Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZKQOnlOO_MasXkqREJJ6CvqaDfc.roa
File: ZKQOnlOO_MasXkqREJJ6CvqaDfc.roa (raw, json)
Hash identifier: E236X3eZTWExYbD8vjVLcWkhDzkW0B8Yqo/HXlLfpE4=
Subject key identifier: 64:A4:0E:9E:53:8E:FC:C6:AC:5E:4A:91:10:92:7A:0A:FA:9A:0D:F7
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018779DDF22749AA8B90164EA253B3BE11A3
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZKQOnlOO_MasXkqREJJ6CvqaDfc.roa
Signing time: Thu 13 Apr 2023 09:06:41 +0000
ROA not before: Thu 13 Apr 2023 09:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.75.69.0/24 maxlen: 24
88.218.40.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:dd:f2:27:49:aa:8b:90:16:4e:a2:53:b3:be:11:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Apr 13 09:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a40e9e538efcc6ac5e4a9110927a0afa9a0df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:e5:07:16:43:ca:c1:6b:80:ac:62:0d:f8:
d1:e9:3b:86:38:4d:98:72:87:38:12:f8:61:69:09:
14:8c:82:9b:c8:17:a4:3b:4a:5f:42:44:27:95:97:
30:9d:20:4a:27:3d:53:0a:48:90:28:c3:4e:83:ed:
cb:f2:42:22:3c:a3:7c:cd:5e:7b:4a:22:8c:d3:71:
9f:11:df:bc:60:ae:ab:bd:d7:83:f0:c7:d9:8a:22:
19:a8:7e:60:76:84:96:53:cf:1f:10:76:25:e4:39:
d6:45:58:45:35:8a:a4:2f:4b:9b:c3:20:cd:8d:c0:
ab:cf:05:d9:28:12:46:82:db:54:e7:f0:a8:ad:9b:
63:fd:78:81:22:fd:15:d6:14:12:89:09:89:78:ea:
73:92:ee:87:61:bd:c9:f8:e9:f6:85:13:f1:91:06:
cd:e2:5b:07:ec:45:d7:be:d4:76:2c:dd:e7:30:b9:
28:b4:09:ad:17:2c:0d:01:60:fb:29:55:8c:a1:ce:
80:28:47:78:4e:38:98:9e:2a:34:cc:2d:9e:e9:6b:
4b:8b:b9:dc:e6:fd:7b:38:e9:24:79:37:95:a0:44:
4f:1d:ac:00:e7:de:b0:37:f3:bc:74:7c:da:60:cd:
10:18:a5:37:91:23:42:a1:56:23:e7:2f:85:73:e9:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A4:0E:9E:53:8E:FC:C6:AC:5E:4A:91:10:92:7A:0A:FA:9A:0D:F7
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZKQOnlOO_MasXkqREJJ6CvqaDfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.40.0/24
88.218.42.0/24
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7b:75:a6:1b:dc:b8:7b:18:d7:a7:82:90:42:dc:bd:15:62:
4c:d7:90:74:41:97:6e:91:48:f3:e0:6c:25:f0:ee:8b:fe:5d:
15:68:c7:d1:61:42:05:ab:75:0a:51:d1:1e:a4:5d:2b:4f:85:
da:d2:4f:69:e1:87:a8:40:23:14:d6:8f:86:9e:b9:5f:60:e6:
c9:51:45:c6:ca:3b:39:6f:65:69:2e:0d:2e:22:37:c0:4c:17:
71:2b:c6:19:4e:4e:a5:f1:1d:33:48:97:66:09:f1:e8:ef:56:
a3:3c:4d:b7:68:1a:6e:58:10:e5:e3:04:46:71:c8:94:b7:9e:
5e:1c:15:38:50:7e:d1:a4:ed:c1:fb:22:12:7d:c3:69:52:ba:
8a:fd:8c:90:2f:0d:75:a9:bf:27:f1:de:98:93:50:8e:e2:7d:
4d:2c:1c:67:82:0d:7f:35:67:70:5f:fd:ef:8b:ea:3d:6b:59:
74:18:be:30:f0:de:48:10:65:e7:ff:32:e7:af:53:d9:4e:06:
25:33:4c:57:98:42:af:e4:3d:9e:aa:2c:63:66:d1:39:05:c6:
3e:22:6a:0d:a2:a3:d9:32:68:92:c8:92:be:30:ac:19:a7:57:
d2:03:4f:95:e7:7e:32:02:41:d6:ad:84:63:42:39:e0:9b:94:
e7:47:a2:ce
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYd53fInSaqLkBZOolOzvhGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwNDEzMDkwNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGE0MGU5ZTUzOGVmY2M2YWM1ZTRhOTExMDkyN2EwYWZhOWEwZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX7lBxZDysFrgKxiDfjR6TuGOE2Y
coc4EvhhaQkUjIKbyBekO0pfQkQnlZcwnSBKJz1TCkiQKMNOg+3L8kIiPKN8zV57
SiKM03GfEd+8YK6rvdeD8MfZiiIZqH5gdoSWU88fEHYl5DnWRVhFNYqkL0ubwyDN
jcCrzwXZKBJGgttU5/CorZtj/XiBIv0V1hQSiQmJeOpzku6HYb3J+On2hRPxkQbN
4lsH7EXXvtR2LN3nMLkotAmtFywNAWD7KVWMoc6AKEd4TjiYnio0zC2e6WtLi7nc
5v17OOkkeTeVoERPHawA596wN/O8dHzaYM0QGKU3kSNCoVYj5y+Fc+l7OwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGSkDp5TjvzGrF5KkRCSegr6mg33MB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvWktRT25sT09fTWFzWGtxUkVKSjZDdnFhRGZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNooAwQA
WNoqAwQAZ0tFMA0GCSqGSIb3DQEBCwUAA4IBAQBCe3WmG9y4exjXp4KQQty9FWJM
15B0QZdukUjz4Gwl8O6L/l0VaMfRYUIFq3UKUdEepF0rT4Xa0k9p4YeoQCMU1o+G
nrlfYObJUUXGyjs5b2VpLg0uIjfATBdxK8YZTk6l8R0zSJdmCfHo71ajPE23aBpu
WBDl4wRGcciUt55eHBU4UH7RpO3B+yISfcNpUrqK/YyQLw11qb8n8d6Yk1CO4n1N
LBxngg1/NWdwX/3vi+o9a1l0GL4w8N5IEGXn/zLnr1PZTgYlM0xXmEKv5D2eqixj
ZtE5BcY+ImoNoqPZMmiSyJK+MKwZp1fSA0+V534yAkHWrYRjQjngm5TnR6LO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org