Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/zwdbLmj9klySBnd3DI2kI4nxbVg.roa
File: zwdbLmj9klySBnd3DI2kI4nxbVg.roa (raw, json)
Hash identifier: oZxCqtdIgiUEirS6A41i4TMWX1NecP5g4vS1AVpqLgo=
Subject key identifier: CF:07:5B:2E:68:FD:92:5C:92:06:77:77:0C:8D:A4:23:89:F1:6D:58
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 01856C01477040E0D8791F73EBEB63BE8EBF
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/zwdbLmj9klySBnd3DI2kI4nxbVg.roa
Signing time: Sun 01 Jan 2023 06:25:01 +0000
ROA not before: Sun 01 Jan 2023 06:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12213
IP address blocks: 83.142.64.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 20 Feb 2023 13:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:47:70:40:e0:d8:79:1f:73:eb:eb:63:be:8e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Jan 1 06:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf075b2e68fd925c920677770c8da42389f16d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:f9:3e:69:89:c3:3e:59:31:bc:4e:d3:65:
f7:08:1a:64:de:d8:6d:d9:2a:00:ab:3f:98:8d:85:
d7:3b:f7:6c:ad:71:1d:96:5d:b1:32:64:52:9c:9c:
7b:79:63:15:c9:97:01:e6:af:6d:82:50:75:e4:59:
b5:13:c4:88:32:48:ed:59:59:e3:20:f5:69:c9:b5:
84:ce:0f:95:24:ec:44:1d:b2:ed:39:f7:7a:7a:a2:
10:ee:39:15:af:1a:61:1d:0d:5f:96:1b:2f:29:8f:
04:63:e1:56:7d:6d:16:21:f6:e2:aa:08:22:d4:cf:
c3:0c:d6:25:77:f1:59:a5:8b:df:72:33:94:41:20:
6b:9a:39:db:0e:d4:86:a4:db:cd:97:57:db:af:5d:
f5:5e:c0:eb:de:93:5f:2a:72:dc:51:cc:fb:d1:7e:
4c:88:1c:fb:ab:8c:cc:bc:6f:36:29:89:fb:27:c9:
4e:e2:3a:cf:06:d5:3b:ab:44:0a:d7:cf:a6:bc:75:
2f:d7:fe:33:cf:d7:28:a1:2d:f7:50:78:07:ed:9f:
c0:0b:78:1e:e3:5a:d2:c3:d4:e9:d6:b0:2e:0b:43:
a8:9d:25:f5:9b:83:13:ce:33:bb:eb:7b:aa:de:a1:
f6:c2:65:fd:06:f0:da:59:65:34:26:f6:9a:33:a8:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:5B:2E:68:FD:92:5C:92:06:77:77:0C:8D:A4:23:89:F1:6D:58
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/zwdbLmj9klySBnd3DI2kI4nxbVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.64.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:67:d2:31:f9:85:b5:5c:c1:a8:4a:84:d5:0f:ce:e4:33:74:
6d:50:6f:23:ce:a7:e9:78:32:a7:f3:24:23:65:e4:63:cc:a9:
f5:f0:61:9f:a5:2d:15:30:45:45:fe:cd:a4:35:9a:a1:ec:1d:
f1:0d:5f:c1:12:2c:0a:19:d9:04:62:57:a8:51:ee:a7:9e:f4:
fd:20:97:be:44:40:af:6b:b3:59:79:4c:b9:90:26:3d:4e:02:
03:a9:ea:dc:fe:ef:a0:54:20:5f:1d:00:da:0b:86:90:6b:53:
08:89:87:2f:98:09:77:51:8e:50:47:02:99:6c:3b:19:67:38:
5b:a5:c0:9f:4f:f1:cc:7a:77:79:ff:c4:1d:b1:26:81:84:c1:
6c:b1:0f:7d:1e:2c:80:7e:f7:8a:f2:f9:0f:3b:08:d1:76:b0:
61:b9:5c:da:c2:db:e7:3e:82:7f:14:31:ca:15:5d:c4:e3:d3:
b9:4b:25:f9:95:e7:53:65:30:ee:d8:d0:b1:2f:da:ec:b2:c9:
74:e7:04:7a:8d:64:c7:39:05:bf:03:8f:8f:e9:94:67:22:22:
c7:6c:be:f7:17:d6:89:0a:a4:65:00:7f:bb:c5:7a:7e:af:21:
38:6e:32:80:97:43:e5:30:9a:41:42:8b:cd:f5:95:c3:bf:0f:
30:cd:c5:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsAUdwQODYeR9z6+tjvo6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNTU1NWYxYTJjZWU4OWI3MTM0NjU2MDg2ZjA1NGQ3OTYz
NTNjMWUwHhcNMjMwMTAxMDYyNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjA3NWIyZTY4ZmQ5MjVjOTIwNjc3NzcwYzhkYTQyMzg5ZjE2ZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2X5PmmJwz5ZMbxO02X3CBpk3tht
2SoAqz+YjYXXO/dsrXEdll2xMmRSnJx7eWMVyZcB5q9tglB15Fm1E8SIMkjtWVnj
IPVpybWEzg+VJOxEHbLtOfd6eqIQ7jkVrxphHQ1flhsvKY8EY+FWfW0WIfbiqggi
1M/DDNYld/FZpYvfcjOUQSBrmjnbDtSGpNvNl1fbr131XsDr3pNfKnLcUcz70X5M
iBz7q4zMvG82KYn7J8lO4jrPBtU7q0QK18+mvHUv1/4zz9cooS33UHgH7Z/AC3ge
41rSw9Tp1rAuC0OonSX1m4MTzjO763uq3qH2wmX9BvDaWWU0JvaaM6hw5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8HWy5o/ZJckgZ3dwyNpCOJ8W1YMB8GA1UdIwQY
MBaAFH5VVfGizuibcTRlYIbwVNeWNTweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmxWVjhhTE82SnR4TkdWZ2h2QlUxNVkxUEI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wNWExY2EtMzNjNS00YWVmLTljOWEt
ZjUwZmQ5OTM3M2VjLzEvendkYkxtajlrbHlTQm5kM0RJMmtJNG54YlZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wNWExY2EtMzNjNS00YWVmLTljOWEtZjUwZmQ5OTM3M2Vj
LzEvZmxWVjhhTE82SnR4TkdWZ2h2QlUxNVkxUEI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDU45AMA0G
CSqGSIb3DQEBCwUAA4IBAQCKZ9Ix+YW1XMGoSoTVD87kM3RtUG8jzqfpeDKn8yQj
ZeRjzKn18GGfpS0VMEVF/s2kNZqh7B3xDV/BEiwKGdkEYleoUe6nnvT9IJe+RECv
a7NZeUy5kCY9TgIDqerc/u+gVCBfHQDaC4aQa1MIiYcvmAl3UY5QRwKZbDsZZzhb
pcCfT/HMend5/8QdsSaBhMFssQ99HiyAfveK8vkPOwjRdrBhuVzawtvnPoJ/FDHK
FV3E49O5SyX5ledTZTDu2NCxL9rsssl05wR6jWTHOQW/A4+P6ZRnIiLHbL73F9aJ
CqRlAH+7xXp+ryE4bjKAl0PlMJpBQovN9ZXDvw8wzcVc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org