Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/cZekEK-3ZifJHgcLreWegIIiba0.roa
File: cZekEK-3ZifJHgcLreWegIIiba0.roa (raw, json)
Hash identifier: 7RJpnm45I2DXohMSquVnqnm+xNbvViSMHRD0GsA95Uo=
Subject key identifier: 71:97:A4:10:AF:B7:66:27:C9:1E:07:0B:AD:E5:9E:80:82:22:6D:AD
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01896478E8E98F3E4E9CDFC82B6E7EAE3745
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/cZekEK-3ZifJHgcLreWegIIiba0.roa
Signing time: Mon 17 Jul 2023 15:29:52 +0000
ROA not before: Mon 17 Jul 2023 15:29:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 194.32.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:e8:e9:8f:3e:4e:9c:df:c8:2b:6e:7e:ae:37:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 17 15:29:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7197a410afb76627c91e070bade59e8082226dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:71:61:10:2c:85:fc:75:29:7b:5d:21:95:
30:a4:9d:b2:16:1c:d5:e1:75:d6:90:4b:12:67:fa:
d2:54:46:b5:79:4c:5e:47:fc:6f:fa:82:56:88:a2:
9a:1c:5c:c9:a2:8f:a9:88:f7:f0:42:eb:01:fe:e7:
d7:d5:5b:2a:9a:15:84:8e:66:df:dc:1a:02:c1:67:
eb:f8:bf:3d:cc:9c:18:8b:8d:1f:98:88:bd:99:15:
ad:fa:b1:20:fb:6b:b1:25:23:78:1e:15:81:e3:60:
99:a5:c2:04:1b:de:62:7c:b4:3f:a4:14:34:6a:13:
97:fe:fb:2c:47:60:94:5a:aa:05:41:c5:25:da:50:
66:b0:88:6e:a5:ce:83:47:c1:7e:9a:8b:98:26:86:
5b:c5:bc:c7:71:91:68:59:46:b2:f2:5e:79:49:c8:
71:29:a5:66:c7:dc:9e:f1:d2:94:52:e2:52:47:46:
57:1d:d7:f0:7c:6c:12:83:e0:c1:72:e7:9d:f4:35:
dd:de:31:ba:76:e2:5c:51:2b:56:4b:80:ff:5a:6e:
40:d0:5a:11:1c:ee:e5:d3:af:e7:bd:fd:7c:2e:16:
1f:fd:b7:af:f0:86:ed:95:7a:83:20:86:16:f9:dc:
88:f9:6a:c3:e3:d4:26:b1:01:2d:2f:a6:b3:22:c3:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:97:A4:10:AF:B7:66:27:C9:1E:07:0B:AD:E5:9E:80:82:22:6D:AD
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/cZekEK-3ZifJHgcLreWegIIiba0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.228.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ac:45:5d:1a:c8:93:37:7c:e0:18:ef:42:e0:8e:37:67:96:
16:60:13:5e:29:78:89:f4:0c:bc:7b:73:25:0f:4e:a0:63:27:
94:79:d6:7d:92:86:bd:53:69:17:96:0a:3b:9a:14:92:0e:f2:
39:d0:ee:be:6f:4d:27:34:80:3f:04:c4:ce:a3:a4:cb:4c:bc:
8d:1b:a6:31:68:bf:23:aa:43:f4:56:31:e4:78:f3:c6:ab:8e:
12:db:d0:39:ab:f2:9f:c6:21:50:2b:db:b8:5a:f9:6a:5a:c4:
f6:b1:6d:6f:1b:59:b4:09:7d:eb:e3:48:52:2f:1d:58:ce:b3:
79:13:cd:2d:5e:b8:0b:bb:7c:66:c0:2a:54:7e:19:b5:bb:bf:
b4:a4:be:fd:ab:79:30:15:d7:a7:e7:9f:98:2d:ee:9f:3c:7f:
50:be:9d:28:c5:57:6a:f6:d5:cd:6e:b8:f1:bb:26:7d:38:38:
5f:8b:15:f9:0b:eb:ba:2f:16:70:9e:f9:9c:6e:41:14:c9:41:
84:35:56:d2:3e:a2:4e:aa:5f:ae:b7:72:ee:d2:70:6d:6b:5a:
b0:8d:f6:21:19:89:84:e0:39:78:c3:ec:85:01:e0:00:c1:55:
ac:07:a5:47:bf:1f:16:b2:53:95:63:99:c7:bc:29:32:9d:b9:
39:48:55:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkeOjpjz5OnN/IK25+rjdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjMwNzE3MTUyOTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTk3YTQxMGFmYjc2NjI3YzkxZTA3MGJhZGU1OWU4MDgyMjI2ZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTBxYRAshfx1KXtdIZUwpJ2yFhzV
4XXWkEsSZ/rSVEa1eUxeR/xv+oJWiKKaHFzJoo+piPfwQusB/ufX1VsqmhWEjmbf
3BoCwWfr+L89zJwYi40fmIi9mRWt+rEg+2uxJSN4HhWB42CZpcIEG95ifLQ/pBQ0
ahOX/vssR2CUWqoFQcUl2lBmsIhupc6DR8F+mouYJoZbxbzHcZFoWUay8l55Schx
KaVmx9ye8dKUUuJSR0ZXHdfwfGwSg+DBcued9DXd3jG6duJcUStWS4D/Wm5A0FoR
HO7l06/nvf18LhYf/bev8IbtlXqDIIYW+dyI+WrD49QmsQEtL6azIsOrhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHGXpBCvt2YnyR4HC63lnoCCIm2tMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvY1pla0VLLTNaaWZKSGdjTHJlV2VnSUlpYmEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiDkMA0G
CSqGSIb3DQEBCwUAA4IBAQARrEVdGsiTN3zgGO9C4I43Z5YWYBNeKXiJ9Ay8e3Ml
D06gYyeUedZ9koa9U2kXlgo7mhSSDvI50O6+b00nNIA/BMTOo6TLTLyNG6YxaL8j
qkP0VjHkePPGq44S29A5q/KfxiFQK9u4WvlqWsT2sW1vG1m0CX3r40hSLx1YzrN5
E80tXrgLu3xmwCpUfhm1u7+0pL79q3kwFden55+YLe6fPH9Qvp0oxVdq9tXNbrjx
uyZ9ODhfixX5C+u6LxZwnvmcbkEUyUGENVbSPqJOql+ut3Lu0nBta1qwjfYhGYmE
4Dl4w+yFAeAAwVWsB6VHvx8WslOVY5nHvCkynbk5SFX8
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:58 2024 by rpki-client on console-fra.rpki-client.org