Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/RZvZUdGOC9Xip-aStQumBr-IJKc.roa
File: RZvZUdGOC9Xip-aStQumBr-IJKc.roa (raw, json)
Hash identifier: KGWOa70GfMRVSegm3VrmlzbejssbN02tKlgCT9TMsN8=
Subject key identifier: 45:9B:D9:51:D1:8E:0B:D5:E2:A7:E6:92:B5:0B:A6:06:BF:88:24:A7
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 0188E708D7753335E9CCDB1C75AC3FA1F23E
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/RZvZUdGOC9Xip-aStQumBr-IJKc.roa
Signing time: Fri 23 Jun 2023 06:54:56 +0000
ROA not before: Fri 23 Jun 2023 06:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 152.89.228.0/22 maxlen: 23
141.98.68.0/22 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:08:d7:75:33:35:e9:cc:db:1c:75:ac:3f:a1:f2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Jun 23 06:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=459bd951d18e0bd5e2a7e692b50ba606bf8824a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:0b:a6:b9:76:c4:21:a2:53:f1:13:73:e6:
d7:68:ea:72:b8:81:88:35:5c:08:ac:f0:97:1d:30:
35:89:f2:2e:41:a9:1f:71:85:85:83:18:84:9b:1a:
9f:de:68:6c:09:3a:a5:09:a9:ce:9d:80:6e:29:7c:
68:11:54:f5:72:03:95:3b:b7:bb:94:d4:13:2c:18:
5d:5c:f5:a3:fd:17:4d:5f:01:b3:e4:0c:ca:21:d8:
ca:e5:37:37:9b:d7:36:ce:14:34:ff:dc:18:5b:db:
01:d2:13:a3:57:cb:06:71:8c:43:9c:7e:74:46:0e:
4d:f6:e0:ed:b1:27:14:51:6b:65:0c:56:26:7a:54:
62:a1:0c:4b:25:f9:de:c3:39:ff:6b:0e:46:a2:e7:
74:d7:49:d7:5a:7f:ba:bd:e4:36:ef:0e:40:a2:a9:
24:c2:54:e0:aa:cc:2b:dc:47:04:04:51:7c:2f:4d:
fc:78:bb:48:3b:ab:8d:bd:e1:9a:12:01:91:0c:1f:
b5:c0:30:c6:e0:45:95:b9:a8:a4:5a:56:6f:eb:d9:
1f:87:cb:2b:b4:0f:77:96:35:79:9e:cc:49:1f:b6:
00:cf:6f:73:6d:4e:c8:f4:f3:00:04:b2:07:1e:0f:
b4:d1:f5:bc:2d:55:59:9b:76:f4:7c:08:4b:87:1a:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9B:D9:51:D1:8E:0B:D5:E2:A7:E6:92:B5:0B:A6:06:BF:88:24:A7
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/RZvZUdGOC9Xip-aStQumBr-IJKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.68.0/22
152.89.228.0/22
Signature Algorithm: sha256WithRSAEncryption
23:f2:89:31:be:b9:84:3b:56:18:65:06:1e:84:2c:ee:bd:e5:
be:32:bf:96:de:2d:2d:34:ea:05:b2:68:44:83:2e:77:ef:33:
59:f3:31:9f:71:c1:69:21:a1:5b:58:3b:56:3d:4d:b6:f5:77:
f3:08:9d:6f:ac:fa:ad:8d:ff:bb:fb:20:d3:67:76:9e:e9:3e:
cb:36:20:d2:a7:95:3b:96:08:64:85:a5:86:63:4e:06:4f:5a:
67:e1:21:cd:3d:6b:6a:6c:ed:ba:ae:1a:b4:07:2a:ff:e0:20:
3c:a4:02:7f:b8:28:5a:64:90:34:15:dd:6a:e8:f0:ea:e7:6c:
dc:ea:e1:e1:12:4e:6b:64:49:6a:ee:17:83:13:ab:7a:7a:c1:
54:2c:ba:05:fe:d7:c8:74:54:13:e1:31:87:7b:fb:27:9d:34:
da:8b:6a:97:12:1f:eb:4b:82:a8:d9:6a:be:5a:df:45:0f:64:
69:26:6f:a0:2e:8e:02:cc:dc:ac:41:c0:dc:46:6d:1d:1f:07:
7c:8d:9a:cd:ec:bb:d0:03:80:92:96:9f:c5:83:18:7a:40:e8:
8d:6b:6a:b8:44:7f:c1:53:7e:9c:40:cb:58:f2:41:55:3e:6a:
f1:51:8c:6b:ac:ee:71:6a:e7:76:f7:6a:9e:fa:83:52:e6:62:
85:58:54:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjnCNd1MzXpzNscdaw/ofI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx
MGU5MWEwHhcNMjMwNjIzMDY1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTliZDk1MWQxOGUwYmQ1ZTJhN2U2OTJiNTBiYTYwNmJmODgyNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGwLprl2xCGiU/ETc+bXaOpyuIGI
NVwIrPCXHTA1ifIuQakfcYWFgxiEmxqf3mhsCTqlCanOnYBuKXxoEVT1cgOVO7e7
lNQTLBhdXPWj/RdNXwGz5AzKIdjK5Tc3m9c2zhQ0/9wYW9sB0hOjV8sGcYxDnH50
Rg5N9uDtsScUUWtlDFYmelRioQxLJfnewzn/aw5Goud010nXWn+6veQ27w5Aoqkk
wlTgqswr3EcEBFF8L038eLtIO6uNveGaEgGRDB+1wDDG4EWVuaikWlZv69kfh8sr
tA93ljV5nsxJH7YAz29zbU7I9PMABLIHHg+00fW8LVVZm3b0fAhLhxqDjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEWb2VHRjgvV4qfmkrULpga/iCSnMB8GA1UdIwQY
MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt
YTM0N2I1NmYzYjlhLzEvUlp2WlVkR09DOVhpcC1hU3RRdW1Cci1JSktjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh
LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCjWJEAwQC
mFnkMA0GCSqGSIb3DQEBCwUAA4IBAQAj8okxvrmEO1YYZQYehCzuveW+Mr+W3i0t
NOoFsmhEgy537zNZ8zGfccFpIaFbWDtWPU229XfzCJ1vrPqtjf+7+yDTZ3ae6T7L
NiDSp5U7lghkhaWGY04GT1pn4SHNPWtqbO26rhq0Byr/4CA8pAJ/uChaZJA0Fd1q
6PDq52zc6uHhEk5rZElq7heDE6t6esFULLoF/tfIdFQT4TGHe/snnTTai2qXEh/r
S4Ko2Wq+Wt9FD2RpJm+gLo4CzNysQcDcRm0dHwd8jZrN7LvQA4CSlp/Fgxh6QOiN
a2q4RH/BU36cQMtY8kFVPmrxUYxrrO5xaud292qe+oNS5mKFWFSk
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:07 2023 by rpki-client on console-ams.rpki-client.org