Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/1ZNtZsW1_nyTGxzYh0ebY1vp0OE.roa
File: 1ZNtZsW1_nyTGxzYh0ebY1vp0OE.roa (raw, json)
Hash identifier: 5pVg/IH1PK2uaH7ODfOsvZCg2H6QKh9TvsO0MtNT95s=
Subject key identifier: D5:93:6D:66:C5:B5:FE:7C:93:1B:1C:D8:87:47:9B:63:5B:E9:D0:E1
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 0185E4A8E994EE183390AE767A0F6E5AB632
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/1ZNtZsW1_nyTGxzYh0ebY1vp0OE.roa
Signing time: Tue 24 Jan 2023 16:42:33 +0000
ROA not before: Tue 24 Jan 2023 16:42:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202275
IP address blocks: 176.113.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:a8:e9:94:ee:18:33:90:ae:76:7a:0f:6e:5a:b6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Jan 24 16:42:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5936d66c5b5fe7c931b1cd887479b635be9d0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:a7:e5:6f:cd:d3:26:c8:34:36:a3:97:df:
21:38:f5:47:cf:0d:09:e2:30:9f:26:99:16:8f:16:
14:3c:b1:3e:18:d3:32:18:01:58:80:6f:fc:1e:c0:
d4:24:98:29:06:4e:9b:be:43:f2:a7:c4:2f:b4:5b:
46:74:c3:60:07:24:6c:5d:f6:5a:8b:d7:79:08:91:
da:d2:3d:11:8b:d4:93:f6:54:32:7e:23:d5:8d:c8:
e3:a3:fa:53:ec:03:16:2f:97:bb:d2:1e:f2:1e:a0:
8f:39:1e:2b:2c:56:56:55:42:79:7b:ad:4b:88:fc:
45:0c:08:5b:a6:bf:8a:ab:16:e6:36:40:d6:b1:3a:
8d:76:7a:c1:df:93:e1:ce:f2:e1:f7:4c:1f:8e:d5:
96:06:52:10:c2:cf:11:8e:6f:7a:d2:f9:ca:9d:ab:
c4:9c:ae:9e:e6:12:82:94:06:96:84:ed:bf:40:93:
15:ef:59:7a:25:84:d1:4f:b3:0e:14:cf:2a:bb:60:
08:c3:bf:dd:3c:e6:5f:81:f9:2d:2e:f2:80:4d:e3:
7e:38:bf:23:91:db:e3:03:36:5e:b3:b8:10:0c:18:
23:6d:cb:9a:ae:ee:ac:35:61:69:ae:07:20:96:06:
bf:39:93:5c:ae:f4:f0:60:76:8d:79:d7:2b:cf:3e:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:6D:66:C5:B5:FE:7C:93:1B:1C:D8:87:47:9B:63:5B:E9:D0:E1
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/1ZNtZsW1_nyTGxzYh0ebY1vp0OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:81:3d:1d:9f:20:1f:03:00:f8:94:03:64:fe:e3:c4:e6:3b:
f2:e7:ef:86:5c:2c:d4:94:75:11:fc:9e:6e:2a:66:02:76:eb:
83:61:1c:3f:c1:9a:04:a7:63:0d:f6:1b:ce:f5:f5:ba:9d:a8:
8e:30:5a:49:22:0f:78:b8:d5:64:61:5e:ac:9a:1c:d1:34:cd:
50:78:8f:22:a3:85:77:11:dc:23:b8:d6:64:68:ae:50:e4:b3:
0e:10:92:48:2b:5e:e8:69:ae:95:a8:fa:13:51:63:50:7b:53:
4b:80:72:8e:1d:91:35:28:36:73:95:d5:14:aa:9f:c9:53:63:
55:31:eb:e7:cd:97:dd:d1:67:21:68:9d:6e:f3:22:08:96:ba:
94:3b:13:99:22:54:ca:86:7e:a8:9e:82:21:42:57:45:dd:1f:
0b:ec:b5:50:02:44:fc:96:6a:56:b4:c7:e3:b9:b6:f7:ed:00:
20:8c:6b:60:8e:10:1d:54:18:dd:30:73:88:db:ee:12:b7:82:
59:53:fc:09:64:6a:6a:00:52:ee:c5:ae:b4:c4:c1:f1:52:0a:
b4:8d:aa:07:2b:6f:63:d7:b1:f5:53:5e:f8:79:4f:20:1c:bb:
84:a1:4c:c2:1d:96:74:2c:84:e4:1a:6e:86:e7:5e:cb:31:37:
55:d9:38:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXkqOmU7hgzkK52eg9uWrYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNzhiMmQzZjYyNzAwZmU2N2U1OTNiNWEzM2QxY2Y5MTc4
OTI1MmYwHhcNMjMwMTI0MTY0MjMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTkzNmQ2NmM1YjVmZTdjOTMxYjFjZDg4NzQ3OWI2MzViZTlkMGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZKn5W/N0ybINDajl98hOPVHzw0J
4jCfJpkWjxYUPLE+GNMyGAFYgG/8HsDUJJgpBk6bvkPyp8QvtFtGdMNgByRsXfZa
i9d5CJHa0j0Ri9ST9lQyfiPVjcjjo/pT7AMWL5e70h7yHqCPOR4rLFZWVUJ5e61L
iPxFDAhbpr+KqxbmNkDWsTqNdnrB35PhzvLh90wfjtWWBlIQws8Rjm960vnKnavE
nK6e5hKClAaWhO2/QJMV71l6JYTRT7MOFM8qu2AIw7/dPOZfgfktLvKATeN+OL8j
kdvjAzZes7gQDBgjbcuaru6sNWFprgcglga/OZNcrvTwYHaNedcrzz5JDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNWTbWbFtf58kxsc2IdHm2Nb6dDhMB8GA1UdIwQY
MBaAFAt4stP2JwD+Z+WTtaM9HPkXiSUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEt
NjA3OGVmZDA3ODVlLzEvMVpOdFpzVzFfbnlUR3h6WWgwZWJZMXZwME9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEtNjA3OGVmZDA3ODVl
LzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHFeMA0G
CSqGSIb3DQEBCwUAA4IBAQBvgT0dnyAfAwD4lANk/uPE5jvy5++GXCzUlHUR/J5u
KmYCduuDYRw/wZoEp2MN9hvO9fW6naiOMFpJIg94uNVkYV6smhzRNM1QeI8io4V3
EdwjuNZkaK5Q5LMOEJJIK17oaa6VqPoTUWNQe1NLgHKOHZE1KDZzldUUqp/JU2NV
MevnzZfd0WchaJ1u8yIIlrqUOxOZIlTKhn6onoIhQldF3R8L7LVQAkT8lmpWtMfj
ubb37QAgjGtgjhAdVBjdMHOI2+4St4JZU/wJZGpqAFLuxa60xMHxUgq0jaoHK29j
17H1U174eU8gHLuEoUzCHZZ0LITkGm6G517LMTdV2Ti8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:52 2024 by rpki-client on console-ams.rpki-client.org