Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/zPoRjf6xzD8ziRSEksXXy-6Rgh4.roa
File: zPoRjf6xzD8ziRSEksXXy-6Rgh4.roa (raw, json)
Hash identifier: MYFHPrHN9vIvhl8ihjpuvQUKGDa38pq3zhiXvpPfNxI=
Subject key identifier: CC:FA:11:8D:FE:B1:CC:3F:33:89:14:84:92:C5:D7:CB:EE:91:82:1E
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 018571A79B5FA472DC270E23EC81C257F676
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/zPoRjf6xzD8ziRSEksXXy-6Rgh4.roa
Signing time: Mon 02 Jan 2023 08:44:47 +0000
ROA not before: Mon 02 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.25.50.0/24 maxlen: 24
193.25.49.0/24 maxlen: 24
193.25.48.0/24 maxlen: 24
193.25.51.0/24 maxlen: 24
193.25.57.0/24 maxlen: 24
193.25.56.0/24 maxlen: 24
193.25.55.0/24 maxlen: 24
193.25.54.0/24 maxlen: 24
193.25.58.0/24 maxlen: 24
193.25.53.0/24 maxlen: 24
193.25.52.0/24 maxlen: 24
193.25.60.0/24 maxlen: 24
193.25.59.0/24 maxlen: 24
193.25.63.0/24 maxlen: 24
193.25.62.0/24 maxlen: 24
193.25.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:9b:5f:a4:72:dc:27:0e:23:ec:81:c2:57:f6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Jan 2 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccfa118dfeb1cc3f3389148492c5d7cbee91821e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:ad:f8:c5:1f:d3:0d:22:b9:3a:61:c1:73:
fa:e1:bf:cd:dc:0f:99:9a:54:99:58:9b:87:09:e1:
a7:c5:6d:d3:31:b2:fc:2d:ab:fd:fc:a8:28:42:19:
b4:aa:49:42:4f:d2:00:59:e2:c0:e3:01:4d:eb:31:
97:56:7b:24:a1:18:74:08:1d:cd:10:cc:2c:b8:dc:
48:08:e3:9a:fb:71:45:4d:87:1c:f0:a5:c2:d5:b6:
da:d2:3b:bb:46:2a:a4:19:60:16:d0:52:1f:8f:ea:
cd:2f:35:1b:cc:b1:33:05:3c:1c:d1:e3:a8:31:40:
bd:0b:88:80:ec:15:d9:8a:2b:cc:8e:92:e9:e7:81:
97:75:aa:61:6e:02:97:10:11:c3:cb:c3:52:8c:08:
41:44:20:2b:5d:8c:ed:55:cb:d1:df:f1:df:86:86:
c8:9c:9b:19:f2:26:3a:3b:11:cf:86:0b:6b:27:35:
96:cc:b6:1b:68:69:2b:a3:b5:6e:25:75:a2:4b:a0:
2a:60:26:4e:bd:45:c7:0b:52:5d:30:56:0a:a4:6c:
9a:16:f4:6e:25:e4:b4:3f:90:a9:1a:59:76:66:de:
50:ed:9b:c3:b7:11:3f:2c:59:ee:19:46:9b:55:e3:
17:8c:19:0c:d6:ea:1a:2b:03:6f:a6:1a:fd:45:e9:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FA:11:8D:FE:B1:CC:3F:33:89:14:84:92:C5:D7:CB:EE:91:82:1E
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/zPoRjf6xzD8ziRSEksXXy-6Rgh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.48.0/20
Signature Algorithm: sha256WithRSAEncryption
53:47:0d:15:e1:de:e1:4a:6c:b8:32:14:20:c1:49:9b:3c:2f:
18:2a:22:46:0d:4e:27:74:7a:79:68:31:a1:51:ef:62:3e:ed:
0c:de:6d:44:ad:bb:31:5a:e8:51:c1:2c:09:61:9a:85:49:7c:
10:79:d1:a0:f0:df:18:d6:c5:35:1f:80:f1:dc:57:5f:f0:32:
ec:8f:d8:df:06:b0:3d:60:99:c4:7e:bb:29:d6:ba:8c:f8:fb:
41:08:c4:fb:c8:1d:75:b8:f2:b7:9f:e1:bb:94:51:6e:88:63:
08:c7:71:dd:1d:0e:30:10:b0:eb:07:de:cb:a0:38:ce:79:00:
5e:0b:51:c4:b7:c6:b1:bb:69:63:df:7c:db:7d:b8:c2:44:5d:
ba:01:e8:0b:50:da:4c:86:2f:1c:4d:00:4b:44:d6:36:91:8d:
f6:72:a3:46:e2:69:61:1e:ad:23:15:46:eb:3c:06:3b:65:dd:
51:db:06:1c:ec:71:40:a4:52:5d:88:04:06:23:c9:6e:bb:7d:
94:5e:f0:12:f6:e1:0b:53:07:86:1e:bb:83:92:43:f4:09:f6:
29:35:18:0a:c7:cb:58:32:88:a6:3d:fd:d4:9f:d7:15:15:93:
5d:98:4a:4e:05:8e:56:99:1b:09:3d:73:67:72:82:50:9d:b9:
bf:b1:14:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp5tfpHLcJw4j7IHCV/Z2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTVlZDI3NTAwNTQwOGQyYTg2YTIzMDM3MDE3NDQ0MzBl
ZGEzNGEwHhcNMjMwMTAyMDg0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2ZhMTE4ZGZlYjFjYzNmMzM4OTE0ODQ5MmM1ZDdjYmVlOTE4MjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaat+MUf0w0iuTphwXP64b/N3A+Z
mlSZWJuHCeGnxW3TMbL8Lav9/KgoQhm0qklCT9IAWeLA4wFN6zGXVnskoRh0CB3N
EMwsuNxICOOa+3FFTYcc8KXC1bba0ju7RiqkGWAW0FIfj+rNLzUbzLEzBTwc0eOo
MUC9C4iA7BXZiivMjpLp54GXdaphbgKXEBHDy8NSjAhBRCArXYztVcvR3/HfhobI
nJsZ8iY6OxHPhgtrJzWWzLYbaGkro7VuJXWiS6AqYCZOvUXHC1JdMFYKpGyaFvRu
JeS0P5CpGll2Zt5Q7ZvDtxE/LFnuGUabVeMXjBkM1uoaKwNvphr9Rekl1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMz6EY3+scw/M4kUhJLF18vukYIeMB8GA1UdIwQY
MBaAFHAV7SdQBUCNKoaiMDcBdEQw7aNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEt
NGRhZDQ4YTE2ZTQyLzEvelBvUmpmNnh6RDh6aVJTRWtzWFh5LTZSZ2g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEtNGRhZDQ4YTE2ZTQy
LzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwRkwMA0G
CSqGSIb3DQEBCwUAA4IBAQBTRw0V4d7hSmy4MhQgwUmbPC8YKiJGDU4ndHp5aDGh
Ue9iPu0M3m1ErbsxWuhRwSwJYZqFSXwQedGg8N8Y1sU1H4Dx3Fdf8DLsj9jfBrA9
YJnEfrsp1rqM+PtBCMT7yB11uPK3n+G7lFFuiGMIx3HdHQ4wELDrB97LoDjOeQBe
C1HEt8axu2lj33zbfbjCRF26AegLUNpMhi8cTQBLRNY2kY32cqNG4mlhHq0jFUbr
PAY7Zd1R2wYc7HFApFJdiAQGI8luu32UXvAS9uELUweGHruDkkP0CfYpNRgKx8tY
MoimPf3Un9cVFZNdmEpOBY5WmRsJPXNncoJQnbm/sRRo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:53 2024 by rpki-client on console-ams.rpki-client.org