Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/zA8Vs44_0ZhnwmilnbhTz8olC4U.roa
File: zA8Vs44_0ZhnwmilnbhTz8olC4U.roa (raw, json)
Hash identifier: pNR9LQxA/m3xFLDSWt4FhSLfUwx1fSh63EgN6X8pudQ=
Subject key identifier: CC:0F:15:B3:8E:3F:D1:98:67:C2:68:A5:9D:B8:53:CF:CA:25:0B:85
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 01857169A9B0E97F217C598F7D789D856FDD
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/zA8Vs44_0ZhnwmilnbhTz8olC4U.roa
Signing time: Mon 02 Jan 2023 07:37:08 +0000
ROA not before: Mon 02 Jan 2023 07:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 87.238.140.0/24 maxlen: 24
87.238.140.0/22 maxlen: 24
2a06:56c1::/32 maxlen: 48
2a06:56c1::/40 maxlen: 48
2a06:56c2::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:a9:b0:e9:7f:21:7c:59:8f:7d:78:9d:85:6f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 2 07:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc0f15b38e3fd19867c268a59db853cfca250b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:1f:4f:3f:1d:c1:4e:9c:02:99:ea:4e:e2:
6f:8f:ec:ae:cb:2d:41:ec:91:34:2f:30:22:f4:08:
de:a8:35:54:d7:b8:bd:7c:e4:b7:8e:96:71:03:91:
38:38:44:94:18:1a:cc:72:a1:88:57:aa:e7:6d:ba:
13:51:53:66:9e:64:71:d4:c9:e2:3f:33:b8:70:cc:
73:8c:fa:d0:20:51:33:8a:f9:79:cc:32:8b:ae:02:
6f:0a:88:37:d0:b8:23:85:54:c0:7f:e7:2c:fa:f9:
f2:13:f4:ab:d1:2d:34:d0:ff:90:68:51:58:bc:73:
b8:a4:6b:3a:17:83:66:1c:7d:99:36:ed:63:9d:f7:
c4:19:67:2b:3b:18:20:05:a7:34:c6:78:d9:01:3b:
70:cf:33:6a:96:16:bb:f8:aa:09:0c:17:18:e3:7e:
17:20:2f:19:70:eb:29:fe:a4:0c:b8:d7:81:53:76:
23:48:23:71:8b:56:7e:50:b0:7b:7c:59:40:01:7c:
9c:83:da:f0:38:b3:0e:8b:8a:41:8c:ff:47:2b:5a:
fb:fd:4b:67:aa:c8:26:9e:d0:58:fa:36:fa:ef:ff:
8e:77:00:a9:ac:38:99:3b:42:16:03:9b:01:0f:d3:
62:41:5c:64:e6:f4:4e:67:3e:26:a5:30:3d:f0:d4:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0F:15:B3:8E:3F:D1:98:67:C2:68:A5:9D:B8:53:CF:CA:25:0B:85
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/zA8Vs44_0ZhnwmilnbhTz8olC4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.140.0/22
IPv6:
2a06:56c1::-2a06:56c2:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
72:c2:f9:74:e3:d6:2f:78:7d:ae:ad:57:8e:18:53:90:80:aa:
a2:03:7b:61:c6:3c:89:94:bf:a1:42:4a:80:f9:91:14:04:3e:
93:01:0f:a5:26:4c:8e:17:b4:84:3a:7e:b0:0f:ff:d2:43:11:
ea:16:dd:a3:bf:2a:48:db:6f:f9:3e:5f:fe:1c:3c:df:f1:88:
ed:56:af:8f:84:01:bc:f8:ef:2f:66:b1:a4:04:35:82:20:fd:
77:2d:d8:ac:f0:fc:3e:18:b6:a7:b7:68:3f:c8:f0:4d:de:31:
5d:be:9f:9b:3b:34:02:5a:1c:cc:01:d8:31:2a:eb:b6:81:57:
d5:d0:0e:81:eb:f1:8a:16:4a:ea:c6:3a:b3:b4:3c:b3:b0:d7:
10:78:0e:dd:f5:e7:27:39:3a:ed:56:2c:f9:1c:cc:25:03:09:
04:bb:58:0e:80:39:e4:5d:42:08:4c:c0:be:0d:c6:ce:be:eb:
46:25:8a:41:42:af:8a:cb:b1:a1:b6:fa:ad:68:ea:10:49:74:
d7:e4:6e:4c:56:9e:1c:3b:fd:75:ba:cb:93:95:f3:75:5e:3c:
ec:e6:f1:f0:73:00:c4:7f:fa:c8:d9:f0:a7:83:fc:09:69:9c:
ef:01:9f:02:74:cc:23:bc:3e:3b:f6:66:a2:9a:0d:71:43:5b:
ac:d5:e3:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVxaamw6X8hfFmPfXidhW/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MmYwZTQyYjA4YWE0NTFmYzU4M2EzNThlYzM3MGZmYmQy
ZGFjNjgwHhcNMjMwMTAyMDczNzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzBmMTViMzhlM2ZkMTk4NjdjMjY4YTU5ZGI4NTNjZmNhMjUwYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPQfTz8dwU6cApnqTuJvj+yuyy1B
7JE0LzAi9AjeqDVU17i9fOS3jpZxA5E4OESUGBrMcqGIV6rnbboTUVNmnmRx1Mni
PzO4cMxzjPrQIFEzivl5zDKLrgJvCog30LgjhVTAf+cs+vnyE/Sr0S000P+QaFFY
vHO4pGs6F4NmHH2ZNu1jnffEGWcrOxggBac0xnjZATtwzzNqlha7+KoJDBcY434X
IC8ZcOsp/qQMuNeBU3YjSCNxi1Z+ULB7fFlAAXycg9rwOLMOi4pBjP9HK1r7/Utn
qsgmntBY+jb67/+OdwCprDiZO0IWA5sBD9NiQVxk5vROZz4mpTA98NQc+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwPFbOOP9GYZ8JopZ24U8/KJQuFMB8GA1UdIwQY
MBaAFGcvDkKwiqRR/Fg6NY7DcP+9LaxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTct
ZjBiOTYyZjUyNDE0LzEvekE4VnM0NF8wWmhud21pbG5iaFR6OG9sQzRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTctZjBiOTYyZjUyNDE0
LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQCV+6MMBcE
AgACMBEwDwMFACoGVsEDBgAqBlbCADANBgkqhkiG9w0BAQsFAAOCAQEAcsL5dOPW
L3h9rq1XjhhTkICqogN7YcY8iZS/oUJKgPmRFAQ+kwEPpSZMjhe0hDp+sA//0kMR
6hbdo78qSNtv+T5f/hw83/GI7Vavj4QBvPjvL2axpAQ1giD9dy3YrPD8Phi2p7do
P8jwTd4xXb6fmzs0AloczAHYMSrrtoFX1dAOgevxihZK6sY6s7Q8s7DXEHgO3fXn
Jzk67VYs+RzMJQMJBLtYDoA55F1CCEzAvg3Gzr7rRiWKQUKvisuxobb6rWjqEEl0
1+RuTFaeHDv9dbrLk5XzdV487Obx8HMAxH/6yNnwp4P8CWmc7wGfAnTMI7w+O/Zm
opoNcUNbrNXjHQ==
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:38 2024 by rpki-client on console-ams.rpki-client.org