Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zx-Qsuudz1ZsRhU7CskjxmchURM.roa
File: zx-Qsuudz1ZsRhU7CskjxmchURM.roa (raw, json)
Hash identifier: XfKoKI8DtCvpS4dpf6a/eAXt/8igOsbMqxtL6dFb4JA=
Subject key identifier: CF:1F:90:B2:EB:9D:CF:56:6C:46:15:3B:0A:C9:23:C6:67:21:51:13
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0187FFFAA6D1E00EE591CA513216DD92B1EC
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zx-Qsuudz1ZsRhU7CskjxmchURM.roa
Signing time: Tue 09 May 2023 10:07:09 +0000
ROA not before: Tue 09 May 2023 10:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.18.0/23 maxlen: 23
45.133.106.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:fa:a6:d1:e0:0e:e5:91:ca:51:32:16:dd:92:b1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: May 9 10:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf1f90b2eb9dcf566c46153b0ac923c667215113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e9:cc:7e:9d:2b:d5:69:0e:7f:5b:9a:fc:41:
40:b1:f3:ba:fa:78:6b:05:40:e5:12:77:2f:4a:53:
e0:fe:11:46:3c:7b:87:90:65:7f:07:2c:f7:33:54:
cb:9a:9f:64:3a:8c:1e:4b:06:51:9b:64:a9:a3:0c:
95:66:76:53:65:1c:19:63:df:c6:c9:d4:cc:c0:33:
33:81:03:96:59:3a:f6:15:db:cc:70:c7:b9:f7:8c:
50:2d:40:ef:5c:68:de:25:2a:32:51:12:a6:54:43:
3d:0e:53:13:bd:d8:8a:2f:30:71:81:00:06:42:8b:
58:d6:3b:65:71:f4:29:be:a4:f7:9f:c6:41:65:ef:
34:6a:e5:c1:48:3f:89:9c:7b:34:88:59:73:49:64:
0f:f9:99:b6:ba:a8:d7:9d:a9:48:91:a2:83:ee:6e:
1b:ee:fb:78:2d:47:1f:98:8b:27:85:85:73:f4:74:
42:0f:86:6a:67:8c:03:1d:00:c3:c0:76:b7:6d:7e:
c2:42:58:a0:16:31:3f:aa:f0:87:d2:ab:8d:1b:f3:
98:20:25:76:c6:f5:d5:a1:ce:2d:8e:d0:a5:4c:b6:
fd:df:24:36:ea:fc:a4:9a:79:c5:a0:49:b7:93:af:
36:e2:2c:9f:72:54:86:ba:90:18:d0:a9:80:6d:be:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1F:90:B2:EB:9D:CF:56:6C:46:15:3B:0A:C9:23:C6:67:21:51:13
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zx-Qsuudz1ZsRhU7CskjxmchURM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.106.0/23
217.113.18.0/23
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:4b:7d:f4:35:c2:6e:a2:77:07:5a:fe:19:9a:bf:9d:19:62:
31:5b:59:58:a5:d8:82:3d:fe:a9:6e:22:c2:02:36:98:8a:87:
09:c1:e0:c7:c2:28:51:ab:aa:1e:f9:ed:e9:a6:cf:f8:d6:57:
b6:85:f6:2f:17:63:ae:f6:4a:24:0f:ae:b0:9d:61:3e:0d:e0:
ff:02:62:fb:88:0a:56:b0:f1:7b:be:20:ad:2c:42:b9:29:d1:
94:c7:5c:07:d1:d9:7d:27:fb:9f:1e:75:4b:f4:70:ee:11:1f:
e0:57:05:c7:cc:55:a0:08:66:cc:e2:fe:55:33:be:cd:88:1f:
06:06:f7:06:c1:de:de:e7:18:eb:c6:95:d1:bf:a3:22:a0:90:
dc:bf:cb:28:0b:3f:85:ec:55:96:34:4c:69:a8:e7:35:7a:73:
b5:6b:bf:f7:f7:91:13:1d:3a:ff:63:f9:30:7c:eb:50:08:ca:
3f:8a:15:aa:ee:e4:cc:33:01:fb:40:a2:d9:be:c5:86:b9:49:
cd:b6:b1:b7:1f:e0:a9:78:b7:c2:7d:2b:71:2b:75:e1:34:a8:
83:82:69:bb:09:88:00:b9:dc:3f:4f:4a:d5:3e:1e:ee:3d:ed:
42:19:56:53:db:67:7a:52:1a:6b:8c:f2:bc:c6:50:d1:71:4e:
c7:a5:81:cc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYf/+qbR4A7lkcpRMhbdkrHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwNTA5MTAwNzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjFmOTBiMmViOWRjZjU2NmM0NjE1M2IwYWM5MjNjNjY3MjE1MTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOnMfp0r1WkOf1ua/EFAsfO6+nhr
BUDlEncvSlPg/hFGPHuHkGV/Byz3M1TLmp9kOoweSwZRm2SpowyVZnZTZRwZY9/G
ydTMwDMzgQOWWTr2FdvMcMe594xQLUDvXGjeJSoyURKmVEM9DlMTvdiKLzBxgQAG
QotY1jtlcfQpvqT3n8ZBZe80auXBSD+JnHs0iFlzSWQP+Zm2uqjXnalIkaKD7m4b
7vt4LUcfmIsnhYVz9HRCD4ZqZ4wDHQDDwHa3bX7CQligFjE/qvCH0quNG/OYICV2
xvXVoc4tjtClTLb93yQ26vykmnnFoEm3k6824iyfclSGupAY0KmAbb6tEQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM8fkLLrnc9WbEYVOwrJI8ZnIVETMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvengtUXN1dWR6MVpzUmhVN0Nza2p4bWNoVVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLYVqAwQB
2XESAwQB2XEWMA0GCSqGSIb3DQEBCwUAA4IBAQCgS330NcJuoncHWv4Zmr+dGWIx
W1lYpdiCPf6pbiLCAjaYiocJweDHwihRq6oe+e3pps/41le2hfYvF2Ou9kokD66w
nWE+DeD/AmL7iApWsPF7viCtLEK5KdGUx1wH0dl9J/ufHnVL9HDuER/gVwXHzFWg
CGbM4v5VM77NiB8GBvcGwd7e5xjrxpXRv6MioJDcv8soCz+F7FWWNExpqOc1enO1
a7/395ETHTr/Y/kwfOtQCMo/ihWq7uTMMwH7QKLZvsWGuUnNtrG3H+CpeLfCfStx
K3XhNKiDgmm7CYgAudw/T0rVPh7uPe1CGVZT22d6UhprjPK8xlDRcU7HpYHM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org