Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/ZzM3qb9S7wIpJR5areVUYHrfKhM.roa
File: ZzM3qb9S7wIpJR5areVUYHrfKhM.roa (raw, json)
Hash identifier: 5tDXuBCYdv6MumwReH3riy0eHUXliJKtyqWZZBml9/Q=
Subject key identifier: 67:33:37:A9:BF:52:EF:02:29:25:1E:5A:AD:E5:54:60:7A:DF:2A:13
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 01856F8B7E6DD1E243B58D71190EDA222BBA
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/ZzM3qb9S7wIpJR5areVUYHrfKhM.roa
Signing time: Sun 01 Jan 2023 22:54:50 +0000
ROA not before: Sun 01 Jan 2023 22:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 188.172.137.0/24 maxlen: 24
188.172.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:7e:6d:d1:e2:43:b5:8d:71:19:0e:da:22:2b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Jan 1 22:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=673337a9bf52ef0229251e5aade554607adf2a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:be:24:39:9d:45:dd:c2:76:d5:bb:da:4e:
27:14:99:76:74:59:61:3a:2f:6e:ea:4b:5d:bc:35:
88:8d:e5:88:a9:1e:21:b6:80:0b:89:a5:fe:ca:67:
ab:4b:fe:22:1a:5b:4e:cf:64:d6:53:07:d9:32:33:
64:d9:01:a3:de:ec:af:b6:cf:37:74:c0:ab:27:16:
59:e0:75:cd:78:ec:f5:d8:5e:3e:fb:9f:ec:8e:04:
23:d5:f5:20:7f:d7:9d:37:3d:39:ed:02:ab:16:a0:
7c:e3:23:b3:89:00:a4:13:21:41:3c:5a:7e:5c:79:
72:8b:d9:6e:d4:8d:9d:74:6c:a2:91:6e:57:4b:e2:
45:d7:8c:ce:00:91:f1:ee:29:69:36:6b:36:87:d3:
d9:ee:09:62:7c:70:b4:d5:64:c6:54:bd:66:5c:d5:
90:cf:dd:b1:cb:53:2d:05:06:54:9d:8f:2f:71:6c:
34:62:82:6e:9d:d4:d9:7d:43:13:4b:84:ac:bb:a4:
b5:cf:04:f8:47:15:e0:28:a4:ca:f2:30:36:e7:de:
8e:09:ce:dd:cb:65:4d:35:fb:c5:be:e3:e4:79:17:
d1:bf:88:6e:7b:f5:0f:85:d4:45:a8:52:da:b3:84:
90:37:0b:6c:39:76:e5:a7:1d:d1:21:4e:b7:52:34:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:33:37:A9:BF:52:EF:02:29:25:1E:5A:AD:E5:54:60:7A:DF:2A:13
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/ZzM3qb9S7wIpJR5areVUYHrfKhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.137.0-188.172.138.255
Signature Algorithm: sha256WithRSAEncryption
9b:cd:c3:33:22:d4:df:32:ed:81:4e:46:8c:ce:1c:3b:f1:33:
f5:bc:38:d8:76:49:ee:17:b9:67:0f:b8:21:5a:99:e0:93:29:
ac:af:ac:2b:f8:7f:cf:da:5e:01:2c:71:29:38:d8:93:28:5c:
67:cc:16:29:24:6c:4f:fa:cf:c0:31:26:88:90:f1:ad:ea:67:
5c:58:6f:55:2a:15:16:41:13:ec:fa:7b:27:e9:ee:71:90:13:
6b:67:67:2f:69:5b:f4:44:34:bb:27:32:ba:33:fd:12:ed:83:
ae:56:3a:1e:51:ad:2b:57:17:d7:6a:c5:12:be:5a:42:a3:dd:
20:0e:ed:b0:b3:f5:1e:96:89:d0:30:d7:60:fe:0b:6c:9f:3c:
17:9a:bd:28:43:85:a7:18:4b:db:3a:95:5c:9f:a7:e2:90:52:
d8:d6:f1:08:02:5d:ee:69:8b:cd:c6:59:48:08:03:82:5a:8d:
b0:64:33:4f:0c:1f:e4:cb:22:03:de:ef:e7:a7:0d:c2:37:e2:
15:aa:a8:94:61:24:60:49:99:3e:a5:0f:cc:c4:b0:3c:09:4f:
2a:82:32:91:dc:d7:37:52:2e:6d:87:15:3f:bc:56:00:43:7d:
b7:c8:61:69:06:7b:86:9c:10:f2:68:25:63:9b:d4:43:4c:c9:
e2:bc:24:70
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVvi35t0eJDtY1xGQ7aIiu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjk1Y2ZjMmQxODdmNDA1MzBlZjA4M2JiZDEwYzg4YzQ5
NTZjMWQwHhcNMjMwMTAxMjI1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzMzMzdhOWJmNTJlZjAyMjkyNTFlNWFhZGU1NTQ2MDdhZGYyYTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQu+JDmdRd3CdtW72k4nFJl2dFlh
Oi9u6ktdvDWIjeWIqR4htoALiaX+ymerS/4iGltOz2TWUwfZMjNk2QGj3uyvts83
dMCrJxZZ4HXNeOz12F4++5/sjgQj1fUgf9edNz057QKrFqB84yOziQCkEyFBPFp+
XHlyi9lu1I2ddGyikW5XS+JF14zOAJHx7ilpNms2h9PZ7glifHC01WTGVL1mXNWQ
z92xy1MtBQZUnY8vcWw0YoJundTZfUMTS4Ssu6S1zwT4RxXgKKTK8jA2596OCc7d
y2VNNfvFvuPkeRfRv4hue/UPhdRFqFLas4SQNwtsOXblpx3RIU63UjSQ7QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGczN6m/Uu8CKSUeWq3lVGB63yoTMB8GA1UdIwQY
MBaAFGu5XPwtGH9AUw7wg7vRDIjElWwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgt
NDY2MDEzNDM1MDc5LzEvWnpNM3FiOVM3d0lwSlI1YXJlVlVZSHJmS2hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgtNDY2MDEzNDM1MDc5
LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC8rIkD
BAC8rIowDQYJKoZIhvcNAQELBQADggEBAJvNwzMi1N8y7YFORozOHDvxM/W8ONh2
Se4XuWcPuCFameCTKayvrCv4f8/aXgEscSk42JMoXGfMFikkbE/6z8AxJoiQ8a3q
Z1xYb1UqFRZBE+z6eyfp7nGQE2tnZy9pW/RENLsnMroz/RLtg65WOh5RrStXF9dq
xRK+WkKj3SAO7bCz9R6WidAw12D+C2yfPBeavShDhacYS9s6lVyfp+KQUtjW8QgC
Xe5pi83GWUgIA4JajbBkM08MH+TLIgPe7+enDcI34hWqqJRhJGBJmT6lD8zEsDwJ
TyqCMpHc1zdSLm2HFT+8VgBDfbfIYWkGe4acEPJoJWOb1ENMyeK8JHA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:31 2024 by rpki-client on console-fra.rpki-client.org