Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/aZXBF10O7c7R3syJ6Q0_b6W-PqI.roa
File: aZXBF10O7c7R3syJ6Q0_b6W-PqI.roa (raw, json)
Hash identifier: PZT4yCVtqO9ceeFGE8S0rLz4IbN80BITI/orP4sXf34=
Subject key identifier: 69:95:C1:17:5D:0E:ED:CE:D1:DE:CC:89:E9:0D:3F:6F:A5:BE:3E:A2
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DD38D68E3540341DD24B52E733D4E
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/aZXBF10O7c7R3syJ6Q0_b6W-PqI.roa
Signing time: Sun 01 Jan 2023 22:04:58 +0000
ROA not before: Sun 01 Jan 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205903
IP address blocks: 213.33.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d3:8d:68:e3:54:03:41:dd:24:b5:2e:73:3d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6995c1175d0eedced1decc89e90d3f6fa5be3ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:47:58:08:19:b7:7e:c7:62:05:19:f4:d7:
77:87:66:0e:fb:8f:ba:a0:4f:a0:17:12:fd:e7:d9:
1a:73:21:28:0e:41:ba:ce:b0:ab:9e:b4:5f:80:ec:
9a:75:b4:2b:63:b8:17:f9:72:b4:c0:59:cd:9c:d3:
e2:ba:ed:54:9a:4d:af:74:30:df:56:ce:5b:79:b0:
14:db:67:8b:4b:74:42:af:73:bb:1d:57:60:08:b5:
55:03:77:c5:04:8b:88:58:b5:05:18:db:93:ca:9b:
7f:f8:84:12:51:b3:e5:9d:2b:46:25:c0:4d:89:37:
6c:f9:34:a9:c2:ca:d9:bd:e1:74:3a:c1:ab:15:6f:
72:e5:59:ef:41:ef:04:4f:ea:66:70:e4:71:ab:97:
f8:20:0a:88:01:c0:71:e1:20:85:9d:ad:05:f5:ef:
61:fc:ad:c5:af:85:93:1f:0a:f1:c0:cb:5d:75:b1:
95:32:1e:ed:ee:76:b8:51:c2:f5:2a:df:c6:2d:8b:
b4:bd:61:92:ec:37:a1:cd:92:d2:15:6b:16:a2:5e:
ed:45:54:45:62:7b:d7:00:aa:ef:ad:29:78:f4:bb:
64:4d:b7:26:1e:20:b8:10:a4:0a:1e:e8:da:7a:83:
fa:44:9a:dd:ea:4e:af:78:19:82:c2:bf:09:5e:8b:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:95:C1:17:5D:0E:ED:CE:D1:DE:CC:89:E9:0D:3F:6F:A5:BE:3E:A2
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/aZXBF10O7c7R3syJ6Q0_b6W-PqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.33.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3a:10:cd:29:a9:f6:0e:47:69:b3:8c:07:42:6b:15:7e:43:
a2:ec:7f:34:68:c6:bd:02:e6:e1:b9:b4:f0:f8:82:80:13:f4:
54:aa:1d:42:45:85:ed:ac:dc:6e:eb:65:b9:7d:60:c8:e5:e3:
f4:2f:26:8c:6f:84:ba:18:54:85:7a:0a:78:30:1d:59:ae:91:
8e:af:01:d3:cf:05:a5:e9:a1:c6:1e:be:49:0c:0f:d7:1d:98:
77:ff:58:b3:d2:bc:28:13:41:01:1e:03:7a:02:bb:b6:67:f0:
ad:6f:17:66:f8:12:dc:c7:a3:82:3f:fd:2b:15:dc:7d:ce:99:
28:c3:c5:85:90:00:a8:97:2f:37:78:3d:c6:8f:4b:41:b9:1f:
25:c4:8d:6d:59:37:22:88:5b:b5:0f:e7:88:38:b0:bb:b8:00:
a6:6f:2c:e6:67:71:a3:15:e8:d5:46:23:23:9d:7c:d3:c5:34:
db:db:e1:c9:35:66:2f:f9:f0:ef:43:2f:07:ca:3f:0f:1c:7c:
b3:75:cf:50:e6:74:f1:e4:6d:8c:d6:00:c7:cc:77:54:94:84:
30:4b:cd:df:7d:95:55:a7:c9:bc:a8:a9:c0:33:26:97:11:3f:
0a:94:dc:f8:b8:c8:c5:90:95:e7:46:3b:48:28:47:5c:a4:73:
98:3e:b8:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXdONaONUA0HdJLUucz1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjMwMTAxMjIwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTk1YzExNzVkMGVlZGNlZDFkZWNjODllOTBkM2Y2ZmE1YmUzZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bJHWAgZt37HYgUZ9Nd3h2YO+4+6
oE+gFxL959kacyEoDkG6zrCrnrRfgOyadbQrY7gX+XK0wFnNnNPiuu1Umk2vdDDf
Vs5bebAU22eLS3RCr3O7HVdgCLVVA3fFBIuIWLUFGNuTypt/+IQSUbPlnStGJcBN
iTds+TSpwsrZveF0OsGrFW9y5VnvQe8ET+pmcORxq5f4IAqIAcBx4SCFna0F9e9h
/K3Fr4WTHwrxwMtddbGVMh7t7na4UcL1Kt/GLYu0vWGS7DehzZLSFWsWol7tRVRF
YnvXAKrvrSl49LtkTbcmHiC4EKQKHujaeoP6RJrd6k6veBmCwr8JXosrIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGmVwRddDu3O0d7MiekNP2+lvj6iMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvYVpYQkYxME83YzdSM3N5SjZRMF9iNlctUHFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1SExMA0G
CSqGSIb3DQEBCwUAA4IBAQCjOhDNKan2Dkdps4wHQmsVfkOi7H80aMa9AubhubTw
+IKAE/RUqh1CRYXtrNxu62W5fWDI5eP0LyaMb4S6GFSFegp4MB1ZrpGOrwHTzwWl
6aHGHr5JDA/XHZh3/1iz0rwoE0EBHgN6Aru2Z/Ctbxdm+BLcx6OCP/0rFdx9zpko
w8WFkAColy83eD3Gj0tBuR8lxI1tWTciiFu1D+eIOLC7uACmbyzmZ3GjFejVRiMj
nXzTxTTb2+HJNWYv+fDvQy8Hyj8PHHyzdc9Q5nTx5G2M1gDHzHdUlIQwS83ffZVV
p8m8qKnAMyaXET8KlNz4uMjFkJXnRjtIKEdcpHOYPrjW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org