Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ZtAIfRw6ix8aVx--2G-yOJxtouQ.roa
File: ZtAIfRw6ix8aVx--2G-yOJxtouQ.roa (raw, json)
Hash identifier: /OWcYGCNhTaQ8QKgM0S8kQyptGsG99FPHIjtGz70BdA=
Subject key identifier: 66:D0:08:7D:1C:3A:8B:1F:1A:57:1F:BE:D8:6F:B2:38:9C:6D:A2:E4
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 018BC5CD72096BE006FF8DF45E9A96219D9E
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ZtAIfRw6ix8aVx--2G-yOJxtouQ.roa
Signing time: Sun 12 Nov 2023 23:10:57 +0000
ROA not before: Sun 12 Nov 2023 23:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53340
IP address blocks: 176.111.222.0/24 maxlen: 24
193.8.194.0/24 maxlen: 24
147.189.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c5:cd:72:09:6b:e0:06:ff:8d:f4:5e:9a:96:21:9d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Nov 12 23:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66d0087d1c3a8b1f1a571fbed86fb2389c6da2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ce:35:c0:d7:45:b1:b0:48:96:f8:5a:63:bb:
2f:12:9e:05:72:86:7f:b1:10:df:85:0e:73:7b:cf:
6b:30:3a:b4:52:2c:92:47:9c:13:c2:d6:cd:fc:63:
0d:ba:82:b2:e7:3a:ac:a6:13:0c:fd:a4:62:6a:f6:
0c:97:ca:91:32:f7:24:40:b9:39:b3:83:73:48:f7:
84:c4:6e:82:23:ad:7e:01:e8:d7:9b:cc:29:d7:73:
c0:83:3b:e9:91:33:8c:51:76:c1:2c:f2:38:f5:5f:
32:73:56:c7:81:4b:57:2f:39:2f:df:0c:13:93:7d:
a4:14:31:3d:05:bb:89:2d:21:2c:d3:9b:c3:a1:4f:
c8:24:34:a7:d8:c9:81:d3:88:81:ff:a9:97:fe:5c:
9e:5c:af:b8:f7:5d:0b:1b:7f:ce:3a:56:77:3a:3b:
c1:a0:04:50:f5:ed:eb:ea:21:c9:9a:d9:2b:9c:52:
d5:c0:cb:88:51:7f:a0:a0:d4:86:3e:ef:94:a5:ca:
ef:ae:63:c1:88:01:34:78:32:f7:31:3c:53:2e:da:
e8:af:df:55:f6:5e:43:3b:9d:f3:bc:ed:b4:db:76:
19:26:fb:ea:8a:f2:a7:b1:3a:90:bc:4d:d3:d7:9e:
75:4a:6b:48:92:db:3e:3a:5c:19:b7:f1:25:3b:64:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D0:08:7D:1C:3A:8B:1F:1A:57:1F:BE:D8:6F:B2:38:9C:6D:A2:E4
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ZtAIfRw6ix8aVx--2G-yOJxtouQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.133.0/24
176.111.222.0/24
193.8.194.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f3:b0:d7:a3:1b:16:5e:8a:de:18:4f:23:ac:4f:2e:88:2a:
4f:b5:29:8e:e7:b7:a3:f8:35:85:be:5b:b6:b4:dc:43:ec:67:
d6:64:9c:95:7f:f5:d9:d4:aa:94:dc:fa:03:25:40:c9:40:e6:
97:72:2d:ce:2f:d3:8d:ff:a4:1e:84:57:37:95:e2:65:4a:b4:
83:3c:10:23:07:7d:4a:53:4a:24:23:5b:e6:f0:d6:34:39:89:
4e:29:15:99:0d:a7:2d:26:38:a8:ef:30:e1:97:3a:5b:83:2e:
49:d7:17:87:17:fe:3c:1f:a1:3d:c1:ee:d4:78:ec:9a:74:9a:
14:e1:59:a3:3c:36:2c:b7:8f:9c:01:1b:ca:36:6d:8e:79:88:
41:0b:0e:ef:9d:77:51:e7:13:21:48:09:b8:d4:9a:3c:e4:ab:
a6:98:6b:90:cc:ba:d5:59:d1:e6:8e:2f:44:88:5a:5a:a8:95:
76:cc:6c:21:97:c8:66:97:d6:69:85:f0:8c:1a:12:79:22:ec:
82:93:14:44:d6:d9:8b:25:57:df:5b:c2:7e:d1:8a:40:7d:c5:
2d:50:c6:5c:f1:59:11:9c:e0:01:b8:2c:7f:5b:b2:44:4e:6c:
77:17:1c:4e:00:31:2c:71:52:3a:fe:03:a7:f1:49:a1:83:7b:
35:89:c7:30
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYvFzXIJa+AG/430XpqWIZ2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4
N2NhMjQwHhcNMjMxMTEyMjMxMDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmQwMDg3ZDFjM2E4YjFmMWE1NzFmYmVkODZmYjIzODljNmRhMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM41wNdFsbBIlvhaY7svEp4FcoZ/
sRDfhQ5ze89rMDq0UiySR5wTwtbN/GMNuoKy5zqsphMM/aRiavYMl8qRMvckQLk5
s4NzSPeExG6CI61+AejXm8wp13PAgzvpkTOMUXbBLPI49V8yc1bHgUtXLzkv3wwT
k32kFDE9BbuJLSEs05vDoU/IJDSn2MmB04iB/6mX/lyeXK+4910LG3/OOlZ3OjvB
oARQ9e3r6iHJmtkrnFLVwMuIUX+goNSGPu+UpcrvrmPBiAE0eDL3MTxTLtror99V
9l5DO53zvO2023YZJvvqivKnsTqQvE3T1551SmtIkts+OlwZt/ElO2RW9QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGbQCH0cOosfGlcfvthvsjicbaLkMB8GA1UdIwQY
MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl
LWY3NTJkODE2MDVmYi8xL1p0QUlmUnc2aXg4YVZ4LS0yRy15T0p4dG91US5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm
Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACTvYUD
BACwb94DBADBCMIwDQYJKoZIhvcNAQELBQADggEBAKrzsNejGxZeit4YTyOsTy6I
Kk+1KY7nt6P4NYW+W7a03EPsZ9ZknJV/9dnUqpTc+gMlQMlA5pdyLc4v043/pB6E
VzeV4mVKtIM8ECMHfUpTSiQjW+bw1jQ5iU4pFZkNpy0mOKjvMOGXOluDLknXF4cX
/jwfoT3B7tR47Jp0mhThWaM8Niy3j5wBG8o2bY55iEELDu+dd1HnEyFICbjUmjzk
q6aYa5DMutVZ0eaOL0SIWlqolXbMbCGXyGaX1mmF8IwaEnki7IKTFETW2YslV99b
wn7RikB9xS1QxlzxWRGc4AG4LH9bskRObHcXHE4AMSxxUjr+A6fxSaGDezWJxzA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:12 2024 by rpki-client on console-fra.rpki-client.org