Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/n5EzdZft3oYWWF8MsTq61mA4LKE.roa
File: n5EzdZft3oYWWF8MsTq61mA4LKE.roa (raw, json)
Hash identifier: HC6SR5Yohu7yeUhCqBGJbCA1p8zzofZWpgwKb/QVsyE=
Subject key identifier: 9F:91:33:75:97:ED:DE:86:16:58:5F:0C:B1:3A:BA:D6:60:38:2C:A1
Certificate issuer: /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Certificate serial: 018AF67F793D7571E85E26ABFD7257CC4553
Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/n5EzdZft3oYWWF8MsTq61mA4LKE.roa
Signing time: Tue 03 Oct 2023 17:04:23 +0000
ROA not before: Tue 03 Oct 2023 17:04:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206694
IP address blocks: 193.53.86.0/24 maxlen: 24
185.122.122.0/24 maxlen: 24
185.122.121.0/24 maxlen: 24
185.122.123.0/24 maxlen: 24
185.122.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:7f:79:3d:75:71:e8:5e:26:ab:fd:72:57:cc:45:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Validity
Not Before: Oct 3 17:04:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f91337597edde8616585f0cb13abad660382ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:c4:97:10:34:5b:27:cc:58:89:db:d2:d2:
71:e9:40:f2:7c:1d:70:b7:ed:98:7e:55:e2:d5:9f:
4f:b2:cb:11:01:60:c1:ed:b7:6b:8b:85:f3:96:8c:
60:7e:93:06:74:b0:b0:96:4c:4d:fe:fb:bd:e5:0c:
09:c2:90:2e:76:35:49:39:35:61:84:90:bc:3c:20:
41:64:c8:53:0c:ba:c1:07:77:95:e6:ff:05:f1:19:
f2:04:bc:d0:e4:a0:d3:9a:ce:5e:23:5f:40:36:b0:
bc:49:df:15:45:57:fe:65:c4:88:5c:ad:49:08:c4:
d0:8e:e8:2e:11:ac:41:07:7b:7a:a5:8b:71:b7:67:
c2:7f:3a:ad:18:c2:c0:c8:65:9a:64:e9:e1:01:08:
dc:9f:d3:7b:84:4c:29:f1:c4:be:e8:98:37:72:78:
8e:fe:38:02:49:a6:f5:1b:a5:4d:d0:83:46:fc:88:
53:84:2a:14:cf:b9:48:d2:3e:98:0b:2e:ed:73:10:
8b:86:27:8a:c7:7f:c5:ab:88:8c:e2:dd:3f:3e:03:
2d:c2:d9:eb:21:20:e6:7f:2c:57:ce:b7:c6:5f:78:
50:8b:d1:13:19:ff:d8:71:cd:b7:d1:ad:8b:45:c2:
d4:8b:2b:1c:66:3a:be:d3:17:2f:45:b9:6a:35:76:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:33:75:97:ED:DE:86:16:58:5F:0C:B1:3A:BA:D6:60:38:2C:A1
X509v3 Authority Key Identifier:
keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/n5EzdZft3oYWWF8MsTq61mA4LKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.120.0/22
193.53.86.0/24
Signature Algorithm: sha256WithRSAEncryption
19:bd:62:1e:07:82:4f:67:19:58:f9:b4:ef:f3:b3:1b:ef:96:
c5:13:21:b6:a4:b0:16:0f:19:b8:29:6f:39:d1:ba:29:41:ce:
3f:9a:75:1c:f6:ac:d3:62:df:0a:6d:70:ac:55:df:09:45:6e:
6e:b3:f5:15:7f:29:cd:2e:3c:1b:5a:55:8e:94:9e:b4:7b:4a:
38:e4:05:0c:a7:93:bd:ae:8b:c1:00:6b:67:5d:75:64:c6:e4:
29:54:9a:94:fb:53:2e:b1:f1:1c:b8:c1:62:03:e8:68:d3:5f:
fa:65:29:08:52:3a:0b:49:6e:02:01:2c:2a:5c:ac:0a:56:ff:
ec:30:26:01:5f:84:f8:5e:b5:ff:5b:0f:da:12:3c:fa:16:13:
7a:f8:22:a5:88:8f:0a:6e:40:c5:b2:5a:ce:25:82:f3:68:cf:
a8:35:d6:df:37:73:e3:da:ff:ce:c0:65:11:f9:97:ee:97:6a:
3b:e0:87:85:60:9a:67:c6:e4:89:02:fe:af:f2:35:97:f2:44:
bc:de:e9:a3:42:6a:66:79:5a:75:5d:03:cf:a8:ce:fd:84:6f:
d6:44:bc:c4:10:48:f7:c9:9e:49:1f:da:02:4b:b9:ce:d7:ec:
20:72:3e:77:ef:dd:be:1c:dd:7a:bd:c4:a9:97:43:34:77:22:
49:c4:c6:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYr2f3k9dXHoXiar/XJXzEVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmNlMTZmZmQ2YTliYTljNTczMTQ1NThhNDQ3ZmFiZjZj
NWMwZGEwHhcNMjMxMDAzMTcwNDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjkxMzM3NTk3ZWRkZTg2MTY1ODVmMGNiMTNhYmFkNjYwMzgyY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqnElxA0WyfMWInb0tJx6UDyfB1w
t+2YflXi1Z9PsssRAWDB7bdri4XzloxgfpMGdLCwlkxN/vu95QwJwpAudjVJOTVh
hJC8PCBBZMhTDLrBB3eV5v8F8RnyBLzQ5KDTms5eI19ANrC8Sd8VRVf+ZcSIXK1J
CMTQjuguEaxBB3t6pYtxt2fCfzqtGMLAyGWaZOnhAQjcn9N7hEwp8cS+6Jg3cniO
/jgCSab1G6VN0ING/IhThCoUz7lI0j6YCy7tcxCLhieKx3/Fq4iM4t0/PgMtwtnr
ISDmfyxXzrfGX3hQi9ETGf/Ycc230a2LRcLUiyscZjq+0xcvRblqNXZ/vwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ+RM3WX7d6GFlhfDLE6utZgOCyhMB8GA1UdIwQY
MBaAFG/84W/9apupxXMUVYpEf6v2xcDaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81NDU2MGYtOWYzOS00NjlkLTgwY2Yt
MTBkMDJhNzEwMjE2LzEvbjVFemRaZnQzb1lXV0Y4TXNUcTYxbUE0TEtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81NDU2MGYtOWYzOS00NjlkLTgwY2YtMTBkMDJhNzEwMjE2
LzEvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuXp4AwQA
wTVWMA0GCSqGSIb3DQEBCwUAA4IBAQAZvWIeB4JPZxlY+bTv87Mb75bFEyG2pLAW
Dxm4KW850bopQc4/mnUc9qzTYt8KbXCsVd8JRW5us/UVfynNLjwbWlWOlJ60e0o4
5AUMp5O9rovBAGtnXXVkxuQpVJqU+1MusfEcuMFiA+ho01/6ZSkIUjoLSW4CASwq
XKwKVv/sMCYBX4T4XrX/Ww/aEjz6FhN6+CKliI8KbkDFslrOJYLzaM+oNdbfN3Pj
2v/OwGUR+Zful2o74IeFYJpnxuSJAv6v8jWX8kS83umjQmpmeVp1XQPPqM79hG/W
RLzEEEj3yZ5JH9oCS7nO1+wgcj53792+HN16vcSpl0M0dyJJxMZ8
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:35 2024 by rpki-client on console-fra.rpki-client.org