Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/zsNtwXMNIvJPLBiPo3a6wtvXtsc.roa
File: zsNtwXMNIvJPLBiPo3a6wtvXtsc.roa (raw, json)
Hash identifier: xEcQGaT6nccwZJ0ao0XOKOIGK527knovPITHrAkQRyc=
Subject key identifier: CE:C3:6D:C1:73:0D:22:F2:4F:2C:18:8F:A3:76:BA:C2:DB:D7:B6:C7
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 018570D5183D134A30767824F553802DBF16
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/zsNtwXMNIvJPLBiPo3a6wtvXtsc.roa
Signing time: Mon 02 Jan 2023 04:54:51 +0000
ROA not before: Mon 02 Jan 2023 04:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 5.226.179.0/24 maxlen: 24
5.226.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:18:3d:13:4a:30:76:78:24:f5:53:80:2d:bf:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 2 04:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cec36dc1730d22f24f2c188fa376bac2dbd7b6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:82:fb:35:8f:ff:0a:43:d4:bd:a1:ca:4d:
c7:c7:72:c1:58:0a:41:01:3e:1f:25:35:c2:55:76:
00:63:d9:42:be:6c:bb:d3:81:a7:81:24:fe:c1:bc:
4f:7d:2a:f6:72:33:1d:ad:c6:34:2d:53:10:f9:58:
38:a0:54:16:51:45:48:29:ac:31:53:75:53:25:8c:
49:19:36:e2:39:83:be:d7:ec:ea:a0:00:f3:dd:97:
89:c3:7f:3d:97:fc:63:57:45:b1:87:25:bd:10:99:
be:0f:d6:e8:04:e1:3a:03:04:5b:cf:ed:63:d1:2e:
ae:1b:48:ed:23:4c:dd:9a:12:be:6f:e5:06:4d:d9:
85:dd:46:df:24:8a:6e:90:9b:ea:30:13:e1:7a:33:
9d:ee:94:b0:c4:22:a2:fb:3c:8b:2d:7d:b7:0b:73:
4f:7a:6b:c1:7a:91:7b:1d:ef:19:63:f8:da:18:82:
8b:a4:34:bb:13:9f:40:98:4e:36:53:b2:10:7c:47:
27:e1:a4:fe:27:6f:8f:3a:9f:c0:61:9d:ef:6c:ae:
72:80:3e:d0:f7:a0:7c:5a:51:5c:8e:d7:90:1b:3b:
21:f1:59:66:12:aa:34:e1:52:b6:0d:09:0c:64:50:
b2:75:47:61:2f:a1:8d:df:23:89:38:72:d9:cd:fe:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C3:6D:C1:73:0D:22:F2:4F:2C:18:8F:A3:76:BA:C2:DB:D7:B6:C7
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/zsNtwXMNIvJPLBiPo3a6wtvXtsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.179.0/24
5.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
08:09:53:64:b5:59:d6:22:1a:78:79:08:48:80:8b:32:10:3c:
ae:a1:98:2b:73:c7:ab:50:21:b0:37:5f:73:f0:78:3c:3f:28:
13:48:4f:c2:b9:3a:7a:64:f8:11:a0:79:ef:26:82:2a:7d:e4:
41:a7:a0:12:fd:14:36:0b:48:0a:bc:37:19:a6:6d:1a:c0:dc:
73:dc:01:7e:5e:cb:9f:23:bc:56:51:4b:a3:3d:08:85:52:1d:
89:c7:d9:aa:ed:00:eb:8e:a3:6e:45:ce:3b:c1:e1:4c:6c:f2:
93:e5:dd:54:9b:c2:55:6e:de:c2:4a:8f:12:0d:d8:80:32:9c:
1f:e6:e2:78:3d:13:fe:1b:f0:83:43:bb:df:8f:51:25:50:e2:
88:29:8f:09:2c:a7:a7:01:16:0d:9b:17:4c:d3:39:94:6b:89:
91:db:9d:f7:c3:ee:44:d9:61:bc:b6:d6:1f:7a:a2:6f:be:3d:
a4:90:d9:38:17:ce:30:11:bb:e6:97:1f:b4:56:79:7d:db:9a:
b0:82:fb:46:1c:20:cc:aa:8d:e6:52:8f:b3:f3:43:93:ac:38:
62:c2:b9:69:7b:b1:6d:68:43:cb:84:4b:7e:45:64:8e:14:39:
b1:73:22:9d:26:8e:49:27:d8:68:77:6c:50:09:8c:72:e7:01:
3a:1e:8b:e0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw1Rg9E0owdngk9VOALb8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw
ZGVlMGYwHhcNMjMwMTAyMDQ1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWMzNmRjMTczMGQyMmYyNGYyYzE4OGZhMzc2YmFjMmRiZDdiNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB+C+zWP/wpD1L2hyk3Hx3LBWApB
AT4fJTXCVXYAY9lCvmy704GngST+wbxPfSr2cjMdrcY0LVMQ+Vg4oFQWUUVIKawx
U3VTJYxJGTbiOYO+1+zqoADz3ZeJw389l/xjV0WxhyW9EJm+D9boBOE6AwRbz+1j
0S6uG0jtI0zdmhK+b+UGTdmF3UbfJIpukJvqMBPhejOd7pSwxCKi+zyLLX23C3NP
emvBepF7He8ZY/jaGIKLpDS7E59AmE42U7IQfEcn4aT+J2+POp/AYZ3vbK5ygD7Q
96B8WlFcjteQGzsh8VlmEqo04VK2DQkMZFCydUdhL6GN3yOJOHLZzf5RqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM7DbcFzDSLyTywYj6N2usLb17bHMB8GA1UdIwQY
MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt
NmFlYTkwNTdjODAwLzEvenNOdHdYTU5JdkpQTEJpUG8zYTZ3dHZYdHNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw
LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABeKzAwQA
BeK1MA0GCSqGSIb3DQEBCwUAA4IBAQAICVNktVnWIhp4eQhIgIsyEDyuoZgrc8er
UCGwN19z8Hg8PygTSE/CuTp6ZPgRoHnvJoIqfeRBp6AS/RQ2C0gKvDcZpm0awNxz
3AF+XsufI7xWUUujPQiFUh2Jx9mq7QDrjqNuRc47weFMbPKT5d1Um8JVbt7CSo8S
DdiAMpwf5uJ4PRP+G/CDQ7vfj1ElUOKIKY8JLKenARYNmxdM0zmUa4mR2533w+5E
2WG8ttYfeqJvvj2kkNk4F84wEbvmlx+0Vnl925qwgvtGHCDMqo3mUo+z80OTrDhi
wrlpe7FtaEPLhEt+RWSOFDmxcyKdJo5JJ9hod2xQCYxy5wE6Hovg
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:01 2024 by rpki-client on console-fra.rpki-client.org