Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/zWL1oUTBSrkySIWOj3Mz-mc6ylI.roa
File: zWL1oUTBSrkySIWOj3Mz-mc6ylI.roa (raw, json)
Hash identifier: WGQvNGBmIzbSSvhQB9wZhf+qNEVXQPs61/ojM5XdZu4=
Subject key identifier: CD:62:F5:A1:44:C1:4A:B9:32:48:85:8E:8F:73:33:FA:67:3A:CA:52
Certificate issuer: /CN=fbf43fe9fd3af2bcf4ba7a83f111e6559125f3fd
Certificate serial: 01856E8B123AE6CB7EAE5A7E469EF42F686E
Authority key identifier: FB:F4:3F:E9:FD:3A:F2:BC:F4:BA:7A:83:F1:11:E6:55:91:25:F3:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Q_6f068rz0unqD8RHmVZEl8_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/zWL1oUTBSrkySIWOj3Mz-mc6ylI.roa
Signing time: Sun 01 Jan 2023 18:14:45 +0000
ROA not before: Sun 01 Jan 2023 18:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44439
IP address blocks: 213.109.150.0/24 maxlen: 24
2a12:fdc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:12:3a:e6:cb:7e:ae:5a:7e:46:9e:f4:2f:68:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf43fe9fd3af2bcf4ba7a83f111e6559125f3fd
Validity
Not Before: Jan 1 18:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd62f5a144c14ab93248858e8f7333fa673aca52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:ae:b9:4d:25:f8:2c:75:8c:68:2f:ab:5a:
a7:f6:cb:bd:ea:b2:14:f2:72:bc:b6:f0:5f:06:22:
9e:6d:70:aa:91:67:d9:88:4c:95:c7:35:f3:7a:27:
ea:0f:4d:92:51:26:21:94:6b:b5:ae:b3:2a:96:40:
27:c7:26:27:44:74:31:a9:28:8a:05:35:5c:9b:cd:
2d:dd:77:c8:3d:7a:71:b6:42:14:9c:0b:ee:38:fc:
85:55:35:71:f7:53:15:40:f5:70:a3:3d:4d:50:bf:
d6:e6:17:a2:2c:88:0e:38:3e:35:0d:56:f3:60:a6:
60:25:3c:2a:de:82:be:43:95:61:a3:bf:7a:8a:48:
b8:32:7c:af:b2:d1:d8:a2:68:40:d5:25:18:9f:cb:
77:51:5f:3a:7a:78:e1:0d:99:f7:43:33:ed:07:50:
f0:4e:bc:92:c9:b8:8e:f8:6b:b5:8c:04:e8:cc:4c:
d2:9a:8b:0b:3e:f5:b0:13:9c:c0:c5:38:58:92:4c:
8a:4a:42:a6:ae:f4:4a:44:f5:5f:7c:76:7b:87:71:
73:90:36:04:2f:48:4a:96:1d:69:d6:b9:9c:86:79:
e4:3f:22:89:79:11:62:c8:8c:f1:03:29:3a:34:aa:
7a:73:c4:81:32:0c:3c:4b:53:a4:3b:86:a5:9d:c6:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:62:F5:A1:44:C1:4A:B9:32:48:85:8E:8F:73:33:FA:67:3A:CA:52
X509v3 Authority Key Identifier:
keyid:FB:F4:3F:E9:FD:3A:F2:BC:F4:BA:7A:83:F1:11:E6:55:91:25:F3:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Q_6f068rz0unqD8RHmVZEl8_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/zWL1oUTBSrkySIWOj3Mz-mc6ylI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/1-_Q_6f068rz0unqD8RHmVZEl8_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.150.0/24
IPv6:
2a12:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
78:87:e1:df:26:99:92:1a:af:0e:26:0c:8d:6b:30:e2:e9:3d:
68:ef:9f:94:f1:22:8c:a4:42:57:28:1e:67:ad:27:c1:b9:25:
98:f1:cd:be:3c:fd:38:a9:45:2c:26:a3:03:6d:11:72:8b:36:
5b:70:13:b9:b5:66:5d:62:dd:6f:e8:0d:6b:cc:de:57:66:e8:
47:63:bd:22:a5:9b:8e:11:70:b1:33:49:9b:b8:91:5c:95:e4:
69:b9:76:1d:d2:d0:00:8f:42:4c:9f:9a:3f:8d:64:af:48:d1:
d7:15:38:89:74:96:41:58:db:eb:19:20:c1:85:db:7e:2d:94:
0e:d5:16:58:96:f4:e5:08:df:c5:b1:47:a8:5b:d8:07:44:29:
77:f7:8d:0b:0d:4f:b8:3c:8f:78:92:3e:56:48:93:e1:e0:10:
7f:d3:40:dd:44:80:ae:e7:c0:e9:46:e6:7d:99:73:cb:2d:aa:
ee:4e:bb:5e:a4:62:cc:12:63:b3:99:24:6d:3a:b0:e7:16:a0:
fd:d7:ea:85:6d:96:c5:d6:93:65:e3:2e:0d:14:d5:3d:d8:86:
7a:e0:27:65:94:2d:d0:3d:16:ff:95:24:3a:1b:76:bc:f8:a1:
6c:81:1d:83:7f:92:f7:fd:4c:1f:e9:36:34:31:ff:91:04:51:
97:18:0e:fb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVuixI65st+rlp+Rp70L2huMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjQzZmU5ZmQzYWYyYmNmNGJhN2E4M2YxMTFlNjU1OTEy
NWYzZmQwHhcNMjMwMTAxMTgxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDYyZjVhMTQ0YzE0YWI5MzI0ODg1OGU4ZjczMzNmYTY3M2FjYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJSuuU0l+Cx1jGgvq1qn9su96rIU
8nK8tvBfBiKebXCqkWfZiEyVxzXzeifqD02SUSYhlGu1rrMqlkAnxyYnRHQxqSiK
BTVcm80t3XfIPXpxtkIUnAvuOPyFVTVx91MVQPVwoz1NUL/W5heiLIgOOD41DVbz
YKZgJTwq3oK+Q5Vho796iki4MnyvstHYomhA1SUYn8t3UV86enjhDZn3QzPtB1Dw
TrySybiO+Gu1jATozEzSmosLPvWwE5zAxThYkkyKSkKmrvRKRPVffHZ7h3FzkDYE
L0hKlh1p1rmchnnkPyKJeRFiyIzxAyk6NKp6c8SBMgw8S1OkO4alncZEYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM1i9aFEwUq5MkiFjo9zM/pnOspSMB8GA1UdIwQY
MBaAFPv0P+n9OvK89Lp6g/ER5lWRJfP9MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fUV82ZjA2OHJ6MHVucUQ4UkhtVlpFbDhfMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvOGM5N2ZlLTNmOGMtNGRiNC1hYjkz
LTc1MmQ4MWNkZGE0MC8xL3pXTDFvVVRCU3JreVNJV09qM016LW1jNnlsSS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzYvOGM5N2ZlLTNmOGMtNGRiNC1hYjkzLTc1MmQ4MWNkZGE0
MC8xLzEtX1FfNmYwNjhyejB1bnFEOFJIbVZaRWw4XzAuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBADVbZYw
DQQCAAIwBwMFAyoS/cAwDQYJKoZIhvcNAQELBQADggEBAHiH4d8mmZIarw4mDI1r
MOLpPWjvn5TxIoykQlcoHmetJ8G5JZjxzb48/TipRSwmowNtEXKLNltwE7m1Zl1i
3W/oDWvM3ldm6EdjvSKlm44RcLEzSZu4kVyV5Gm5dh3S0ACPQkyfmj+NZK9I0dcV
OIl0lkFY2+sZIMGF234tlA7VFliW9OUI38WxR6hb2AdEKXf3jQsNT7g8j3iSPlZI
k+HgEH/TQN1EgK7nwOlG5n2Zc8stqu5Ou16kYswSY7OZJG06sOcWoP3X6oVtlsXW
k2XjLg0U1T3YhnrgJ2WULdA9Fv+VJDobdrz4oWyBHYN/kvf9TB/pNjQx/5EEUZcY
Dvs=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:52 2024 by rpki-client on console-fra.rpki-client.org