Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/z9yY9ffLSkVhk8ccJCac6JS2UpM.roa
File: z9yY9ffLSkVhk8ccJCac6JS2UpM.roa (raw, json)
Hash identifier: OHscaDWTScdJTlaRWMOjYSsmIu7wcVXc6A27LHN5XYs=
Subject key identifier: CF:DC:98:F5:F7:CB:4A:45:61:93:C7:1C:24:26:9C:E8:94:B6:52:93
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0192B9218ECB2CA0694016DC74B3C50CBD4E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/z9yY9ffLSkVhk8ccJCac6JS2UpM.roa
Signing time: Wed 23 Oct 2024 11:27:17 +0000
ROA not before: Wed 23 Oct 2024 11:27:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 93.115.254.0/24 maxlen: 24
103.212.81.0/24 maxlen: 24
185.121.122.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 06:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:21:8e:cb:2c:a0:69:40:16:dc:74:b3:c5:0c:bd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 23 11:27:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfdc98f5f7cb4a456193c71c24269ce894b65293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:3b:7d:be:11:81:7a:41:05:b2:ea:73:bd:
6f:54:fd:8e:2f:90:84:ff:70:ac:32:9c:60:6b:f9:
75:f7:32:e7:fc:13:52:c7:86:25:59:4b:d3:cb:0a:
90:12:05:73:71:fc:a4:92:90:79:c5:30:ca:2d:5b:
c4:5b:a9:ff:61:89:c8:97:3a:29:d2:6a:69:f7:d2:
67:ef:75:4a:e3:f5:42:0f:2a:1f:39:31:e1:f4:73:
ca:db:67:00:c1:ad:6f:43:3f:c2:36:3d:7c:3c:0f:
67:89:d8:3f:f9:0b:49:09:2e:e9:4e:5c:44:68:37:
b4:68:95:4d:04:0d:81:8e:65:66:e4:a5:85:6e:40:
20:9c:73:ad:34:f6:91:51:e3:cd:0a:f0:09:6b:04:
cf:7e:ec:99:33:f8:f3:af:f5:97:e5:00:6a:26:d0:
51:7a:bc:df:2b:18:ba:40:51:94:2d:0c:88:37:7f:
f0:33:65:1f:c2:a7:da:d7:3e:ba:06:12:6d:ec:f6:
01:d7:99:18:0b:7d:aa:33:01:6f:4c:4a:08:6b:3f:
bf:ce:cf:ee:7e:dc:26:f4:63:7b:77:22:ed:0e:ef:
26:99:5d:45:18:36:42:5c:2b:32:5d:e4:ef:15:32:
57:bd:99:c0:03:72:7d:8a:3b:34:e3:ac:73:8d:c9:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DC:98:F5:F7:CB:4A:45:61:93:C7:1C:24:26:9C:E8:94:B6:52:93
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/z9yY9ffLSkVhk8ccJCac6JS2UpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.254.0/24
103.212.81.0/24
185.121.122.0/23
Signature Algorithm: sha256WithRSAEncryption
89:5d:dd:d3:d1:3c:89:13:76:9b:dd:2c:52:63:e5:0f:90:79:
73:19:ec:7e:f2:b7:dd:03:11:32:5e:f7:04:e8:84:12:d4:52:
cb:32:ea:52:48:69:bd:13:8b:97:0a:d7:18:ba:78:26:9d:e8:
69:f4:e7:61:84:9e:64:57:91:9b:a0:f9:e5:5e:b3:d5:fa:6a:
af:16:99:6e:e9:bf:c1:3e:cb:ee:77:06:de:63:f1:f7:e4:b1:
56:d8:03:b1:9f:d4:ad:d0:d3:21:2d:9c:ab:e5:de:05:e3:de:
8d:60:03:79:98:a9:0b:5d:8e:76:51:5a:b5:4f:7b:e4:a2:64:
77:bf:aa:33:bf:14:40:ff:17:44:e9:26:35:1f:aa:3e:4d:07:
10:98:ac:ac:ba:56:4b:40:3d:3a:bd:b2:62:3c:4a:26:a1:2d:
e0:9d:b9:15:68:20:76:3b:41:87:ef:37:12:de:8f:ab:1d:59:
ac:b5:be:8b:b3:cf:4c:f5:e6:a3:08:02:ab:0e:a9:9a:d5:26:
bf:46:0e:36:90:fe:2f:a3:a7:69:0c:ba:f5:5a:45:c9:8f:a8:
12:4a:19:14:28:23:bf:3f:9a:5f:10:b4:0f:6b:7a:87:da:7c:
9c:91:37:61:05:e2:ae:a8:6b:2d:15:22:e8:be:dd:13:f5:b8:
60:48:68:60
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZK5IY7LLKBpQBbcdLPFDL1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQxMDIzMTEyNzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmRjOThmNWY3Y2I0YTQ1NjE5M2M3MWMyNDI2OWNlODk0YjY1MjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35s7fb4RgXpBBbLqc71vVP2OL5CE
/3CsMpxga/l19zLn/BNSx4YlWUvTywqQEgVzcfykkpB5xTDKLVvEW6n/YYnIlzop
0mpp99Jn73VK4/VCDyofOTHh9HPK22cAwa1vQz/CNj18PA9nidg/+QtJCS7pTlxE
aDe0aJVNBA2BjmVm5KWFbkAgnHOtNPaRUePNCvAJawTPfuyZM/jzr/WX5QBqJtBR
erzfKxi6QFGULQyIN3/wM2Ufwqfa1z66BhJt7PYB15kYC32qMwFvTEoIaz+/zs/u
ftwm9GN7dyLtDu8mmV1FGDZCXCsyXeTvFTJXvZnAA3J9ijs046xzjckL6QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM/cmPX3y0pFYZPHHCQmnOiUtlKTMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvejl5WTlmZkxTa1ZoazhjY0pDYWM2SlMyVXBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXXP+AwQA
Z9RRAwQBuXl6MA0GCSqGSIb3DQEBCwUAA4IBAQCJXd3T0TyJE3ab3SxSY+UPkHlz
Gex+8rfdAxEyXvcE6IQS1FLLMupSSGm9E4uXCtcYungmnehp9OdhhJ5kV5GboPnl
XrPV+mqvFplu6b/BPsvudwbeY/H35LFW2AOxn9St0NMhLZyr5d4F496NYAN5mKkL
XY52UVq1T3vkomR3v6ozvxRA/xdE6SY1H6o+TQcQmKysulZLQD06vbJiPEomoS3g
nbkVaCB2O0GH7zcS3o+rHVmstb6Ls89M9eajCAKrDqma1Sa/Rg42kP4vo6dpDLr1
WkXJj6gSShkUKCO/P5pfELQPa3qH2nyckTdhBeKuqGstFSLovt0T9bhgSGhg
-----END CERTIFICATE-----
Generated at Thu Oct 24 07:52:53 2024 by rpki-client on console-ams.rpki-client.org