Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZvX-AAAaOdqE7mqRHcSZvfpU93Q.roa
File: ZvX-AAAaOdqE7mqRHcSZvfpU93Q.roa (raw, json)
Hash identifier: Ug4P/KeDWLQUcL0Ra9m5S3zPuhWJrM/tSUXAu1KoLDU=
Subject key identifier: 66:F5:FE:00:00:1A:39:DA:84:EE:6A:91:1D:C4:99:BD:FA:54:F7:74
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD52F976CBA77F080786AC081E55E66
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZvX-AAAaOdqE7mqRHcSZvfpU93Q.roa
Signing time: Mon 02 Jan 2023 00:15:20 +0000
ROA not before: Mon 02 Jan 2023 00:15:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51909
IP address blocks: 89.47.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:2f:97:6c:ba:77:f0:80:78:6a:c0:81:e5:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66f5fe00001a39da84ee6a911dc499bdfa54f774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:c7:9a:0b:80:a7:30:52:14:2b:6a:1c:3c:
1a:17:9e:01:67:d4:ba:7c:37:a7:38:97:19:94:4d:
e9:5c:02:43:1b:18:7a:99:07:80:f0:78:57:f3:fb:
62:ce:24:36:2a:cc:d6:97:2a:6e:d0:6d:2d:92:a5:
66:cb:ac:0e:d8:77:e3:0b:af:35:e1:20:5c:88:f5:
36:41:8a:86:93:42:eb:ef:d3:68:b4:31:6c:ee:13:
87:ab:11:d7:3f:40:81:34:0e:84:3b:54:4c:38:4c:
f3:76:51:34:55:d2:3a:5b:a7:e0:33:00:e7:d0:09:
08:cc:86:54:b5:36:8c:76:f0:0f:0d:e1:8b:19:5a:
c5:fe:c7:a5:b2:d1:8d:43:c2:1f:67:58:82:39:0c:
fd:3b:c6:e5:d3:a6:5a:34:69:6a:14:46:30:14:fe:
1d:35:79:9d:71:5b:6f:40:67:31:7c:26:c9:73:09:
6f:16:eb:e9:b2:24:6d:3a:24:32:0e:0d:cf:ac:84:
55:a3:c9:46:f1:83:2a:9a:3a:22:b9:58:e9:8c:bc:
84:24:82:77:9e:55:94:4c:88:17:72:14:0e:36:44:
01:40:cd:8c:ab:78:05:3c:c9:7d:de:58:f5:d5:e4:
37:5f:72:79:d7:8d:2c:6d:19:ae:73:a0:9c:a0:7d:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F5:FE:00:00:1A:39:DA:84:EE:6A:91:1D:C4:99:BD:FA:54:F7:74
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZvX-AAAaOdqE7mqRHcSZvfpU93Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.192.0/22
Signature Algorithm: sha256WithRSAEncryption
94:7d:3d:c4:4c:a1:8a:4f:e1:94:08:74:dc:91:8a:d7:31:f1:
b6:77:b7:a7:f9:fd:cd:fb:3b:d0:75:ae:65:77:1c:eb:bf:10:
14:55:6c:ad:2c:e9:b8:62:72:a2:56:96:71:24:3c:b2:08:e6:
41:62:d2:1e:74:97:7c:8f:e0:c8:4c:dd:2b:ed:bc:8e:81:01:
9f:8e:69:01:07:68:03:10:fb:13:88:a9:45:1c:6c:ba:00:47:
bb:c2:95:f8:7b:06:3a:91:a9:39:d4:b6:8a:bd:4d:7c:2f:33:
f2:a9:93:7d:df:76:33:08:95:a5:67:63:2f:dd:26:db:60:91:
0e:0a:72:d9:b9:a9:b4:27:25:52:49:64:6c:be:3f:36:6e:15:
e0:bd:1e:2c:97:a9:64:78:f0:fd:75:62:98:0f:be:f2:d3:c1:
59:81:48:19:88:70:ed:59:24:b9:01:8c:1b:31:b1:1d:16:b6:
f6:b2:48:63:9e:6a:cf:03:35:ae:7f:2f:f3:10:da:af:ac:1b:
86:62:de:e4:51:18:e4:b2:f9:de:5f:99:2b:20:59:b6:90:c2:
fe:a4:44:4a:9c:f7:e4:a1:27:76:88:77:1f:b7:45:7c:de:0b:
c6:73:02:c2:ae:b8:ba:9a:e2:11:1f:f9:74:9f:96:d0:18:87:
a6:6f:bf:87
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv1S+XbLp38IB4asCB5V5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmY1ZmUwMDAwMWEzOWRhODRlZTZhOTExZGM0OTliZGZhNTRmNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBfHmguApzBSFCtqHDwaF54BZ9S6
fDenOJcZlE3pXAJDGxh6mQeA8HhX8/tiziQ2KszWlypu0G0tkqVmy6wO2HfjC681
4SBciPU2QYqGk0Lr79NotDFs7hOHqxHXP0CBNA6EO1RMOEzzdlE0VdI6W6fgMwDn
0AkIzIZUtTaMdvAPDeGLGVrF/selstGNQ8IfZ1iCOQz9O8bl06ZaNGlqFEYwFP4d
NXmdcVtvQGcxfCbJcwlvFuvpsiRtOiQyDg3PrIRVo8lG8YMqmjoiuVjpjLyEJIJ3
nlWUTIgXchQONkQBQM2Mq3gFPMl93lj11eQ3X3J5140sbRmuc6CcoH3r5QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGb1/gAAGjnahO5qkR3Emb36VPd0MB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1p2WC1BQUFhT2RxRTdtcVJIY1NadmZwVTkzUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJZL8Aw
DQYJKoZIhvcNAQELBQADggEBAJR9PcRMoYpP4ZQIdNyRitcx8bZ3t6f5/c37O9B1
rmV3HOu/EBRVbK0s6bhicqJWlnEkPLII5kFi0h50l3yP4MhM3SvtvI6BAZ+OaQEH
aAMQ+xOIqUUcbLoAR7vClfh7BjqRqTnUtoq9TXwvM/Kpk33fdjMIlaVnYy/dJttg
kQ4Kctm5qbQnJVJJZGy+PzZuFeC9HiyXqWR48P11YpgPvvLTwVmBSBmIcO1ZJLkB
jBsxsR0WtvaySGOeas8DNa5/L/MQ2q+sG4Zi3uRRGOSy+d5fmSsgWbaQwv6kREqc
9+ShJ3aIdx+3RXzeC8ZzAsKuuLqa4hEf+XSfltAYh6Zvv4c=
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org