Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/ZCid1FVlkAC2ZK09iniCncY9FQM.roa
File: ZCid1FVlkAC2ZK09iniCncY9FQM.roa (raw, json)
Hash identifier: aL6d9+ZlqOwANfZ0JrBLWul3xG4qV0ZIULaRSev3Ta8=
Subject key identifier: 64:28:9D:D4:55:65:90:00:B6:64:AD:3D:8A:78:82:9D:C6:3D:15:03
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 0192805428B13E89EBF57A4BC0A3050330CB
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/ZCid1FVlkAC2ZK09iniCncY9FQM.roa
Signing time: Sat 12 Oct 2024 10:44:11 +0000
ROA not before: Sat 12 Oct 2024 10:44:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.39.196.0/22 maxlen: 22
185.10.122.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 13 Oct 2024 17:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:80:54:28:b1:3e:89:eb:f5:7a:4b:c0:a3:05:03:30:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 12 10:44:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64289dd455659000b664ad3d8a78829dc63d1503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b7:1c:f8:8b:94:c1:89:03:1a:32:07:70:a6:
62:b2:19:4d:76:d2:02:9c:59:dc:29:4a:f5:a5:51:
f9:96:7d:89:6f:93:d8:fe:3e:08:60:43:bb:aa:9a:
2e:24:c4:c9:83:74:23:b1:7d:12:5d:2d:a8:ed:29:
a9:4e:66:3f:c7:d9:cf:0f:78:c7:7c:d9:2a:c7:6b:
99:32:aa:25:08:c5:be:65:a8:63:cd:37:c6:a6:16:
e1:36:09:99:48:9b:9e:81:50:8b:b5:d3:a2:20:8f:
55:d8:68:16:f5:04:74:d2:e5:cf:e2:21:16:cc:21:
e7:32:a1:05:85:ce:02:ed:67:10:66:63:f3:6e:86:
f7:79:5b:51:9b:91:36:33:8c:b1:8d:a4:1c:5b:a5:
c4:94:4d:b9:db:68:2e:60:97:c3:42:2e:4d:5b:16:
b2:ba:57:11:92:db:89:a3:82:cc:dc:1a:5a:00:5b:
b8:43:1a:1a:6f:d9:a6:a3:ad:c1:37:e9:2d:ef:9d:
4f:3e:fd:9f:38:35:1e:cf:fc:d0:7a:b6:f7:5a:54:
76:27:51:26:81:df:2e:4b:ff:03:f0:0e:49:a3:ac:
6f:cc:26:a9:74:27:00:10:a7:c9:f8:9b:77:ca:bc:
ee:c9:1e:a5:39:d6:dc:c5:7c:b1:b0:27:df:b1:44:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:28:9D:D4:55:65:90:00:B6:64:AD:3D:8A:78:82:9D:C6:3D:15:03
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/ZCid1FVlkAC2ZK09iniCncY9FQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.196.0/22
185.10.122.0/23
Signature Algorithm: sha256WithRSAEncryption
47:0f:c8:59:41:ff:21:93:88:f8:53:b3:c2:98:97:81:07:69:
94:76:6f:96:45:fc:21:ff:93:45:d7:20:db:f3:83:36:58:70:
ec:0f:7a:06:80:1b:98:a3:7b:22:13:09:07:5c:80:d0:4a:4b:
a1:84:57:99:48:03:1d:14:c8:7a:69:64:6e:3f:c0:26:4b:85:
98:5e:2a:65:70:e4:91:02:51:8c:0f:34:6b:c5:ef:bb:a0:bd:
73:e8:b6:98:4f:a9:37:0b:95:2d:a9:4c:4f:b2:00:3c:83:a7:
57:4d:ec:fd:2a:24:3f:97:3f:ca:29:ba:f3:9b:42:f7:78:58:
06:b7:e4:28:6e:eb:4c:3d:98:e5:e9:e5:d9:13:9a:dc:4d:c9:
a3:86:5b:5c:ad:ae:c6:a4:ba:cb:ac:e6:eb:a6:0b:6a:f7:11:
53:87:55:2b:f9:93:c8:ef:c3:27:93:6d:17:da:b0:2a:c9:43:
51:3e:5a:ce:fd:e2:5d:b9:b5:9d:a9:c4:c9:03:c2:f8:d9:e1:
0f:06:70:d1:9d:88:d1:46:ba:57:d3:83:d8:ed:16:2a:51:59:
60:e8:69:39:cd:c5:bf:68:03:f4:c8:bf:26:19:cb:cf:d2:32:
4e:04:df:84:ec:ec:99:2b:24:7f:07:38:08:8c:ca:b5:39:1c:
bc:cb:77:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZKAVCixPonr9XpLwKMFAzDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2
YTU1YTMwHhcNMjQxMDEyMTA0NDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDI4OWRkNDU1NjU5MDAwYjY2NGFkM2Q4YTc4ODI5ZGM2M2QxNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Lcc+IuUwYkDGjIHcKZishlNdtIC
nFncKUr1pVH5ln2Jb5PY/j4IYEO7qpouJMTJg3QjsX0SXS2o7SmpTmY/x9nPD3jH
fNkqx2uZMqolCMW+ZahjzTfGphbhNgmZSJuegVCLtdOiII9V2GgW9QR00uXP4iEW
zCHnMqEFhc4C7WcQZmPzbob3eVtRm5E2M4yxjaQcW6XElE2522guYJfDQi5NWxay
ulcRktuJo4LM3BpaAFu4Qxoab9mmo63BN+kt751PPv2fODUez/zQerb3WlR2J1Em
gd8uS/8D8A5Jo6xvzCapdCcAEKfJ+Jt3yrzuyR6lOdbcxXyxsCffsUS0QQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGQondRVZZAAtmStPYp4gp3GPRUDMB8GA1UdIwQY
MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct
YzUxMWEzZTkxMmI2LzEvWkNpZDFGVmxrQUMyWkswOWluaUNuY1k5RlFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2
LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBSfEAwQB
uQp6MA0GCSqGSIb3DQEBCwUAA4IBAQBHD8hZQf8hk4j4U7PCmJeBB2mUdm+WRfwh
/5NF1yDb84M2WHDsD3oGgBuYo3siEwkHXIDQSkuhhFeZSAMdFMh6aWRuP8AmS4WY
XiplcOSRAlGMDzRrxe+7oL1z6LaYT6k3C5UtqUxPsgA8g6dXTez9KiQ/lz/KKbrz
m0L3eFgGt+QobutMPZjl6eXZE5rcTcmjhltcra7GpLrLrObrpgtq9xFTh1Ur+ZPI
78Mnk20X2rAqyUNRPlrO/eJdubWdqcTJA8L42eEPBnDRnYjRRrpX04PY7RYqUVlg
6Gk5zcW/aAP0yL8mGcvP0jJOBN+E7OyZKyR/BzgIjMq1ORy8y3eJ
Generated at Sun Oct 13 19:15:30 2024 by rpki-client on console-fra.rpki-client.org