Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ZWsQLepNxKWfUScsnii84ubftT4.roa
File: ZWsQLepNxKWfUScsnii84ubftT4.roa (raw, json)
Hash identifier: US2S13lYw0e9tUl8bwK1xh84//ZWiHyfEwM0KXjgY9Y=
Subject key identifier: 65:6B:10:2D:EA:4D:C4:A5:9F:51:27:2C:9E:28:BC:E2:E6:DF:B5:3E
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DC772B253ABA6867D11399A3DB3D6
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ZWsQLepNxKWfUScsnii84ubftT4.roa
Signing time: Sun 01 Jan 2023 22:04:54 +0000
ROA not before: Sun 01 Jan 2023 22:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33917
IP address blocks: 193.80.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c7:72:b2:53:ab:a6:86:7d:11:39:9a:3d:b3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=656b102dea4dc4a59f51272c9e28bce2e6dfb53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:4b:05:e2:9d:17:84:5c:da:ab:ca:a6:c6:
df:b1:1e:e1:bd:96:bb:f8:89:06:92:c7:de:84:ce:
82:e2:b3:06:a2:48:f1:ee:6e:85:33:db:09:2f:bc:
c2:fe:a9:49:bc:65:99:68:a6:ba:cc:f5:81:12:29:
06:36:32:7e:b3:d6:6e:a8:46:07:60:c1:39:28:20:
79:bf:18:6e:15:a9:ca:7b:ce:21:a6:83:b5:2b:fe:
ad:61:a7:74:a1:b4:41:87:99:d9:d3:b1:f8:a8:35:
2a:7a:d2:c6:69:b2:44:e4:1d:47:4a:94:13:3f:8b:
82:26:e7:7e:2f:66:4b:c3:51:a2:52:d1:96:7a:7a:
e2:50:b9:e3:49:8d:ea:c9:47:ff:01:41:65:b3:b0:
9b:05:0c:5c:be:89:99:26:65:3f:b4:42:b2:52:13:
bc:ef:50:6f:d1:75:a5:0b:e4:19:f7:ed:9a:7c:9d:
07:f7:5e:12:bc:c5:ab:60:dc:a4:72:48:20:e9:c1:
75:a1:7c:b9:b1:6a:0c:0a:51:ed:06:0c:6a:d0:6e:
71:9b:35:5b:16:ba:b1:bd:69:f5:31:0b:87:b5:b7:
05:df:05:1c:ca:23:14:b0:a4:aa:8b:c4:c6:fc:70:
65:cf:21:ce:88:48:7d:84:e4:51:c7:ac:f9:0a:50:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6B:10:2D:EA:4D:C4:A5:9F:51:27:2C:9E:28:BC:E2:E6:DF:B5:3E
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ZWsQLepNxKWfUScsnii84ubftT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.80.191.0/24
Signature Algorithm: sha256WithRSAEncryption
80:15:91:a5:0a:8b:4d:8a:0e:7a:e5:70:c8:59:18:67:1d:5c:
50:61:5a:a8:a4:89:0c:a4:92:f0:bd:f1:5c:3d:63:48:16:48:
b1:27:64:61:6e:14:a6:31:4d:a7:3b:0a:8f:85:7e:b3:96:60:
2e:4e:dd:74:e3:aa:30:14:34:79:56:ba:11:c9:27:53:b5:56:
0a:77:53:ea:37:1c:f5:9a:25:47:57:4e:9a:42:8a:c9:3c:f6:
27:89:5e:2b:39:b7:4d:59:73:8d:88:dd:b6:df:11:f0:f5:20:
21:58:2d:9b:5c:d2:48:d8:58:31:f0:de:e4:dd:f9:5b:eb:de:
bd:c1:73:e3:a0:d3:77:92:8e:c1:ce:5b:e4:74:42:34:b6:35:
39:e2:5d:d1:4f:a7:f0:fd:18:62:66:be:a6:7f:73:c2:aa:9e:
df:dd:90:1b:54:9b:3a:ee:a0:fd:d3:86:8f:03:e4:4e:78:97:
76:70:0e:6c:e2:28:f0:a4:b9:09:69:61:2c:51:42:f7:72:37:
45:51:8d:56:52:76:ed:d4:c2:b5:03:c0:f1:36:7d:3b:4d:12:
a9:91:b5:bf:50:b3:b0:50:de:5b:15:dc:16:0c:a3:4f:f1:28:
99:76:56:2d:60:38:b1:16:2d:c4:21:f2:33:81:66:93:59:d9:
19:67:23:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXcdyslOrpoZ9ETmaPbPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjMwMTAxMjIwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTZiMTAyZGVhNGRjNGE1OWY1MTI3MmM5ZTI4YmNlMmU2ZGZiNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbdLBeKdF4Rc2qvKpsbfsR7hvZa7
+IkGksfehM6C4rMGokjx7m6FM9sJL7zC/qlJvGWZaKa6zPWBEikGNjJ+s9ZuqEYH
YME5KCB5vxhuFanKe84hpoO1K/6tYad0obRBh5nZ07H4qDUqetLGabJE5B1HSpQT
P4uCJud+L2ZLw1GiUtGWenriULnjSY3qyUf/AUFls7CbBQxcvomZJmU/tEKyUhO8
71Bv0XWlC+QZ9+2afJ0H914SvMWrYNykckgg6cF1oXy5sWoMClHtBgxq0G5xmzVb
FrqxvWn1MQuHtbcF3wUcyiMUsKSqi8TG/HBlzyHOiEh9hORRx6z5ClCaOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGVrEC3qTcSln1EnLJ4ovOLm37U+MB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvWldzUUxlcE54S1dmVVNjc25paTg0dWJmdFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVC/MA0G
CSqGSIb3DQEBCwUAA4IBAQCAFZGlCotNig565XDIWRhnHVxQYVqopIkMpJLwvfFc
PWNIFkixJ2RhbhSmMU2nOwqPhX6zlmAuTt1046owFDR5VroRySdTtVYKd1PqNxz1
miVHV06aQorJPPYniV4rObdNWXONiN223xHw9SAhWC2bXNJI2Fgx8N7k3flb6969
wXPjoNN3ko7BzlvkdEI0tjU54l3RT6fw/RhiZr6mf3PCqp7f3ZAbVJs67qD904aP
A+ROeJd2cA5s4ijwpLkJaWEsUUL3cjdFUY1WUnbt1MK1A8DxNn07TRKpkbW/ULOw
UN5bFdwWDKNP8SiZdlYtYDixFi3EIfIzgWaTWdkZZyOU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org