Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/ZxzneoxhHrSz1Ps46KHX_xNLouQ.roa
File: ZxzneoxhHrSz1Ps46KHX_xNLouQ.roa (raw, json)
Hash identifier: TUh47qk6mNOLPzx2aPgPxpvdM+QUWc40jo/5V7CtFqE=
Subject key identifier: 67:1C:E7:7A:8C:61:1E:B4:B3:D4:FB:38:E8:A1:D7:FF:13:4B:A2:E4
Certificate issuer: /CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Certificate serial: 0188DE5ADC216303DF34E83CF6EDE67F7E08
Authority key identifier: FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/ZxzneoxhHrSz1Ps46KHX_xNLouQ.roa
Signing time: Wed 21 Jun 2023 14:27:56 +0000
ROA not before: Wed 21 Jun 2023 14:27:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 217.28.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:5a:dc:21:63:03:df:34:e8:3c:f6:ed:e6:7f:7e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Validity
Not Before: Jun 21 14:27:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=671ce77a8c611eb4b3d4fb38e8a1d7ff134ba2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8f:54:f7:59:7b:7c:f6:18:44:2e:e3:25:d9:
da:1c:a6:25:48:27:23:8b:4b:88:46:a0:b5:0e:c3:
d1:bc:a4:07:f6:36:b1:81:a9:01:af:d3:ac:db:52:
12:3e:0d:07:0a:09:a4:74:2e:7f:bf:bd:ec:99:f9:
e6:19:8c:62:11:20:4d:0e:4e:af:19:5e:98:8b:b2:
7d:4e:30:84:e7:1d:9a:47:8c:6e:55:3a:0b:f3:64:
65:09:84:2a:ad:f3:3d:dc:bf:16:b2:89:f7:a8:7b:
e0:ba:20:19:bf:42:56:45:31:34:99:22:26:59:0d:
76:99:30:c2:d7:7f:a9:7f:7d:5f:3b:7e:23:96:ea:
df:7e:e0:d2:00:be:b2:49:35:5b:11:7c:d0:bf:0d:
5a:4c:e8:03:37:66:96:b2:fb:89:40:f1:37:ff:6a:
e9:5f:7b:74:7d:e8:c0:8c:3d:31:0c:8a:ff:25:44:
4e:b2:04:4a:16:9a:7b:4f:5d:01:5a:ac:92:de:fa:
1a:ef:f4:6a:a7:80:b4:97:31:95:85:8c:dc:b4:42:
d2:92:19:dc:42:24:97:29:d8:72:7f:1d:39:4e:04:
29:b8:81:ff:f4:24:a0:98:42:b6:b7:5a:90:b3:19:
50:76:e8:34:06:e6:49:5a:68:a6:16:e6:bf:21:ae:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1C:E7:7A:8C:61:1E:B4:B3:D4:FB:38:E8:A1:D7:FF:13:4B:A2:E4
X509v3 Authority Key Identifier:
keyid:FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/ZxzneoxhHrSz1Ps46KHX_xNLouQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
17:40:e0:a1:50:c7:bc:0e:2e:fc:70:4e:97:05:38:5f:cb:19:
f2:ca:8c:69:07:ff:9f:36:5a:1d:6f:79:17:b8:61:88:3a:88:
3b:28:ce:23:a7:e5:32:e0:fb:a8:95:af:7f:78:97:61:de:8a:
f6:d2:82:ef:ca:67:94:51:a6:39:61:44:b4:a4:9f:01:a1:85:
a1:7a:03:ed:71:f8:32:5d:a1:37:81:99:3f:1b:43:a5:ad:02:
38:45:18:de:65:87:47:f8:20:32:69:05:3e:01:8e:a3:d8:d5:
0c:7e:fc:f9:1d:8d:06:7d:a6:d4:2d:3c:e5:eb:75:9d:6f:6c:
e5:81:6e:c7:c4:22:44:9d:8e:83:6d:34:08:e6:26:86:9b:90:
fe:4a:02:dc:41:f6:e3:3e:e0:b3:32:0c:b7:9a:3d:f3:69:9a:
3a:94:89:43:4a:eb:7d:88:a9:00:99:0d:54:18:14:04:36:fd:
2e:fb:32:c0:a4:ee:13:5e:96:7e:63:7c:cf:e0:67:ea:52:13:
41:e7:43:37:ea:01:7e:1e:e5:b8:3c:9f:77:ae:4a:b7:0f:f4:
6d:c9:bc:cb:ce:37:a5:ea:69:cd:97:92:66:19:41:af:5d:a0:
3d:8f:a2:72:44:a8:fd:8e:7d:6c:e2:91:2a:f6:6c:19:bc:7d:
c8:b5:e1:5e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYjeWtwhYwPfNOg89u3mf34IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjljZjIzZmM5Y2U2ZTJiOGMzOTMyM2QyNzBjZTUyZTg5
Mzg3MDIwHhcNMjMwNjIxMTQyNzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzFjZTc3YThjNjExZWI0YjNkNGZiMzhlOGExZDdmZjEzNGJhMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY9U91l7fPYYRC7jJdnaHKYlSCcj
i0uIRqC1DsPRvKQH9jaxgakBr9Os21ISPg0HCgmkdC5/v73smfnmGYxiESBNDk6v
GV6Yi7J9TjCE5x2aR4xuVToL82RlCYQqrfM93L8Wson3qHvguiAZv0JWRTE0mSIm
WQ12mTDC13+pf31fO34jlurffuDSAL6ySTVbEXzQvw1aTOgDN2aWsvuJQPE3/2rp
X3t0fejAjD0xDIr/JUROsgRKFpp7T10BWqyS3voa7/Rqp4C0lzGVhYzctELSkhnc
QiSXKdhyfx05TgQpuIH/9CSgmEK2t1qQsxlQdug0BuZJWmimFua/Ia4AHwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGcc53qMYR60s9T7OOih1/8TS6LkMB8GA1UdIwQY
MBaAFPspzyP8nObiuMOTI9JwzlLok4cCMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15blBJX3ljNXVLNHc1TWowbkRPVXVpVGh3SS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvOWZkMDAzLTA2ZjctNDVkOC1hNWRk
LTA3NmJmMDJkY2RkOS8xL1p4em5lb3hoSHJTejFQczQ2S0hYX3hOTG91US5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjAvOWZkMDAzLTA2ZjctNDVkOC1hNWRkLTA3NmJmMDJkY2Rk
OS8xLzEteW5QSV95YzV1SzR3NU1qMG5ET1V1aVRod0kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADZHIIw
DQYJKoZIhvcNAQELBQADggEBABdA4KFQx7wOLvxwTpcFOF/LGfLKjGkH/582Wh1v
eRe4YYg6iDsoziOn5TLg+6iVr394l2HeivbSgu/KZ5RRpjlhRLSknwGhhaF6A+1x
+DJdoTeBmT8bQ6WtAjhFGN5lh0f4IDJpBT4BjqPY1Qx+/PkdjQZ9ptQtPOXrdZ1v
bOWBbsfEIkSdjoNtNAjmJoabkP5KAtxB9uM+4LMyDLeaPfNpmjqUiUNK632IqQCZ
DVQYFAQ2/S77MsCk7hNeln5jfM/gZ+pSE0HnQzfqAX4e5bg8n3euSrcP9G3JvMvO
N6Xqac2XkmYZQa9doD2PonJEqP2OfWzikSr2bBm8fci14V4=
-----END CERTIFICATE-----
Generated at Thu Sep 21 16:49:31 2023 by rpki-client on console-fra.rpki-client.org