Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/ZbOqTnAAiNSiDuJWT85EGEljrIA.roa
File: ZbOqTnAAiNSiDuJWT85EGEljrIA.roa (raw, json)
Hash identifier: NVVO7tUhzGdS4YEcDj3oKF7ibXzlVlx39273p8gjlMQ=
Subject key identifier: 65:B3:AA:4E:70:00:88:D4:A2:0E:E2:56:4F:CE:44:18:49:63:AC:80
Certificate issuer: /CN=dbc8f2ff98f610fe83830d18918f4c9037272411
Certificate serial: 018B604C7A5AC845F86E6E07541AA3EE095A
Authority key identifier: DB:C8:F2:FF:98:F6:10:FE:83:83:0D:18:91:8F:4C:90:37:27:24:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28jy_5j2EP6Dgw0YkY9MkDcnJBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/ZbOqTnAAiNSiDuJWT85EGEljrIA.roa
Signing time: Tue 24 Oct 2023 06:08:26 +0000
ROA not before: Tue 24 Oct 2023 06:08:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210079
IP address blocks: 95.142.44.0/24 maxlen: 24
185.154.53.0/24 maxlen: 24
185.154.52.0/24 maxlen: 24
185.154.55.0/24 maxlen: 24
185.154.54.0/24 maxlen: 24
2a06:78c0:db::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:4c:7a:5a:c8:45:f8:6e:6e:07:54:1a:a3:ee:09:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc8f2ff98f610fe83830d18918f4c9037272411
Validity
Not Before: Oct 24 06:08:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b3aa4e700088d4a20ee2564fce44184963ac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:ea:8d:d9:98:24:83:d2:cd:3d:16:64:38:
0c:5e:75:0f:a4:c9:95:4e:47:3a:21:bd:89:7f:b6:
7b:3c:b9:ce:40:46:c1:57:28:e8:15:51:9e:6f:99:
4a:07:9d:68:e8:68:5a:e1:2f:4d:4f:1d:8f:51:df:
79:e6:9b:ca:6e:1e:5d:6c:97:ab:f4:04:90:87:09:
28:1a:ab:b1:c8:c5:22:b1:e5:d1:38:f0:02:76:22:
72:6e:65:b4:4b:e4:d7:5b:35:e0:33:2d:f1:fa:76:
c0:a9:ad:a0:a8:90:ec:75:4d:d9:c1:c5:35:e4:fd:
ce:2c:77:be:c6:b6:c1:c1:b6:72:4d:ce:fb:6d:18:
b2:89:05:41:1b:11:84:1c:00:36:de:76:9b:9f:b6:
5e:f8:18:0d:cf:2c:99:c1:b8:65:3c:84:2f:8e:2c:
61:c2:d0:37:ab:17:ca:c0:c3:a8:0a:55:f0:16:f3:
b5:ef:df:16:78:e6:bd:bb:c3:b4:cd:70:f7:29:72:
28:ee:8e:67:88:af:1c:02:18:1f:0d:29:3e:ef:e9:
24:65:51:e0:38:0c:5b:72:a2:41:ed:0b:bf:df:c5:
c1:f7:10:45:fb:a0:a7:4a:db:87:54:c7:15:21:fe:
14:a3:b9:21:72:f8:a8:9d:cd:3b:04:c3:7c:a0:55:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B3:AA:4E:70:00:88:D4:A2:0E:E2:56:4F:CE:44:18:49:63:AC:80
X509v3 Authority Key Identifier:
keyid:DB:C8:F2:FF:98:F6:10:FE:83:83:0D:18:91:8F:4C:90:37:27:24:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28jy_5j2EP6Dgw0YkY9MkDcnJBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/ZbOqTnAAiNSiDuJWT85EGEljrIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/28jy_5j2EP6Dgw0YkY9MkDcnJBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.44.0/24
185.154.52.0/22
IPv6:
2a06:78c0:db::/48
Signature Algorithm: sha256WithRSAEncryption
3f:53:bf:a0:36:4d:01:ee:e0:68:d5:98:03:5c:d4:a7:e9:45:
c3:81:78:ed:4b:04:f8:e9:f9:5d:07:ba:19:ab:43:ae:1b:d8:
34:3d:af:39:51:b4:12:39:6a:47:0b:fa:14:45:1e:d8:da:4c:
07:40:ac:aa:59:40:0f:ea:b0:58:e7:bc:e3:73:22:54:9e:9e:
86:2d:33:3e:0b:b9:74:ac:95:89:3b:90:10:08:5e:ba:86:58:
64:3e:88:e6:2d:63:2a:1d:56:f3:e1:e5:0f:86:5c:e0:f1:6d:
61:83:6e:11:f8:0d:3f:0d:a7:33:c5:8d:5e:d4:7a:40:27:35:
4f:d9:45:16:60:41:d5:88:ec:5d:a8:07:b1:fe:ba:9b:97:9e:
32:ca:d4:8f:6e:bb:5e:0b:0c:31:cb:b0:e5:6b:7e:eb:d4:c1:
84:a3:c7:a6:f3:f2:7b:62:24:70:19:bd:6d:4a:72:f8:9e:ab:
4f:63:f7:29:0c:c7:36:5e:53:00:d6:37:0b:2e:8f:81:fd:cb:
4a:0a:6f:4d:27:be:63:a3:ef:bc:80:52:98:8e:79:56:db:5a:
6b:bf:9e:18:05:46:e7:b7:43:2b:3e:44:84:59:8b:96:17:c5:
13:9d:97:f1:bd:89:27:96:2f:1b:bd:62:ed:01:ad:46:61:2d:
3e:b9:39:be
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYtgTHpayEX4bm4HVBqj7glaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzhmMmZmOThmNjEwZmU4MzgzMGQxODkxOGY0YzkwMzcy
NzI0MTEwHhcNMjMxMDI0MDYwODI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWIzYWE0ZTcwMDA4OGQ0YTIwZWUyNTY0ZmNlNDQxODQ5NjNhYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NDqjdmYJIPSzT0WZDgMXnUPpMmV
Tkc6Ib2Jf7Z7PLnOQEbBVyjoFVGeb5lKB51o6Gha4S9NTx2PUd955pvKbh5dbJer
9ASQhwkoGquxyMUiseXROPACdiJybmW0S+TXWzXgMy3x+nbAqa2gqJDsdU3ZwcU1
5P3OLHe+xrbBwbZyTc77bRiyiQVBGxGEHAA23nabn7Ze+BgNzyyZwbhlPIQvjixh
wtA3qxfKwMOoClXwFvO1798WeOa9u8O0zXD3KXIo7o5niK8cAhgfDSk+7+kkZVHg
OAxbcqJB7Qu/38XB9xBF+6CnStuHVMcVIf4Uo7khcvionc07BMN8oFUS7QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFGWzqk5wAIjUog7iVk/ORBhJY6yAMB8GA1UdIwQY
MBaAFNvI8v+Y9hD+g4MNGJGPTJA3JyQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhqeV81ajJFUDZEZ3cwWWtZOU1rRGNuSkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mZWVlZjUtYzk2Zi00NjUyLTk0ZTAt
ZWQzOGY2NDllMzlmLzEvWmJPcVRuQUFpTlNpRHVKV1Q4NUVHRWxqcklBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9mZWVlZjUtYzk2Zi00NjUyLTk0ZTAtZWQzOGY2NDllMzlm
LzEvMjhqeV81ajJFUDZEZ3cwWWtZOU1rRGNuSkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAX44sAwQC
uZo0MA8EAgACMAkDBwAqBnjAANswDQYJKoZIhvcNAQELBQADggEBAD9Tv6A2TQHu
4GjVmANc1KfpRcOBeO1LBPjp+V0HuhmrQ64b2DQ9rzlRtBI5akcL+hRFHtjaTAdA
rKpZQA/qsFjnvONzIlSenoYtMz4LuXSslYk7kBAIXrqGWGQ+iOYtYyodVvPh5Q+G
XODxbWGDbhH4DT8NpzPFjV7UekAnNU/ZRRZgQdWI7F2oB7H+upuXnjLK1I9uu14L
DDHLsOVrfuvUwYSjx6bz8ntiJHAZvW1Kcvieq09j9ykMxzZeUwDWNwsuj4H9y0oK
b00nvmOj77yAUpiOeVbbWmu/nhgFRue3Qys+RIRZi5YXxROdl/G9iSeWLxu9Yu0B
rUZhLT65Ob4=
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:03 2024 by rpki-client on console-ams.rpki-client.org