Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/z2KCDnoZvutIogs2XYWvQfBgSaM.roa
File: z2KCDnoZvutIogs2XYWvQfBgSaM.roa (raw, json)
Hash identifier: /ATeEzYfVplYuqDeuNyBaa2dwqK+3pwk0ra7m9ri4W8=
Subject key identifier: CF:62:82:0E:7A:19:BE:EB:48:A2:0B:36:5D:85:AF:41:F0:60:49:A3
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01877B8D2A301119D14CAA93E8D2690D02A3
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/z2KCDnoZvutIogs2XYWvQfBgSaM.roa
Signing time: Thu 13 Apr 2023 16:57:41 +0000
ROA not before: Thu 13 Apr 2023 16:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 83.147.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:8d:2a:30:11:19:d1:4c:aa:93:e8:d2:69:0d:02:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 13 16:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf62820e7a19beeb48a20b365d85af41f06049a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:0b:aa:ca:d9:37:2a:ac:31:a0:c3:73:12:
e0:3f:29:d1:45:7f:83:66:12:ef:9a:a4:32:2c:35:
d2:0a:ab:a7:3f:55:d3:e2:5f:25:32:50:ed:88:2f:
2f:ef:b3:3f:22:11:22:16:aa:7b:98:5e:7e:f2:49:
85:96:2e:7a:eb:88:fc:af:c8:06:26:27:8d:82:26:
cb:55:2b:85:30:bd:16:11:91:71:02:04:99:af:4f:
b6:f3:33:a2:89:33:c9:e9:0b:50:c4:17:b2:c1:f1:
37:8b:82:46:ea:30:b5:14:85:3d:94:79:e8:b5:f5:
9e:21:45:ab:4f:22:91:63:91:f3:7e:9f:5d:54:85:
95:3b:4d:0b:7c:d4:77:d5:6e:c1:aa:69:c0:6c:05:
cc:69:06:fa:be:71:c7:49:e1:2e:75:dd:2d:01:3b:
26:ce:24:61:2d:dc:fd:b1:f6:35:a4:81:0e:9c:0c:
c7:7c:66:8d:24:60:2a:42:5b:e5:66:b2:35:3e:ff:
ac:51:ca:be:b1:9c:35:ba:61:0c:a2:e7:02:fc:83:
33:ba:ba:ef:94:18:e9:b9:43:55:ca:c1:e4:94:c3:
b7:08:8e:fe:c0:a5:6e:03:d7:2e:fd:90:5d:83:fe:
5a:85:36:eb:ed:e9:40:7a:74:35:cd:5a:f2:60:da:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:62:82:0E:7A:19:BE:EB:48:A2:0B:36:5D:85:AF:41:F0:60:49:A3
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/z2KCDnoZvutIogs2XYWvQfBgSaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/22
Signature Algorithm: sha256WithRSAEncryption
79:d6:da:ae:df:b5:1f:ca:bb:9a:7d:2b:c0:53:91:81:4d:48:
9a:a4:cd:f0:89:f0:fb:bb:0c:4a:6b:e1:57:cb:3e:4a:45:5b:
f2:28:a4:15:9a:d5:b4:c4:c9:00:c4:4e:50:a1:76:18:fc:f9:
50:9f:54:a1:f6:3d:3b:1e:4a:f6:5a:ec:16:b6:2d:bf:e6:a3:
fe:75:d1:d9:8f:e1:9d:5b:f8:97:43:62:aa:4c:56:dc:fe:7f:
5d:1c:94:dc:cf:87:84:b3:df:9a:2a:90:1f:2e:8a:64:51:0c:
f6:65:10:a3:fe:38:3c:5f:b5:5a:8a:45:ba:f7:cb:c7:fe:a9:
1d:6f:b4:84:0d:af:37:2b:54:a5:a7:92:45:24:8d:b9:44:85:
18:f9:86:71:bc:d7:28:30:03:0a:4a:e4:1b:bf:cf:31:33:23:
01:00:e3:8f:12:23:5d:76:1b:3e:61:d7:8a:03:f8:f9:93:91:
b8:65:a6:d4:15:00:d0:85:14:32:42:f5:af:14:70:dc:0a:02:
5b:11:9a:cd:2f:1e:0d:32:9b:71:51:1b:58:50:8c:23:27:dd:
65:83:e6:41:11:b3:22:9e:8f:4d:9e:2d:1c:64:b9:76:56:35:
59:3e:59:1b:8c:2e:4b:85:5c:39:3f:4a:06:a3:58:b2:c2:7a:
be:52:fe:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd7jSowERnRTKqT6NJpDQKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwNDEzMTY1NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjYyODIwZTdhMTliZWViNDhhMjBiMzY1ZDg1YWY0MWYwNjA0OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktYLqsrZNyqsMaDDcxLgPynRRX+D
ZhLvmqQyLDXSCqunP1XT4l8lMlDtiC8v77M/IhEiFqp7mF5+8kmFli5664j8r8gG
JieNgibLVSuFML0WEZFxAgSZr0+28zOiiTPJ6QtQxBeywfE3i4JG6jC1FIU9lHno
tfWeIUWrTyKRY5Hzfp9dVIWVO00LfNR31W7BqmnAbAXMaQb6vnHHSeEudd0tATsm
ziRhLdz9sfY1pIEOnAzHfGaNJGAqQlvlZrI1Pv+sUcq+sZw1umEMoucC/IMzurrv
lBjpuUNVysHklMO3CI7+wKVuA9cu/ZBdg/5ahTbr7elAenQ1zVryYNpJbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM9igg56Gb7rSKILNl2Fr0HwYEmjMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvejJLQ0Rub1p2dXRJb2dzMlhZV3ZRZkJnU2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5PwMA0G
CSqGSIb3DQEBCwUAA4IBAQB51tqu37UfyruafSvAU5GBTUiapM3wifD7uwxKa+FX
yz5KRVvyKKQVmtW0xMkAxE5QoXYY/PlQn1Sh9j07Hkr2WuwWti2/5qP+ddHZj+Gd
W/iXQ2KqTFbc/n9dHJTcz4eEs9+aKpAfLopkUQz2ZRCj/jg8X7VaikW698vH/qkd
b7SEDa83K1Slp5JFJI25RIUY+YZxvNcoMAMKSuQbv88xMyMBAOOPEiNddhs+YdeK
A/j5k5G4ZabUFQDQhRQyQvWvFHDcCgJbEZrNLx4NMptxURtYUIwjJ91lg+ZBEbMi
no9Nni0cZLl2VjVZPlkbjC5LhVw5P0oGo1iywnq+Uv4l
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:45 2023 by rpki-client on console-fra.rpki-client.org