04:cb:52:01:73:82:72:
19:b8:dd:ee:fc:b1:61:af:3e:da:18:35:1f:20:f5:
74:87:5c:10:a6:86:01:35:4c:eb:7d:12:82:c7:98:
1d:24:c9:31:50:b1:41:fc:7c:79:1b:81:b1:35:22:
c8:ea:3f:4f:0c:ec:9c:2a:7d:f3:3e:5f:cc:56:f0:
94:6e:c0:73:c3:1c:5b:eb:45:c0:8f:50:4a:0f:32:
f8:df:3b:fb:a8:9f:bb:cb:9c:6c:84:66:2b:6c:91:
d7:d2:5e:76:0b:4b:e4:e4:36:4b:ee:07:48:87:23:
a1:c5:f4:d7:28:41:9e:81:b1:8c:6f:f1:98:57:79:
e5:5b:9a:fa:68:19:73:ab:85:09:98:ab:9e:a6:77:
92:af:27:f8:ed:d1:68:62:84:fa:45:e6:bf:d5:51:
6f:6d:9c:d0:d5:6f:e1:6c:1d:02:fc:a6:e0:7f:d3:
04:30:66:cf:d0:21:63:55:e4:90:20:ff:53:d2:de:
bb:2c:70:c4:29:2e:30:2a:4a:db:df:08:2d:c8:bd:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C7:31:BB:D2:E8:13:87:6D:0B:96:A0:40:E8:70:53:C0:48:33:96
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Zscxu9LoE4dtC5agQOhwU8BIM5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ba:44:ed:70:36:43:d2:75:8c:bc:99:9c:32:83:6f:6b:30:
ca:1e:b4:a5:a6:5b:42:34:98:4b:4f:a0:51:19:f4:f3:68:61:
d5:25:3c:df:f6:2d:9b:59:df:4f:fe:b9:ac:ee:df:17:67:73:
da:36:b0:b8:d5:d2:f6:3d:e0:4e:c4:97:54:02:5d:2c:c0:d6:
78:6f:16:15:41:21:78:72:c3:66:cd:8a:27:36:4f:09:97:fe:
c6:58:a4:bd:7a:e0:74:3e:0f:30:dd:42:90:0d:b5:80:68:63:
e4:c5:d5:ef:12:9d:4f:d9:af:c9:61:b9:1d:0c:c9:6f:88:c3:
4f:cf:ec:6f:7f:97:03:e2:a6:6e:ee:fc:63:15:30:dd:99:9b:
63:92:51:91:e2:3b:23:2f:26:47:37:36:e9:3f:bf:b8:f1:74:
7d:af:0d:0e:db:8d:dc:77:59:57:f4:90:45:0a:d4:d6:06:b1:
a4:bd:f7:1a:6c:7f:ea:b9:67:ac:0d:c2:47:98:a2:fb:5a:b3:
4d:7c:33:5b:2f:d5:ed:cf:76:81:f3:99:9c:b3:90:fd:25:3e:
34:85:af:e5:9a:0c:d4:28:7e:fa:11:fe:71:10:8e:56:3d:a9:
df:9e:91:a2:85:10:ad:a0:84:a2:a3:0c:16:e1:eb:1a:21:08:
d5:5e:4e:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDBoaSrfu5X/jauUP/oaVPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjQwNzE3MTY1ODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmM3MzFiYmQyZTgxMzg3NmQwYjk2YTA0MGU4NzA1M2MwNDgzMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1RHz7kHXtC5RiLYiyN1I86tcbuW
ZFLeSLIQBPrR7lXBd9/Za8JHHhe3zivXW3H24ShFUgTLUgFzgnIZuN3u/LFhrz7a
GDUfIPV0h1wQpoYBNUzrfRKCx5gdJMkxULFB/Hx5G4GxNSLI6j9PDOycKn3zPl/M
VvCUbsBzwxxb60XAj1BKDzL43zv7qJ+7y5xshGYrbJHX0l52C0vk5DZL7gdIhyOh
xfTXKEGegbGMb/GYV3nlW5r6aBlzq4UJmKuepneSryf47dFoYoT6Rea/1VFvbZzQ
1W/hbB0C/Kbgf9MEMGbP0CFjVeSQIP9T0t67LHDEKS4wKkrb3wgtyL2BoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGbHMbvS6BOHbQuWoEDocFPASDOWMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvWnNjeHU5TG9FNGR0QzVhZ1FPaHdVOEJJTTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpojMA0G
CSqGSIb3DQEBCwUAA4IBAQBNukTtcDZD0nWMvJmcMoNvazDKHrSlpltCNJhLT6BR
GfTzaGHVJTzf9i2bWd9P/rms7t8XZ3PaNrC41dL2PeBOxJdUAl0swNZ4bxYVQSF4
csNmzYonNk8Jl/7GWKS9euB0Pg8w3UKQDbWAaGPkxdXvEp1P2a/JYbkdDMlviMNP
z+xvf5cD4qZu7vxjFTDdmZtjklGR4jsjLyZHNzbpP7+48XR9rw0O243cd1lX9JBF
CtTWBrGkvfcabH/quWesDcJHmKL7WrNNfDNbL9Xtz3aB85mcs5D9JT40ha/lmgzU
KH76Ef5xEI5WPanfnpGihRCtoISiowwW4esaIQjVXk5l
-----END CERTIFICATE-----
Generated at Tue Aug 13 06:55:10 2024 by rpki-client on console-ams.rpki-client.org