Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/ZcC1Vx_l1SRcPr0rqKTtwFL_BEw.roa
File: ZcC1Vx_l1SRcPr0rqKTtwFL_BEw.roa (raw, json)
Hash identifier: 3xyHg4x6HaFXRlP59NF1kiaCpbIP2kg/x1IrXjgRAEw=
Subject key identifier: 65:C0:B5:57:1F:E5:D5:24:5C:3E:BD:2B:A8:A4:ED:C0:52:FF:04:4C
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 01869381D84DD8149B3048699A71719C4DDC
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/ZcC1Vx_l1SRcPr0rqKTtwFL_BEw.roa
Signing time: Mon 27 Feb 2023 15:33:25 +0000
ROA not before: Mon 27 Feb 2023 15:33:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 141.93.0.0/16 maxlen: 24
141.93.16.0/24 maxlen: 24
141.93.16.0/22 maxlen: 22
141.93.17.0/24 maxlen: 24
141.93.12.0/24 maxlen: 24
141.93.18.0/24 maxlen: 24
141.93.19.0/24 maxlen: 24
141.93.32.0/24 maxlen: 24
141.93.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Feb 2023 15:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:81:d8:4d:d8:14:9b:30:48:69:9a:71:71:9c:4d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Feb 27 15:33:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65c0b5571fe5d5245c3ebd2ba8a4edc052ff044c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b5:81:df:d5:21:83:47:3a:4b:e0:f1:ad:88:
4d:af:ad:fe:c8:b1:1c:cb:7a:28:58:4f:f2:d0:71:
56:53:72:99:c7:88:c2:77:33:b2:a3:95:60:a2:9e:
ff:ad:c4:9c:4b:2c:20:92:19:0a:6d:5c:53:61:78:
49:23:2f:3c:4c:e9:72:5d:b9:45:fe:86:b2:4d:74:
f3:de:ac:5e:bb:d9:e3:2d:67:70:51:bb:5b:64:1f:
58:99:31:96:0c:19:75:07:eb:5f:e0:8b:d7:ba:7a:
f6:80:e1:9a:5d:84:6a:94:d9:5d:a1:4f:c8:3e:8a:
64:da:7a:1b:94:ca:99:72:28:14:bb:6d:eb:74:32:
eb:70:ff:dd:40:77:95:11:f6:53:14:1c:27:37:e0:
e3:a7:53:1a:72:06:f4:c3:3e:5e:34:7d:c7:52:14:
23:ea:81:31:99:3c:2b:45:b1:85:0c:20:0f:04:e8:
4c:3b:84:65:05:d2:84:f9:e1:47:a0:56:45:6c:7b:
8d:94:5a:0d:e1:fa:99:e9:0d:8c:cf:2a:98:dd:3b:
8e:5b:aa:97:4f:87:6f:48:80:45:1b:15:36:e4:09:
8b:93:67:26:69:aa:74:9b:ee:a2:cf:a8:c3:53:7e:
dc:2c:32:a9:af:45:aa:a5:a2:00:67:e4:17:41:d4:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C0:B5:57:1F:E5:D5:24:5C:3E:BD:2B:A8:A4:ED:C0:52:FF:04:4C
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/ZcC1Vx_l1SRcPr0rqKTtwFL_BEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:a5:bd:8d:14:97:a2:21:fb:c9:b3:04:a7:c6:38:5d:44:50:
a1:77:a5:65:6b:2e:e0:45:e4:1a:4f:9e:69:c7:bf:9b:03:fe:
94:dd:2e:c9:87:e2:5a:a1:68:b8:2f:e8:28:fc:6f:ee:1e:aa:
57:25:ca:c3:80:53:79:cb:18:3a:0b:30:34:d2:5d:1b:9f:ae:
97:7d:ba:ef:e1:65:ba:35:0d:8d:5c:94:1b:35:e0:0d:3d:02:
a8:25:d4:18:53:16:28:85:47:1f:b6:c5:5b:cd:7f:5b:40:70:
ba:1a:b5:e3:57:99:81:56:c7:a1:38:30:06:da:2a:66:f7:2f:
d9:2d:1f:8f:6b:2b:83:10:68:59:da:91:a1:00:34:c9:43:4b:
0f:b2:a6:a5:8a:4e:f6:dd:cf:36:39:44:76:80:4e:40:70:df:
7d:32:0e:09:62:0b:36:e2:15:7e:bb:91:4b:03:2a:ea:90:e8:
38:a8:30:9d:0a:e6:82:06:5e:17:63:d1:e4:47:80:be:f3:d7:
78:a7:47:7e:00:49:ae:06:ff:78:9b:22:7d:bd:88:6e:c7:37:
32:68:3b:85:69:ef:64:3a:b5:2f:f6:c8:29:79:86:8f:12:78:
96:3e:5f:7e:b2:66:fe:8f:3a:58:51:76:a8:8a:06:71:17:2d:
1f:20:10:e2
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYaTgdhN2BSbMEhpmnFxnE3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk
OWJlMWQwHhcNMjMwMjI3MTUzMzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWMwYjU1NzFmZTVkNTI0NWMzZWJkMmJhOGE0ZWRjMDUyZmYwNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rWB39Uhg0c6S+DxrYhNr63+yLEc
y3ooWE/y0HFWU3KZx4jCdzOyo5Vgop7/rcScSywgkhkKbVxTYXhJIy88TOlyXblF
/oayTXTz3qxeu9njLWdwUbtbZB9YmTGWDBl1B+tf4IvXunr2gOGaXYRqlNldoU/I
Popk2noblMqZcigUu23rdDLrcP/dQHeVEfZTFBwnN+Djp1Macgb0wz5eNH3HUhQj
6oExmTwrRbGFDCAPBOhMO4RlBdKE+eFHoFZFbHuNlFoN4fqZ6Q2MzyqY3TuOW6qX
T4dvSIBFGxU25AmLk2cmaap0m+6iz6jDU37cLDKpr0WqpaIAZ+QXQdTE1QIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFGXAtVcf5dUkXD69K6ik7cBS/wRMMB8GA1UdIwQY
MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct
N2EwMzRkMTcwYjg1LzEvWmNDMVZ4X2wxU1JjUHIwcnFLVHR3RkxfQkV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1
LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjV0wDQYJ
KoZIhvcNAQELBQADggEBAEelvY0Ul6Ih+8mzBKfGOF1EUKF3pWVrLuBF5BpPnmnH
v5sD/pTdLsmH4lqhaLgv6Cj8b+4eqlclysOAU3nLGDoLMDTSXRufrpd9uu/hZbo1
DY1clBs14A09Aqgl1BhTFiiFRx+2xVvNf1tAcLoateNXmYFWx6E4MAbaKmb3L9kt
H49rK4MQaFnakaEANMlDSw+ypqWKTvbdzzY5RHaATkBw330yDgliCzbiFX67kUsD
KuqQ6DioMJ0K5oIGXhdj0eRHgL7z13inR34ASa4G/3ibIn29iG7HNzJoO4Vp72Q6
tS/2yCl5ho8SeJY+X36yZv6POlhRdqiKBnEXLR8gEOI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org