Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/dzg31bUpgAIAA3-kx4NIasb56qw.roa
File: dzg31bUpgAIAA3-kx4NIasb56qw.roa (raw, json)
Hash identifier: Gdm60Gi/0JYG3W0wwgzv2YGChsP3nt/HXt0xL4oikkA=
Subject key identifier: 77:38:37:D5:B5:29:80:02:00:03:7F:A4:C7:83:48:6A:C6:F9:EA:AC
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 01880C219D8FDCEAA78C1C8D9F3533B43161
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/dzg31bUpgAIAA3-kx4NIasb56qw.roa
Signing time: Thu 11 May 2023 18:45:09 +0000
ROA not before: Thu 11 May 2023 18:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 2.59.203.0/24 maxlen: 24
2.59.202.0/24 maxlen: 24
88.218.151.0/24 maxlen: 24
88.218.150.0/24 maxlen: 24
85.209.4.0/24 maxlen: 24
85.209.7.0/24 maxlen: 24
85.209.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:21:9d:8f:dc:ea:a7:8c:1c:8d:9f:35:33:b4:31:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: May 11 18:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=773837d5b529800200037fa4c783486ac6f9eaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:45:79:3e:a9:ee:31:b8:d6:3f:0e:45:4c:1b:
a2:71:81:25:f8:33:c9:a8:63:48:6d:77:93:12:7e:
12:dc:70:5d:91:95:3f:6c:96:ba:86:a4:fc:39:2b:
d2:dc:78:20:72:42:7b:94:8e:c3:93:ca:3e:c5:6b:
16:fe:1f:d3:ab:77:01:47:bb:81:e1:d2:fb:7c:0a:
b2:a4:23:4b:5e:8e:3c:bb:8a:ac:5d:f3:28:c4:e1:
d5:e2:6f:fd:ae:05:a7:71:32:9d:61:d9:d1:5a:e8:
eb:64:91:7a:32:5a:6f:1c:97:0f:0d:26:2b:9f:41:
ef:14:fa:8a:7a:97:47:7b:60:0b:57:b0:f5:1d:94:
9b:9a:fa:5e:08:7f:79:5d:93:62:7a:f0:ca:0c:8d:
ab:9c:dc:00:e1:a5:f8:63:03:49:4b:12:91:5f:94:
9c:25:07:d0:7d:36:be:4c:e6:63:a3:6a:cb:e5:f5:
ae:f9:23:fd:f8:be:e8:f8:2b:d0:dc:ca:0d:4c:55:
2b:11:08:d6:f4:06:59:30:db:90:39:e0:7e:c9:28:
9d:3f:db:02:29:19:45:12:5b:c3:14:7f:21:d0:8d:
d4:13:96:d9:59:2a:5f:57:fe:5a:9e:2d:d5:b7:35:
e0:2b:ed:91:47:68:37:1d:22:ba:5e:b0:f8:84:da:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:38:37:D5:B5:29:80:02:00:03:7F:A4:C7:83:48:6A:C6:F9:EA:AC
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/dzg31bUpgAIAA3-kx4NIasb56qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.202.0/23
85.209.4.0/24
85.209.6.0/23
88.218.150.0/23
Signature Algorithm: sha256WithRSAEncryption
76:21:41:62:1c:13:33:42:be:70:5e:a3:58:70:82:bb:bf:c6:
36:43:31:b4:b3:6e:93:02:a6:73:68:cd:ff:36:b9:b4:31:d1:
f0:3c:53:18:74:5f:ba:b7:a1:fb:ff:14:01:b9:f4:cc:6c:4e:
28:3a:1c:e8:c1:c2:4c:55:0d:1a:05:07:fb:32:af:5a:23:a5:
8c:14:a2:4a:22:ed:6d:a1:0c:b9:39:1c:f5:20:b6:7d:1f:a9:
1d:9c:23:6d:74:56:7e:44:94:d9:29:df:c5:d3:68:0a:2e:21:
32:fb:3f:4f:8e:6f:04:57:ea:33:7f:82:33:9a:3f:8d:6b:5d:
b8:ea:23:27:b7:ba:6b:5b:b8:89:e0:d4:d4:7d:e0:7f:24:14:
62:85:02:27:48:71:f3:a2:d3:df:b0:ec:1e:fd:ae:98:84:7e:
2d:4a:2f:67:ae:52:ad:76:79:c1:d7:9c:fc:52:75:e4:49:3c:
dd:3b:bc:a4:f3:9e:d6:18:e6:11:5f:6a:63:be:c6:d1:f1:95:
3e:67:50:3f:39:33:6a:18:4d:3b:6b:81:77:23:cd:88:e8:96:
e2:ba:94:75:0a:60:92:81:49:32:c6:2e:e3:68:41:95:52:a3:
e6:a9:af:53:74:80:bf:26:8e:5b:0d:a7:fc:93:b4:5b:bc:a9:
5b:a9:32:c3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYgMIZ2P3OqnjByNnzUztDFhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz
NGFiNGMwHhcNMjMwNTExMTg0NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzM4MzdkNWI1Mjk4MDAyMDAwMzdmYTRjNzgzNDg2YWM2ZjllYWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEV5PqnuMbjWPw5FTBuicYEl+DPJ
qGNIbXeTEn4S3HBdkZU/bJa6hqT8OSvS3HggckJ7lI7Dk8o+xWsW/h/Tq3cBR7uB
4dL7fAqypCNLXo48u4qsXfMoxOHV4m/9rgWncTKdYdnRWujrZJF6MlpvHJcPDSYr
n0HvFPqKepdHe2ALV7D1HZSbmvpeCH95XZNievDKDI2rnNwA4aX4YwNJSxKRX5Sc
JQfQfTa+TOZjo2rL5fWu+SP9+L7o+CvQ3MoNTFUrEQjW9AZZMNuQOeB+ySidP9sC
KRlFElvDFH8h0I3UE5bZWSpfV/5ani3VtzXgK+2RR2g3HSK6XrD4hNqlRQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHc4N9W1KYACAAN/pMeDSGrG+eqsMB8GA1UdIwQY
MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt
YzQyZjlhYmYxNDc3LzEvZHpnMzFiVXBnQUlBQTMta3g0Tklhc2I1NnF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3
LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBAjvKAwQA
VdEEAwQBVdEGAwQBWNqWMA0GCSqGSIb3DQEBCwUAA4IBAQB2IUFiHBMzQr5wXqNY
cIK7v8Y2QzG0s26TAqZzaM3/Nrm0MdHwPFMYdF+6t6H7/xQBufTMbE4oOhzowcJM
VQ0aBQf7Mq9aI6WMFKJKIu1toQy5ORz1ILZ9H6kdnCNtdFZ+RJTZKd/F02gKLiEy
+z9Pjm8EV+ozf4Izmj+Na1246iMnt7prW7iJ4NTUfeB/JBRihQInSHHzotPfsOwe
/a6YhH4tSi9nrlKtdnnB15z8UnXkSTzdO7yk857WGOYRX2pjvsbR8ZU+Z1A/OTNq
GE07a4F3I82I6JbiupR1CmCSgUkyxi7jaEGVUqPmqa9TdIC/Jo5bDaf8k7RbvKlb
qTLD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:04 2024 by rpki-client on console-fra.rpki-client.org