Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/ZONouJDexAzR-NhZR4W-CLcUmRk.roa
File: ZONouJDexAzR-NhZR4W-CLcUmRk.roa (raw, json)
Hash identifier: Sn1vHAEgJEfBhedYisZliQg/nMbO7pVXYsTmLN+ri2o=
Subject key identifier: 64:E3:68:B8:90:DE:C4:0C:D1:F8:D8:59:47:85:BE:08:B7:14:99:19
Certificate issuer: /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial: 018CBEC21048D365409805D918AAEFCE0D1A
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/ZONouJDexAzR-NhZR4W-CLcUmRk.roa
Signing time: Sun 31 Dec 2023 07:23:58 +0000
ROA not before: Sun 31 Dec 2023 07:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50517
IP address blocks: 212.57.192.0/19 maxlen: 19
212.57.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:be:c2:10:48:d3:65:40:98:05:d9:18:aa:ef:ce:0d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Validity
Not Before: Dec 31 07:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64e368b890dec40cd1f8d8594785be08b7149919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:41:9a:96:62:59:ce:87:af:5a:1f:e9:12:
88:fb:d2:f2:a8:cb:5e:a9:15:1e:f9:0e:5a:0b:e8:
c9:22:9b:99:29:5e:99:3b:f8:bd:0e:41:5f:44:28:
29:13:be:b2:dd:83:ce:de:fa:03:b3:63:93:2c:5b:
90:76:3b:cf:ce:19:41:2e:f8:56:08:12:a5:48:d4:
cd:e2:65:75:b0:a7:9e:3d:ee:0f:c3:f9:05:99:f0:
52:b3:3e:a6:5b:f2:36:8a:93:ad:09:46:44:91:4b:
c2:0e:d8:11:99:99:9f:fe:c1:d7:e7:9a:49:40:5c:
47:98:ed:53:cf:ad:14:88:60:60:90:dd:ed:f7:29:
74:84:ce:11:8f:26:a0:5a:31:e4:bc:ac:36:0e:96:
aa:ac:3e:2c:dd:3b:ac:9d:69:5a:d4:11:97:97:0d:
d9:4b:9f:c6:b2:f8:6f:da:99:af:9d:29:06:5a:b5:
98:a3:5b:23:4d:42:2b:7f:7c:ea:87:82:51:20:d1:
02:fc:16:c9:55:6f:39:3d:12:26:99:4b:dd:59:a2:
8f:c0:36:ad:bf:3c:51:f1:d0:ae:49:e2:62:bb:ef:
0e:bb:fb:1e:41:47:b3:2f:03:4f:e2:5c:95:78:ad:
f5:6e:79:0e:28:ab:18:89:65:1c:0a:eb:6f:2b:a1:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E3:68:B8:90:DE:C4:0C:D1:F8:D8:59:47:85:BE:08:B7:14:99:19
X509v3 Authority Key Identifier:
keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/ZONouJDexAzR-NhZR4W-CLcUmRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.57.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:00:27:85:32:93:db:6a:68:88:fd:e8:00:66:08:d1:47:e2:
ba:0e:8d:f1:65:74:2f:d4:c6:6d:e8:1b:a3:85:c4:9d:75:53:
fd:52:0d:66:18:39:a4:0e:1f:3b:c1:91:a8:8e:0b:7f:3f:1e:
c8:fa:54:77:45:0c:6f:43:e7:94:c8:c7:15:73:36:dc:83:b2:
08:7b:5a:b2:a8:5b:a4:03:d7:72:ca:fb:a9:00:8d:45:0f:da:
d9:35:9a:4d:c8:4e:32:81:fd:34:74:e6:73:36:5d:e7:5a:e9:
61:75:41:8e:95:24:3e:41:fb:9e:1c:8e:f7:4e:86:2d:6c:29:
19:ce:8e:7b:fd:7f:d1:06:4f:91:1a:e1:d7:8c:20:43:a3:fa:
2f:03:ef:ac:ce:f4:ab:89:0d:1a:8f:8f:92:25:af:c8:f0:36:
ae:fc:26:8a:10:ae:a2:ec:a7:03:5f:95:f3:a7:f7:f5:e3:fe:
58:90:a4:da:83:ba:39:17:bc:5c:79:69:01:7a:21:8d:a1:b5:
2d:22:e3:87:b9:65:9f:c4:ba:60:9d:78:d6:4e:40:0a:69:20:
b8:61:af:98:29:e6:e4:4b:af:b3:68:86:b3:40:57:36:30:49:
29:62:c1:9e:f5:1f:b6:4d:99:3a:78:51:04:ed:ef:f7:bd:a7:
34:3c:e0:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYy+whBI02VAmAXZGKrvzg0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzgwMDAwZmI3ZTQ1Zjg5NzYyNjFhNjk4ZDQxOGYwOGU4
ZDY3YzcwHhcNMjMxMjMxMDcyMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGUzNjhiODkwZGVjNDBjZDFmOGQ4NTk0Nzg1YmUwOGI3MTQ5OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngZBmpZiWc6Hr1of6RKI+9LyqMte
qRUe+Q5aC+jJIpuZKV6ZO/i9DkFfRCgpE76y3YPO3voDs2OTLFuQdjvPzhlBLvhW
CBKlSNTN4mV1sKeePe4Pw/kFmfBSsz6mW/I2ipOtCUZEkUvCDtgRmZmf/sHX55pJ
QFxHmO1Tz60UiGBgkN3t9yl0hM4RjyagWjHkvKw2DpaqrD4s3TusnWla1BGXlw3Z
S5/Gsvhv2pmvnSkGWrWYo1sjTUIrf3zqh4JRINEC/BbJVW85PRImmUvdWaKPwDat
vzxR8dCuSeJiu+8Ou/seQUezLwNP4lyVeK31bnkOKKsYiWUcCutvK6FywwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGTjaLiQ3sQM0fjYWUeFvgi3FJkZMB8GA1UdIwQY
MBaAFLY4AAD7fkX4l2JhppjUGPCOjWfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpnQUFQdC1SZmlYWW1HbW1OUVk4STZOWjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82ZTRlNjgtODdhYS00NzhjLThlNWYt
ZTA2MTc2YWIyNGZiLzEvWk9Ob3VKRGV4QXpSLU5oWlI0Vy1DTGNVbVJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82ZTRlNjgtODdhYS00NzhjLThlNWYtZTA2MTc2YWIyNGZi
LzEvdGpnQUFQdC1SZmlYWW1HbW1OUVk4STZOWjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1DnAMA0G
CSqGSIb3DQEBCwUAA4IBAQAKACeFMpPbamiI/egAZgjRR+K6Do3xZXQv1MZt6Buj
hcSddVP9Ug1mGDmkDh87wZGojgt/Px7I+lR3RQxvQ+eUyMcVczbcg7IIe1qyqFuk
A9dyyvupAI1FD9rZNZpNyE4ygf00dOZzNl3nWulhdUGOlSQ+QfueHI73ToYtbCkZ
zo57/X/RBk+RGuHXjCBDo/ovA++szvSriQ0aj4+SJa/I8Dau/CaKEK6i7KcDX5Xz
p/f14/5YkKTag7o5F7xceWkBeiGNobUtIuOHuWWfxLpgnXjWTkAKaSC4Ya+YKebk
S6+zaIazQFc2MEkpYsGe9R+2TZk6eFEE7e/3vac0POCs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-fra.rpki-client.org