Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/SZFCpULA5fnSRbDipo2h3Opz3oU.roa
File: SZFCpULA5fnSRbDipo2h3Opz3oU.roa (raw, json)
Hash identifier: ZQ/8+5Khey6QlKUJ9vkTHE85kit6bUuj3f0fU45dsPg=
Subject key identifier: 49:91:42:A5:42:C0:E5:F9:D2:45:B0:E2:A6:8D:A1:DC:EA:73:DE:85
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C78640718F448DED3C2C239C91D0752
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/SZFCpULA5fnSRbDipo2h3Opz3oU.roa
Signing time: Sun 01 Jan 2023 08:35:07 +0000
ROA not before: Sun 01 Jan 2023 08:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 81.28.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 07:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:64:07:18:f4:48:de:d3:c2:c2:39:c9:1d:07:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=499142a542c0e5f9d245b0e2a68da1dcea73de85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:01:5b:c9:48:3a:09:ac:b2:41:8c:3c:7f:9f:
80:b7:3a:80:b0:f5:60:29:25:b2:06:55:d5:d2:2b:
c9:49:54:78:48:8a:92:85:a4:2a:84:7f:aa:72:3f:
ba:bb:03:71:85:3b:ac:2d:a3:e4:e0:66:63:dd:f1:
66:11:24:79:eb:a1:76:77:55:36:22:e1:71:7c:ed:
e4:0b:f6:e9:af:38:13:a3:cd:de:d0:54:c9:a7:fe:
42:f2:99:bf:49:89:fd:fb:61:93:f7:87:2f:7c:ca:
be:11:ce:df:77:49:dd:3a:a5:6c:7a:c7:a2:5a:08:
5c:d3:77:a7:fe:71:25:fd:1e:44:a2:df:1a:bd:1e:
ee:44:43:a2:8f:ec:f2:57:de:44:1f:c9:17:10:ce:
25:f7:4c:97:23:85:fd:97:79:bf:eb:10:e8:71:40:
03:6e:ed:19:1c:b9:0c:22:e5:12:3c:a2:ff:ca:2d:
bc:21:40:d7:ce:02:1f:a4:d9:e9:81:10:9f:e7:4f:
0f:5c:86:e1:9a:67:a3:62:ef:8a:8c:a9:b5:ab:ce:
a4:81:33:c8:db:65:b7:b3:af:46:95:c8:de:9a:a5:
f9:9e:a9:5e:87:2b:5a:8b:30:6d:95:ed:a0:27:97:
df:db:f5:61:54:5c:14:f7:70:44:25:5c:af:24:b0:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:42:A5:42:C0:E5:F9:D2:45:B0:E2:A6:8D:A1:DC:EA:73:DE:85
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/SZFCpULA5fnSRbDipo2h3Opz3oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:6c:a9:91:b9:94:23:89:67:fe:35:71:5b:ba:66:cb:bb:9e:
2d:c7:a1:65:8f:d1:54:b1:1a:ce:b0:68:71:48:0d:36:e8:27:
71:36:0c:1f:28:78:87:18:5b:f3:f1:73:4d:70:47:72:b9:75:
b2:e8:4e:2c:5c:19:dc:52:19:3c:59:fe:de:7e:23:4c:46:36:
58:6d:a1:bd:3a:fb:67:c2:73:fb:ab:14:66:b2:e1:9a:aa:8c:
c3:42:6c:7f:ea:77:2d:2b:28:47:30:24:7f:45:b1:d0:f6:83:
a9:12:8d:92:0e:66:f4:58:62:b5:11:5b:81:62:31:df:88:c1:
20:7a:33:2c:93:40:82:b1:4b:57:bc:47:5f:37:b8:3f:ef:d4:
1b:bf:aa:85:24:08:b7:c2:22:a7:ba:f0:27:2c:17:2e:31:4b:
b3:23:d4:4d:8f:2e:4c:b2:4a:c4:d9:80:fa:f2:f0:31:05:28:
0e:77:ec:a9:41:6e:77:4e:3c:60:3b:65:b0:9c:b0:1d:3d:bf:
83:c0:eb:57:1d:f5:42:0c:39:b4:74:e5:05:76:19:07:5d:e8:
2c:69:7a:b5:57:c4:9d:62:87:61:5f:09:17:07:a0:96:2c:95:
ba:99:30:e6:e6:05:ba:f3:eb:bc:87:56:99:0d:60:34:6f:32:
c0:17:03:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVseGQHGPRI3tPCwjnJHQdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwMTAxMDgzNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTkxNDJhNTQyYzBlNWY5ZDI0NWIwZTJhNjhkYTFkY2VhNzNkZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAFbyUg6CayyQYw8f5+AtzqAsPVg
KSWyBlXV0ivJSVR4SIqShaQqhH+qcj+6uwNxhTusLaPk4GZj3fFmESR566F2d1U2
IuFxfO3kC/bprzgTo83e0FTJp/5C8pm/SYn9+2GT94cvfMq+Ec7fd0ndOqVsesei
Wghc03en/nEl/R5Eot8avR7uREOij+zyV95EH8kXEM4l90yXI4X9l3m/6xDocUAD
bu0ZHLkMIuUSPKL/yi28IUDXzgIfpNnpgRCf508PXIbhmmejYu+KjKm1q86kgTPI
22W3s69GlcjemqX5nqlehytaizBtle2gJ5ff2/VhVFwU93BEJVyvJLCuWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEmRQqVCwOX50kWw4qaNodzqc96FMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvU1pGQ3BVTEE1Zm5TUmJEaXBvMmgzT3B6M29VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURz/MA0G
CSqGSIb3DQEBCwUAA4IBAQDEbKmRuZQjiWf+NXFbumbLu54tx6Flj9FUsRrOsGhx
SA026CdxNgwfKHiHGFvz8XNNcEdyuXWy6E4sXBncUhk8Wf7efiNMRjZYbaG9Ovtn
wnP7qxRmsuGaqozDQmx/6nctKyhHMCR/RbHQ9oOpEo2SDmb0WGK1EVuBYjHfiMEg
ejMsk0CCsUtXvEdfN7g/79Qbv6qFJAi3wiKnuvAnLBcuMUuzI9RNjy5MskrE2YD6
8vAxBSgOd+ypQW53TjxgO2WwnLAdPb+DwOtXHfVCDDm0dOUFdhkHXegsaXq1V8Sd
YodhXwkXB6CWLJW6mTDm5gW68+u8h1aZDWA0bzLAFwOG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org