Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/zsIJ7BCQTD5osn2M5eAvCK-DApc.roa
File: zsIJ7BCQTD5osn2M5eAvCK-DApc.roa (raw, json)
Hash identifier: Z+xsYRRatr9ES3EP2x5PSCR6DRSyiHyUkSK6rcNc2P8=
Subject key identifier: CE:C2:09:EC:10:90:4C:3E:68:B2:7D:8C:E5:E0:2F:08:AF:83:02:97
Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial: 018A8301DDEFAD4F81619FC97C690504C8A2
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/zsIJ7BCQTD5osn2M5eAvCK-DApc.roa
Signing time: Mon 11 Sep 2023 06:50:52 +0000
ROA not before: Mon 11 Sep 2023 06:50:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47794
IP address blocks: 194.11.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:01:dd:ef:ad:4f:81:61:9f:c9:7c:69:05:04:c8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Validity
Not Before: Sep 11 06:50:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cec209ec10904c3e68b27d8ce5e02f08af830297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:e3:9b:36:52:6e:80:b6:82:b9:0a:11:b2:
5d:fd:a0:1c:02:4d:95:2d:cf:98:29:51:05:2e:8e:
77:d8:21:ef:79:52:aa:3c:71:94:e7:39:1d:57:dc:
89:d4:d4:75:7f:f9:7b:fd:6f:ab:a5:cc:29:29:21:
d1:4b:52:59:59:34:8c:f1:98:b5:08:0b:d6:27:15:
0f:8c:7e:ba:99:21:64:e4:0d:cf:a5:59:be:23:10:
52:70:46:4a:de:84:5b:a5:f2:06:74:e0:69:a1:e9:
45:51:e7:d6:6b:d5:61:f8:52:1b:b9:61:64:32:4f:
8b:02:82:dc:6b:e5:d9:15:2c:a0:70:35:9c:ad:f0:
b0:05:d5:c5:0f:a2:07:0e:47:86:c5:6f:16:1e:85:
f8:5b:f0:e3:54:17:46:49:e8:d2:3e:71:3d:26:fd:
90:d3:60:a4:f1:29:49:4a:88:7b:9a:d5:10:67:5c:
70:b7:a6:90:a8:93:c1:5b:bd:ab:c9:e2:72:ae:a1:
14:6a:5d:e5:29:98:54:86:df:87:6d:f9:ff:ea:f7:
b9:55:68:cd:81:a3:cf:39:65:8d:47:50:94:9b:fe:
34:13:6f:8a:c7:c0:49:7e:ba:c0:92:ad:f7:86:49:
36:0c:a9:0e:11:ba:0f:63:50:a7:9b:12:cc:60:0f:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C2:09:EC:10:90:4C:3E:68:B2:7D:8C:E5:E0:2F:08:AF:83:02:97
X509v3 Authority Key Identifier:
keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/zsIJ7BCQTD5osn2M5eAvCK-DApc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.247.0/24
Signature Algorithm: sha256WithRSAEncryption
13:bb:5c:3f:fe:b4:4f:9b:79:b8:d5:f5:89:0d:7a:f0:4e:11:
13:a3:fb:15:5e:26:28:60:8e:4d:35:d5:c7:e9:37:90:77:4c:
42:a1:fb:36:20:a4:05:84:42:d9:8e:db:08:e6:90:77:9d:c0:
3f:0b:87:bb:30:99:44:2c:03:5f:ea:5a:b1:db:46:bd:16:24:
57:40:02:a2:69:7f:96:1d:05:da:7c:7a:b6:b9:27:85:b2:17:
e6:fb:bb:e9:d5:d8:c4:64:d7:50:5e:53:0b:ab:43:f0:3e:ca:
97:4f:cd:30:66:54:12:3e:af:d2:44:77:ad:2d:ca:e2:3d:db:
0d:72:48:ef:8e:2b:2e:66:58:10:f9:3e:90:db:8b:b8:f8:53:
ea:ac:6a:40:e4:69:d2:c7:52:2a:16:ea:b1:d6:b9:2b:b7:ee:
81:f3:da:f6:0c:bd:e9:ed:a1:b4:91:2b:35:fd:f6:9a:da:84:
40:e5:bf:b3:d9:e5:f2:a2:90:35:8c:77:3d:fd:ba:dd:52:24:
2a:7f:d4:a0:8e:73:72:25:e5:4c:ad:3b:87:b2:00:0f:42:fd:
43:84:cc:8e:fc:46:15:b4:36:7c:43:36:f8:7a:17:f3:14:bb:
c1:fa:87:7e:d1:93:e4:57:66:cd:6f:59:81:15:64:b4:b0:26:
d3:cd:cc:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqDAd3vrU+BYZ/JfGkFBMiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODNiMDJlMTBjYTgyMWJmZTFiZTZlNzUxZDkyY2Y3M2Q2
ZDRjMGIwHhcNMjMwOTExMDY1MDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWMyMDllYzEwOTA0YzNlNjhiMjdkOGNlNWUwMmYwOGFmODMwMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzDjmzZSboC2grkKEbJd/aAcAk2V
Lc+YKVEFLo532CHveVKqPHGU5zkdV9yJ1NR1f/l7/W+rpcwpKSHRS1JZWTSM8Zi1
CAvWJxUPjH66mSFk5A3PpVm+IxBScEZK3oRbpfIGdOBpoelFUefWa9Vh+FIbuWFk
Mk+LAoLca+XZFSygcDWcrfCwBdXFD6IHDkeGxW8WHoX4W/DjVBdGSejSPnE9Jv2Q
02Ck8SlJSoh7mtUQZ1xwt6aQqJPBW72ryeJyrqEUal3lKZhUht+Hbfn/6ve5VWjN
gaPPOWWNR1CUm/40E2+Kx8BJfrrAkq33hkk2DKkOEboPY1CnmxLMYA91LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM7CCewQkEw+aLJ9jOXgLwivgwKXMB8GA1UdIwQY
MBaAFBmDsC4QyoIb/hvm51HZLPc9bUwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEt
Y2RhMzYyNTYyOTZjLzEvenNJSjdCQ1FURDVvc24yTTVlQXZDSy1EQXBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEtY2RhMzYyNTYyOTZj
LzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgv3MA0G
CSqGSIb3DQEBCwUAA4IBAQATu1w//rRPm3m41fWJDXrwThETo/sVXiYoYI5NNdXH
6TeQd0xCofs2IKQFhELZjtsI5pB3ncA/C4e7MJlELANf6lqx20a9FiRXQAKiaX+W
HQXafHq2uSeFshfm+7vp1djEZNdQXlMLq0PwPsqXT80wZlQSPq/SRHetLcriPdsN
ckjvjisuZlgQ+T6Q24u4+FPqrGpA5GnSx1IqFuqx1rkrt+6B89r2DL3p7aG0kSs1
/faa2oRA5b+z2eXyopA1jHc9/brdUiQqf9SgjnNyJeVMrTuHsgAPQv1DhMyO/EYV
tDZ8Qzb4ehfzFLvB+od+0ZPkV2bNb1mBFWS0sCbTzcwY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:41 2024 by rpki-client on console-ams.rpki-client.org