Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/1-z88GUdybXibgvYb-z-VasZtiZI.roa
File: 1-z88GUdybXibgvYb-z-VasZtiZI.roa (raw, json)
Hash identifier: egfyAgMdgfPzYfYnOvGlzgwv4gbqptm1/41v8UgXKl4=
Subject key identifier: FB:3F:3C:19:47:72:6D:78:9B:82:F6:1B:FB:3F:95:6A:C6:6D:89:92
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 01894F14083E46F32DD1947EEFE9AE761733
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/1-z88GUdybXibgvYb-z-VasZtiZI.roa
Signing time: Thu 13 Jul 2023 11:47:40 +0000
ROA not before: Thu 13 Jul 2023 11:47:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200020
IP address blocks: 93.95.0.0/24 maxlen: 24
93.95.1.0/24 maxlen: 24
93.95.2.0/24 maxlen: 24
93.95.3.0/24 maxlen: 24
93.95.4.0/24 maxlen: 24
93.95.6.0/24 maxlen: 24
93.95.7.0/24 maxlen: 24
93.95.5.0/24 maxlen: 24
2a03:5d80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:14:08:3e:46:f3:2d:d1:94:7e:ef:e9:ae:76:17:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Jul 13 11:47:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb3f3c1947726d789b82f61bfb3f956ac66d8992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:7a:e6:b6:68:a3:82:7b:15:42:e5:cc:7b:
6f:55:50:ab:33:65:b4:bc:7d:66:bf:d3:ea:12:d5:
5d:16:ca:e5:27:b0:6b:3b:a1:53:fb:e6:8d:74:be:
5d:20:e8:54:a3:02:55:f5:df:4e:16:4f:1f:32:20:
80:45:56:42:bc:4d:9b:71:f4:4d:2e:06:67:2b:da:
43:23:b3:c9:f9:6a:64:55:09:65:8a:f8:a8:ec:df:
a6:dc:ea:a5:2d:4f:80:2f:e0:ee:84:ca:af:3e:6e:
db:17:f8:dd:72:b0:f2:c6:46:7e:53:1b:2d:cc:3b:
01:4c:09:72:48:0c:b7:97:d7:14:9b:33:62:aa:32:
a7:47:c8:b3:a5:55:43:18:94:2a:cd:dd:c4:d7:4e:
3b:73:6e:74:4e:d8:2c:61:a2:d3:a4:af:c7:89:31:
38:75:68:c5:de:3d:81:2e:d8:85:42:2f:81:b1:71:
f0:d0:ad:d8:3f:83:d3:5a:0a:61:7a:f8:de:54:22:
ba:3b:99:9f:1b:f0:1c:82:0b:5f:6b:0b:d7:15:85:
1e:50:26:a5:34:42:5f:e3:ad:ad:0a:2f:37:ad:b3:
6c:e2:b8:1c:5e:75:33:4e:4c:8b:fb:90:92:8b:c5:
2c:7d:7c:2e:f1:69:90:2d:a8:b7:f4:f2:27:30:79:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3F:3C:19:47:72:6D:78:9B:82:F6:1B:FB:3F:95:6A:C6:6D:89:92
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/1-z88GUdybXibgvYb-z-VasZtiZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.0.0/21
IPv6:
2a03:5d80::/32
Signature Algorithm: sha256WithRSAEncryption
27:f7:16:bb:ae:b8:83:1a:ab:d4:ae:ce:56:1c:81:66:04:1c:
e4:93:84:f9:fa:27:a7:1f:ef:6a:56:6f:ac:9d:7a:b7:48:31:
4e:31:32:60:ba:85:4c:ee:b6:22:ce:fc:5c:6c:a9:84:f5:14:
60:83:d3:8d:37:f1:92:da:01:2a:74:27:59:06:a0:ce:6f:84:
98:38:d4:b1:78:18:f2:87:66:14:40:38:76:bd:cd:db:ad:af:
34:1d:96:30:98:17:20:bb:7a:72:e0:95:02:4c:5f:37:2a:e7:
f8:a5:bc:d5:99:34:ae:97:d7:09:e2:38:93:61:7b:e9:b2:db:
f9:85:aa:d2:85:e8:06:a9:9d:c8:b3:7d:d7:06:5a:3b:d9:db:
41:22:8d:bf:bd:48:f8:a7:e6:7a:35:a4:1c:24:8b:fa:cd:ed:
10:c0:35:47:4d:60:9d:ea:68:6d:84:a2:d9:d4:66:9e:93:ae:
f2:c0:18:69:11:8c:58:60:d7:0c:59:76:29:9c:ca:73:fd:a7:
a8:c7:d3:4c:85:df:c5:ba:f2:14:0e:7f:38:70:74:75:10:65:
33:f6:63:e8:93:93:76:97:6c:b1:ab:15:8d:09:30:41:c1:90:
61:5a:2c:43:ee:35:de:0e:9b:26:1d:92:3f:62:1e:b2:8a:bf:
6e:48:28:d4
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYlPFAg+RvMt0ZR+7+mudhczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNDdkYzdmZjQ4NWI4NDEzYmUzOGY1YmVlODA5MTczMzBi
MzE3MzgwHhcNMjMwNzEzMTE0NzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjNmM2MxOTQ3NzI2ZDc4OWI4MmY2MWJmYjNmOTU2YWM2NmQ4OTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6B65rZoo4J7FULlzHtvVVCrM2W0
vH1mv9PqEtVdFsrlJ7BrO6FT++aNdL5dIOhUowJV9d9OFk8fMiCARVZCvE2bcfRN
LgZnK9pDI7PJ+WpkVQllivio7N+m3OqlLU+AL+DuhMqvPm7bF/jdcrDyxkZ+Uxst
zDsBTAlySAy3l9cUmzNiqjKnR8izpVVDGJQqzd3E1047c250TtgsYaLTpK/HiTE4
dWjF3j2BLtiFQi+BsXHw0K3YP4PTWgphevjeVCK6O5mfG/AcggtfawvXFYUeUCal
NEJf462tCi83rbNs4rgcXnUzTkyL+5CSi8UsfXwu8WmQLai39PInMHlE8wIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPs/PBlHcm14m4L2G/s/lWrGbYmSMB8GA1UdIwQY
MBaAFA9H3H/0hbhBO+OPW+6AkXMwsxc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmIt
MmQ4NDdhM2Y3ZDJmLzEvMS16ODhHVWR5YlhpYmd2WWItei1WYXNadGlaSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWEvYWY1MDc4LTIyNDMtNGZkYi1hYjJiLTJkODQ3YTNmN2Qy
Zi8xL0QwZmNmX1NGdUVFNzQ0OWI3b0NSY3pDekZ6Zy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA11fADAN
BAIAAjAHAwUAKgNdgDANBgkqhkiG9w0BAQsFAAOCAQEAJ/cWu664gxqr1K7OVhyB
ZgQc5JOE+fonpx/valZvrJ16t0gxTjEyYLqFTO62Is78XGyphPUUYIPTjTfxktoB
KnQnWQagzm+EmDjUsXgY8odmFEA4dr3N262vNB2WMJgXILt6cuCVAkxfNyrn+KW8
1Zk0rpfXCeI4k2F76bLb+YWq0oXoBqmdyLN91wZaO9nbQSKNv71I+KfmejWkHCSL
+s3tEMA1R01gnepobYSi2dRmnpOu8sAYaRGMWGDXDFl2KZzKc/2nqMfTTIXfxbry
FA5/OHB0dRBlM/Zj6JOTdpdssasVjQkwQcGQYVosQ+413g6bJh2SP2Iesoq/bkgo
1A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:55 2023 by rpki-client on console-fra.rpki-client.org