Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/zeNYf7WYWAU2uO-5E-78hC6k6y4.roa
File: zeNYf7WYWAU2uO-5E-78hC6k6y4.roa (raw, json)
Hash identifier: zPN2j4Dq6BLLAGEv/3llcivT9BDGNyDCMCM9O5GsnN8=
Subject key identifier: CD:E3:58:7F:B5:98:58:05:36:B8:EF:B9:13:EE:FC:84:2E:A4:EB:2E
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01866E47144C87CE140DCF9898E6FA8A37AE
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/zeNYf7WYWAU2uO-5E-78hC6k6y4.roa
Signing time: Mon 20 Feb 2023 10:03:17 +0000
ROA not before: Mon 20 Feb 2023 10:03:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40123
IP address blocks: 83.126.16.0/23 maxlen: 24
83.126.17.0/24 maxlen: 24
83.126.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:47:14:4c:87:ce:14:0d:cf:98:98:e6:fa:8a:37:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Feb 20 10:03:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cde3587fb598580536b8efb913eefc842ea4eb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:c6:09:3b:70:4b:0b:2e:8a:ac:83:b6:cc:
61:f9:1d:5c:63:cb:82:a6:74:4f:c0:79:b2:72:e7:
59:32:07:9f:01:33:b8:9f:04:94:bf:76:84:91:94:
6b:30:22:16:da:77:79:7b:20:5a:c1:c6:62:c7:30:
4b:97:11:f9:1e:9e:3b:b3:dc:d6:a5:7e:db:9a:9a:
9c:5c:cc:c0:9d:39:f6:33:28:b9:5a:cd:22:27:9e:
eb:72:33:53:4a:e2:ec:a4:ee:32:39:5a:93:ec:12:
29:eb:e3:9f:be:32:4b:47:f5:c3:97:9b:e4:01:03:
d4:8d:d6:5d:7f:9a:d7:44:15:08:06:d1:39:d0:47:
f3:fc:56:ca:11:e0:c6:a2:cd:e7:a3:4c:28:42:ea:
5b:ad:b7:ed:eb:ce:b8:39:66:52:f0:1a:d6:91:f8:
13:6d:00:c8:e3:75:14:34:3b:95:c5:af:8a:ee:95:
72:d1:0b:59:f5:0e:bb:3e:6d:9b:46:2a:5a:3f:2e:
32:f1:24:cb:64:14:4e:66:2d:a3:4c:be:99:96:91:
81:4e:37:f9:f1:6b:cc:e9:19:c8:6f:a4:24:3e:32:
59:07:d9:8a:de:75:15:8a:05:e8:e1:e9:af:03:eb:
00:0f:13:b9:1b:fa:b5:ca:79:64:3d:20:df:d9:f3:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E3:58:7F:B5:98:58:05:36:B8:EF:B9:13:EE:FC:84:2E:A4:EB:2E
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/zeNYf7WYWAU2uO-5E-78hC6k6y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.126.16.0/23
83.126.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:34:34:24:51:f8:4f:1b:19:48:4a:5a:16:e7:29:37:f1:35:
dd:69:37:ed:df:97:45:55:38:13:53:f0:b1:a5:28:1a:59:cc:
76:0f:60:f7:a0:16:cd:f1:fd:85:51:d7:69:b4:31:c5:63:b4:
11:3b:ba:76:4e:db:37:f4:98:3f:04:de:e5:84:c4:47:67:3a:
2f:f1:08:8c:9b:bd:73:f8:a1:0b:32:cd:36:c3:fc:4d:5d:f5:
83:01:cb:e6:bd:96:6c:9c:c1:c7:b0:93:d4:84:17:d3:89:77:
1e:71:89:2d:ed:85:18:dd:6f:99:cd:1a:bd:d4:8b:e9:96:ba:
48:22:ec:cf:fe:72:43:d4:0e:81:77:3c:c5:62:52:4d:f2:82:
54:9a:f8:66:9d:df:d9:44:46:94:68:4d:43:f0:62:e6:27:f0:
c6:70:d9:0f:d6:01:90:61:43:5f:2e:a1:0c:76:da:ff:b1:68:
92:a3:89:5c:18:cb:0b:49:bc:fd:9f:cb:9c:84:45:b7:a3:81:
54:cb:ac:19:8e:bf:1c:3c:8d:1e:e8:f6:48:78:c1:2a:f0:5b:
64:95:20:c1:e6:77:76:77:c0:af:39:c3:a4:ab:11:c2:9e:5f:
5f:89:5c:12:0c:ce:50:ec:2e:2d:20:8e:61:37:89:da:3b:f3:
59:09:16:f2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZuRxRMh84UDc+YmOb6ijeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx
NzFmYmEwHhcNMjMwMjIwMTAwMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGUzNTg3ZmI1OTg1ODA1MzZiOGVmYjkxM2VlZmM4NDJlYTRlYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLfGCTtwSwsuiqyDtsxh+R1cY8uC
pnRPwHmycudZMgefATO4nwSUv3aEkZRrMCIW2nd5eyBawcZixzBLlxH5Hp47s9zW
pX7bmpqcXMzAnTn2Myi5Ws0iJ57rcjNTSuLspO4yOVqT7BIp6+OfvjJLR/XDl5vk
AQPUjdZdf5rXRBUIBtE50Efz/FbKEeDGos3no0woQupbrbft6864OWZS8BrWkfgT
bQDI43UUNDuVxa+K7pVy0QtZ9Q67Pm2bRipaPy4y8STLZBROZi2jTL6ZlpGBTjf5
8WvM6RnIb6QkPjJZB9mK3nUVigXo4emvA+sADxO5G/q1ynlkPSDf2fNU1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM3jWH+1mFgFNrjvuRPu/IQupOsuMB8GA1UdIwQY
MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt
MjM3NzJlN2Y5MmUzLzEvemVOWWY3V1lXQVUydU8tNUUtNzhoQzZrNnk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz
LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBU34QAwQA
U34WMA0GCSqGSIb3DQEBCwUAA4IBAQChNDQkUfhPGxlISloW5yk38TXdaTft35dF
VTgTU/CxpSgaWcx2D2D3oBbN8f2FUddptDHFY7QRO7p2Tts39Jg/BN7lhMRHZzov
8QiMm71z+KELMs02w/xNXfWDAcvmvZZsnMHHsJPUhBfTiXcecYkt7YUY3W+ZzRq9
1IvplrpIIuzP/nJD1A6BdzzFYlJN8oJUmvhmnd/ZREaUaE1D8GLmJ/DGcNkP1gGQ
YUNfLqEMdtr/sWiSo4lcGMsLSbz9n8uchEW3o4FUy6wZjr8cPI0e6PZIeMEq8Ftk
lSDB5nd2d8CvOcOkqxHCnl9fiVwSDM5Q7C4tII5hN4naO/NZCRby
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:30 2023 by rpki-client on console-ams.rpki-client.org