Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/ZdyfyCRP4cArSMRS8ArmDRDEARo.roa
File: ZdyfyCRP4cArSMRS8ArmDRDEARo.roa (raw, json)
Hash identifier: I6y3kedk+H6kApM5B2IxENJaNhHkVfu1oVn8PMHWBVg=
Subject key identifier: 65:DC:9F:C8:24:4F:E1:C0:2B:48:C4:52:F0:0A:E6:0D:10:C4:01:1A
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 0185729EE19885F2AD48D736D5143F18D900
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/ZdyfyCRP4cArSMRS8ArmDRDEARo.roa
Signing time: Mon 02 Jan 2023 13:14:53 +0000
ROA not before: Mon 02 Jan 2023 13:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205002
IP address blocks: 185.233.20.0/22 maxlen: 32
2a0c:cf00::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:e1:98:85:f2:ad:48:d7:36:d5:14:3f:18:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Jan 2 13:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65dc9fc8244fe1c02b48c452f00ae60d10c4011a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:4d:a1:22:c3:d6:f3:50:c4:69:17:6b:fe:
26:22:b9:25:90:7c:e2:5a:2e:92:03:b5:c2:5a:37:
51:0f:fa:66:30:0c:45:e7:18:e7:09:70:42:48:02:
75:46:d3:ed:fe:c8:13:cf:53:cb:85:46:13:a8:45:
4f:63:b7:a8:b6:6c:7e:7c:77:93:a7:d4:21:93:8a:
6c:5e:d5:b5:46:29:6d:d8:1d:de:de:4c:92:1e:96:
a2:4f:93:ca:54:e2:bb:e4:7b:34:c2:72:fe:b8:5a:
41:5d:fd:53:87:6a:d6:b3:4a:29:d2:97:92:20:fd:
4e:c8:ec:ee:56:a5:ab:93:35:0a:d1:1a:aa:db:08:
43:12:d9:f2:6b:32:da:08:78:1c:76:a1:3f:5a:8e:
52:5d:80:b0:b0:95:ef:65:d2:ff:45:5b:e1:c5:91:
19:8d:15:7b:da:9f:a4:34:2a:25:39:7a:f2:0c:f8:
a8:42:bf:4b:48:b6:2d:3b:a0:c2:ee:d2:33:5d:b7:
06:0a:c9:8f:71:ac:bc:77:81:6a:3a:5b:eb:d0:d4:
b3:3c:cb:fd:5e:86:2a:1d:d4:5f:72:c8:a2:55:14:
75:ef:91:87:1d:5b:2f:08:8b:a6:3a:bc:6c:48:08:
07:10:a3:68:0a:91:8c:a7:e7:f8:44:c0:49:b9:c4:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:9F:C8:24:4F:E1:C0:2B:48:C4:52:F0:0A:E6:0D:10:C4:01:1A
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/ZdyfyCRP4cArSMRS8ArmDRDEARo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.20.0/22
IPv6:
2a0c:cf00::/29
Signature Algorithm: sha256WithRSAEncryption
49:9f:40:c3:24:c8:f4:39:c1:9d:d4:2b:0d:c6:60:94:41:46:
a3:fb:bf:c8:4f:69:b5:71:38:08:08:48:c4:19:c1:a0:28:d8:
9f:f5:62:87:30:35:c5:f0:7b:20:1b:13:26:cb:9a:f8:98:06:
2e:90:48:bb:5e:b9:80:65:70:c2:9d:d9:9d:a2:fa:0a:3e:19:
ad:09:92:62:fe:53:66:45:14:05:da:8a:ba:82:61:3d:49:d5:
09:a7:75:67:84:2c:01:8e:a4:5b:d5:14:63:a4:43:df:fa:6d:
4f:b2:97:f0:da:ea:f0:b2:9f:7a:c0:8f:72:6b:3c:75:4a:52:
77:db:6e:39:d0:67:0c:bd:88:ac:d6:3c:df:c9:4d:6f:b3:34:
0f:d3:0f:dd:46:32:4c:26:0a:b2:f5:48:e2:2d:a1:ba:3e:b8:
f7:e0:3c:ef:0f:30:4c:a6:b3:87:ed:e0:b9:b7:31:24:d6:73:
d7:ce:60:48:30:cb:12:c6:5b:a1:46:71:37:c0:90:da:2b:29:
dd:79:40:3e:86:74:cb:91:90:86:b0:f2:37:da:6e:9d:60:1c:
67:31:a2:b3:03:f0:b0:ec:f1:da:07:b1:a7:50:45:7b:ad:06:
6a:91:d3:e3:21:8f:0e:0c:1f:c2:c4:4f:7a:42:27:bc:d9:dc:
5d:ed:2e:35
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVynuGYhfKtSNc21RQ/GNkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMGEwZGQyZjk2NGU4NjBmNmJhNGMxNzYxMTJhNWQ3MTJi
YTkzYWEwHhcNMjMwMTAyMTMxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWRjOWZjODI0NGZlMWMwMmI0OGM0NTJmMDBhZTYwZDEwYzQwMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdxNoSLD1vNQxGkXa/4mIrklkHzi
Wi6SA7XCWjdRD/pmMAxF5xjnCXBCSAJ1RtPt/sgTz1PLhUYTqEVPY7eotmx+fHeT
p9Qhk4psXtW1Rilt2B3e3kySHpaiT5PKVOK75Hs0wnL+uFpBXf1Th2rWs0op0peS
IP1OyOzuVqWrkzUK0Rqq2whDEtnyazLaCHgcdqE/Wo5SXYCwsJXvZdL/RVvhxZEZ
jRV72p+kNColOXryDPioQr9LSLYtO6DC7tIzXbcGCsmPcay8d4FqOlvr0NSzPMv9
XoYqHdRfcsiiVRR175GHHVsvCIumOrxsSAgHEKNoCpGMp+f4RMBJucR8vwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGXcn8gkT+HAK0jEUvAK5g0QxAEaMB8GA1UdIwQY
MBaAFF8KDdL5ZOhg9rpMF2ESpdcSupOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdvTjB2bGs2R0QydWt3WFlSS2wxeEs2azZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mZTNiNTYtOTRjYS00Mjk1LWIwY2Mt
MTBiZWQyN2Q3NjZlLzEvWmR5ZnlDUlA0Y0FyU01SUzhBcm1EUkRFQVJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mZTNiNTYtOTRjYS00Mjk1LWIwY2MtMTBiZWQyN2Q3NjZl
LzEvWHdvTjB2bGs2R0QydWt3WFlSS2wxeEs2azZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuekUMA0E
AgACMAcDBQMqDM8AMA0GCSqGSIb3DQEBCwUAA4IBAQBJn0DDJMj0OcGd1CsNxmCU
QUaj+7/IT2m1cTgICEjEGcGgKNif9WKHMDXF8HsgGxMmy5r4mAYukEi7XrmAZXDC
ndmdovoKPhmtCZJi/lNmRRQF2oq6gmE9SdUJp3VnhCwBjqRb1RRjpEPf+m1Pspfw
2urwsp96wI9yazx1SlJ322450GcMvYis1jzfyU1vszQP0w/dRjJMJgqy9UjiLaG6
Prj34DzvDzBMprOH7eC5tzEk1nPXzmBIMMsSxluhRnE3wJDaKyndeUA+hnTLkZCG
sPI32m6dYBxnMaKzA/Cw7PHaB7GnUEV7rQZqkdPjIY8ODB/CxE96Qie82dxd7S41
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:32 2024 by rpki-client on console-ams.rpki-client.org