Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/zDwxMYD6ZBtPVOLoHZjLJ_hFqf4.roa
File: zDwxMYD6ZBtPVOLoHZjLJ_hFqf4.roa (raw, json)
Hash identifier: /MTkRRXVKLt5czXTkmQhI4xK/dV8FYlveOferCOLZS8=
Subject key identifier: CC:3C:31:31:80:FA:64:1B:4F:54:E2:E8:1D:98:CB:27:F8:45:A9:FE
Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial: 018692CBA77621B5775990A94592895B8CA7
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/zDwxMYD6ZBtPVOLoHZjLJ_hFqf4.roa
Signing time: Mon 27 Feb 2023 12:14:25 +0000
ROA not before: Mon 27 Feb 2023 12:14:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210894
IP address blocks: 95.66.198.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:cb:a7:76:21:b5:77:59:90:a9:45:92:89:5b:8c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
Validity
Not Before: Feb 27 12:14:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc3c313180fa641b4f54e2e81d98cb27f845a9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:41:d6:d3:61:5c:46:5f:37:07:72:9d:b7:
1d:3d:81:68:d3:06:81:51:85:b6:b3:c5:d9:07:28:
cc:88:d8:92:29:56:55:42:f6:96:b7:f8:f6:da:03:
2e:6a:20:a4:7a:4a:95:f8:b9:dd:7b:d5:cf:62:00:
4e:e6:c8:c0:ce:9c:7a:40:25:c3:f3:9f:58:d8:96:
ee:13:ff:28:5e:1f:cc:01:15:56:a0:48:2d:51:d8:
ec:17:6b:c0:eb:5a:61:51:71:b5:aa:41:5b:63:c8:
5a:b0:8e:8f:e7:38:28:bb:04:ca:9c:63:0e:69:9d:
b4:6f:51:96:5b:ae:bd:c5:4c:5b:95:72:f2:28:14:
76:4a:4d:e3:0e:89:d4:ba:4f:75:19:08:93:4c:5d:
2f:d9:16:b4:19:83:b7:1e:33:3e:08:d0:d3:e7:79:
3e:68:4a:1d:a2:3f:5a:54:ba:d3:98:62:ef:24:27:
bc:4d:a6:b0:d7:5f:27:e2:2b:f5:57:e5:39:84:c5:
0f:00:4f:27:83:56:a8:5c:22:6e:b9:3e:ff:f4:c1:
71:b7:a2:09:e8:82:31:99:6e:a2:37:cd:54:9d:02:
40:98:dd:e9:c3:9d:aa:11:85:4c:21:0a:21:1a:5e:
54:95:d1:f6:c0:03:b6:a4:5c:c0:08:1b:31:bf:71:
07:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3C:31:31:80:FA:64:1B:4F:54:E2:E8:1D:98:CB:27:F8:45:A9:FE
X509v3 Authority Key Identifier:
keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/zDwxMYD6ZBtPVOLoHZjLJ_hFqf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.198.0/23
Signature Algorithm: sha256WithRSAEncryption
37:c9:2f:2f:18:72:65:dc:8b:cb:a7:c3:86:b8:4d:05:d2:5c:
07:a7:cc:84:5c:76:78:32:0f:04:bb:5f:8c:f9:ec:d7:dc:7a:
42:b5:30:dd:83:35:03:d5:bf:d7:67:19:37:0c:cd:50:4b:f4:
ff:58:25:59:94:e3:23:80:80:dd:0e:97:52:33:e0:2f:49:b9:
ec:38:86:3d:3a:54:70:88:03:94:e2:f1:22:10:e8:91:d6:a1:
8e:c3:f4:4f:33:4f:93:55:93:d8:ae:87:17:3b:1b:d7:ea:5b:
be:9a:1f:52:b4:1f:5a:9e:70:b8:93:fa:a5:fd:d3:b9:fd:78:
0e:23:4d:28:0c:04:06:46:8f:6d:e1:f1:1d:89:1e:92:ee:53:
a8:61:22:d2:24:67:8a:e7:63:58:0a:07:16:bc:43:ad:79:56:
89:f8:b9:18:d5:63:8e:6d:b7:a4:c1:69:4d:01:e4:0b:1b:ec:
f8:c7:98:4f:4f:ec:97:97:1c:d5:3f:d7:83:f4:35:36:93:fe:
a5:f0:69:a3:98:35:c2:5c:7a:00:ae:c9:be:03:59:c7:18:10:
a4:6c:42:94:7d:bc:6d:c8:af:00:36:0e:76:f7:7e:c0:90:3c:
53:67:33:ac:24:f8:e6:46:38:0a:d5:a5:cf:0c:6d:52:8d:29:
39:7d:2b:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaSy6d2IbV3WZCpRZKJW4ynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNWM3MmVlNDIyYzYxNjY3ZTMwNTZkZTZiM2ZmY2UwMzQz
MDUxNzUwHhcNMjMwMjI3MTIxNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzNjMzEzMTgwZmE2NDFiNGY1NGUyZTgxZDk4Y2IyN2Y4NDVhOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRhB1tNhXEZfNwdynbcdPYFo0waB
UYW2s8XZByjMiNiSKVZVQvaWt/j22gMuaiCkekqV+Lnde9XPYgBO5sjAzpx6QCXD
859Y2JbuE/8oXh/MARVWoEgtUdjsF2vA61phUXG1qkFbY8hasI6P5zgouwTKnGMO
aZ20b1GWW669xUxblXLyKBR2Sk3jDonUuk91GQiTTF0v2Ra0GYO3HjM+CNDT53k+
aEodoj9aVLrTmGLvJCe8Taaw118n4iv1V+U5hMUPAE8ng1aoXCJuuT7/9MFxt6IJ
6IIxmW6iN81UnQJAmN3pw52qEYVMIQohGl5UldH2wAO2pFzACBsxv3EHCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMw8MTGA+mQbT1Ti6B2Yyyf4Ran+MB8GA1UdIwQY
MBaAFBxccu5CLGFmfjBW3ms//OA0MFF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGIt
MTI3OGE0MmUwOTJhLzEvekR3eE1ZRDZaQnRQVk9Mb0haakxKX2hGcWY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGItMTI3OGE0MmUwOTJh
LzEvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX0LGMA0G
CSqGSIb3DQEBCwUAA4IBAQA3yS8vGHJl3IvLp8OGuE0F0lwHp8yEXHZ4Mg8Eu1+M
+ezX3HpCtTDdgzUD1b/XZxk3DM1QS/T/WCVZlOMjgIDdDpdSM+AvSbnsOIY9OlRw
iAOU4vEiEOiR1qGOw/RPM0+TVZPYrocXOxvX6lu+mh9StB9annC4k/ql/dO5/XgO
I00oDAQGRo9t4fEdiR6S7lOoYSLSJGeK52NYCgcWvEOteVaJ+LkY1WOObbekwWlN
AeQLG+z4x5hPT+yXlxzVP9eD9DU2k/6l8GmjmDXCXHoArsm+A1nHGBCkbEKUfbxt
yK8ANg52937AkDxTZzOsJPjmRjgK1aXPDG1SjSk5fSsL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:23 2024 by rpki-client on console-ams.rpki-client.org