Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/ZABmDjhMKRDvelq4k7ZXmeJF_I4.roa
File: ZABmDjhMKRDvelq4k7ZXmeJF_I4.roa (raw, json)
Hash identifier: CjER54+FQwAQSf4hs2BEdY1UyhWIiuwWI/FbUcInh8E=
Subject key identifier: 64:00:66:0E:38:4C:29:10:EF:7A:5A:B8:93:B6:57:99:E2:45:FC:8E
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 018C816012610EF4EB6A01F7A8DF726B8604
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/ZABmDjhMKRDvelq4k7ZXmeJF_I4.roa
Signing time: Tue 19 Dec 2023 09:20:06 +0000
ROA not before: Tue 19 Dec 2023 09:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61002
IP address blocks: 188.211.166.0/24 maxlen: 24
185.170.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:60:12:61:0e:f4:eb:6a:01:f7:a8:df:72:6b:86:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Dec 19 09:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6400660e384c2910ef7a5ab893b65799e245fc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:be:3d:16:b5:1c:ad:c4:0d:fa:7c:86:0a:
cf:35:57:16:3e:5d:5a:3e:b6:21:0d:8c:cc:47:59:
57:d7:88:d0:bf:1b:df:94:56:60:54:1c:12:1f:c7:
60:c9:e0:8a:71:8b:66:5b:46:ec:40:e8:83:63:71:
cf:ca:53:18:8d:f0:62:04:0a:e0:45:10:19:e1:f5:
a6:3c:42:24:e5:ff:9c:d5:4b:b8:0e:19:5c:0b:b0:
da:e8:8d:9e:44:2c:28:5d:0a:94:96:84:2d:51:b6:
fb:15:de:20:da:e4:79:b0:d8:ff:29:f1:d1:a3:a3:
c5:a1:7c:61:95:7c:8b:60:da:9d:0e:0d:cc:77:a7:
78:81:db:87:8e:13:3b:da:88:2f:9c:64:b1:14:77:
85:17:dc:00:ba:e0:13:d7:bf:27:5a:a0:97:01:fc:
b8:3a:f0:96:c3:d6:c9:83:d7:27:86:fb:9a:32:ef:
26:72:dc:f9:d9:ba:db:4b:f1:2e:36:9c:7d:c7:44:
e5:77:3b:71:b4:11:d5:e9:dc:f4:55:e1:75:22:a4:
fa:cc:77:62:58:0a:eb:13:f5:d1:f2:80:53:f8:3c:
ed:6c:ae:78:f7:07:f6:0b:9a:63:a8:0b:66:f8:51:
97:91:90:c6:92:f3:63:5a:9d:f8:d0:da:75:1f:83:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:66:0E:38:4C:29:10:EF:7A:5A:B8:93:B6:57:99:E2:45:FC:8E
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/ZABmDjhMKRDvelq4k7ZXmeJF_I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.11.0/24
188.211.166.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d5:9d:9f:7e:fb:a2:3e:9c:16:9b:3f:74:b9:3c:1f:65:97:
2a:75:c5:6e:2f:27:79:b3:aa:25:e6:f0:21:bc:45:45:2c:ad:
95:7d:62:d3:3e:38:bc:18:e1:9b:8e:e4:bf:25:97:04:77:ec:
8a:96:33:c4:5d:e8:79:3c:6a:52:47:4d:4c:b9:81:da:d7:ef:
61:11:03:ca:e2:b6:19:18:7a:5e:54:c8:f7:6d:3c:4d:4a:89:
87:5a:bc:26:68:08:9f:45:3b:33:ad:a5:9b:8a:a6:b9:22:4f:
48:0f:71:9b:49:22:1a:ef:59:3e:3e:7d:e7:d4:ad:72:13:c8:
44:6a:88:c3:9a:09:ae:1f:25:4d:9f:90:a9:bc:ab:7e:b0:04:
eb:b7:f6:f5:8d:fc:3f:63:1b:7f:70:40:41:c3:aa:8d:3b:26:
5b:e4:cb:51:11:db:68:2b:98:53:4e:46:aa:f0:1c:59:c7:c6:
a7:ef:4b:31:0f:68:46:15:ff:da:03:45:b8:7b:7c:36:6e:8f:
df:fa:8d:3e:2e:d8:9f:d8:1a:c3:35:00:d2:e3:4c:02:04:e5:
ed:fb:3e:4e:7d:c4:51:58:56:03:d3:6f:56:58:ff:35:1b:96:
65:fc:33:03:1f:28:54:3a:81:6c:53:a1:b8:8b:14:b7:09:b3:
c6:6c:af:91
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYyBYBJhDvTragH3qN9ya4YEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4
NWZmOGMwHhcNMjMxMjE5MDkyMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDAwNjYwZTM4NGMyOTEwZWY3YTVhYjg5M2I2NTc5OWUyNDVmYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT6+PRa1HK3EDfp8hgrPNVcWPl1a
PrYhDYzMR1lX14jQvxvflFZgVBwSH8dgyeCKcYtmW0bsQOiDY3HPylMYjfBiBArg
RRAZ4fWmPEIk5f+c1Uu4DhlcC7Da6I2eRCwoXQqUloQtUbb7Fd4g2uR5sNj/KfHR
o6PFoXxhlXyLYNqdDg3Md6d4gduHjhM72ogvnGSxFHeFF9wAuuAT178nWqCXAfy4
OvCWw9bJg9cnhvuaMu8mctz52brbS/EuNpx9x0TldztxtBHV6dz0VeF1IqT6zHdi
WArrE/XR8oBT+DztbK549wf2C5pjqAtm+FGXkZDGkvNjWp340Np1H4PQcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGQAZg44TCkQ73pauJO2V5niRfyOMB8GA1UdIwQY
MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt
MjVkYmY0MzgwNGM1LzEvWkFCbURqaE1LUkR2ZWxxNGs3WlhtZUpGX0k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1
LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuaoLAwQA
vNOmMA0GCSqGSIb3DQEBCwUAA4IBAQBU1Z2ffvuiPpwWmz90uTwfZZcqdcVuLyd5
s6ol5vAhvEVFLK2VfWLTPji8GOGbjuS/JZcEd+yKljPEXeh5PGpSR01MuYHa1+9h
EQPK4rYZGHpeVMj3bTxNSomHWrwmaAifRTszraWbiqa5Ik9ID3GbSSIa71k+Pn3n
1K1yE8hEaojDmgmuHyVNn5CpvKt+sATrt/b1jfw/Yxt/cEBBw6qNOyZb5MtREdto
K5hTTkaq8BxZx8an70sxD2hGFf/aA0W4e3w2bo/f+o0+Ltif2BrDNQDS40wCBOXt
+z5OfcRRWFYD029WWP81G5Zl/DMDHyhUOoFsU6G4ixS3CbPGbK+R
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:20 2024 by rpki-client on console-ams.rpki-client.org