Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZPBJcRY-FYl7hQGt6AdJYyUl2zs.roa
File: ZPBJcRY-FYl7hQGt6AdJYyUl2zs.roa (raw, json)
Hash identifier: 90J6LQRtO+Yjh6Bi6vDSCRsUvk1mQ40Se8jXZbA/c8k=
Subject key identifier: 64:F0:49:71:16:3E:15:89:7B:85:01:AD:E8:07:49:63:25:25:DB:3B
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737ABB6AB38DA560C3521B36B9562889
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZPBJcRY-FYl7hQGt6AdJYyUl2zs.roa
Signing time: Mon 02 Jan 2023 17:15:01 +0000
ROA not before: Mon 02 Jan 2023 17:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20048
IP address blocks: 185.119.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:bb:6a:b3:8d:a5:60:c3:52:1b:36:b9:56:28:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f04971163e15897b8501ade80749632525db3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:e2:3e:fd:05:18:43:35:68:ea:77:2c:b5:
ed:42:fc:ea:50:87:46:f8:12:d8:f1:f8:9d:47:ed:
ac:3f:ab:b1:be:f4:66:fa:d8:0c:38:a6:a5:d5:84:
d4:7a:52:f2:b4:9c:d2:3d:7a:a7:ed:71:f0:98:93:
7a:70:a2:b7:bf:fe:7d:79:7f:13:ad:71:c8:1c:1e:
a0:80:92:77:f1:f4:0b:14:8d:66:2e:ad:2b:da:89:
04:9c:14:e1:7d:af:65:4c:b0:ae:e2:59:76:99:87:
01:f4:30:f0:ab:94:f4:be:4e:3f:67:ef:26:21:f6:
0f:4b:18:20:73:72:db:a3:2a:8f:77:04:db:7c:90:
49:e3:67:d9:7a:3c:ab:c8:36:1e:60:26:14:a0:c2:
a3:58:58:c3:f3:62:6e:40:26:74:12:83:ea:2f:0a:
88:51:eb:90:c0:a0:d3:5b:44:88:7b:3d:c9:a0:36:
f6:7a:1f:df:0c:76:c3:ab:53:0f:e0:d4:a6:9f:6b:
19:40:c9:31:bf:e4:d4:65:38:14:96:14:9d:d1:04:
b3:3e:4f:d2:6c:97:91:fe:db:95:ae:0e:af:78:be:
59:b7:4b:f7:b1:9d:61:65:72:6c:e0:08:ab:b0:7d:
f7:b3:cc:75:cf:b2:61:bb:1e:14:d1:9f:de:e2:35:
be:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F0:49:71:16:3E:15:89:7B:85:01:AD:E8:07:49:63:25:25:DB:3B
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZPBJcRY-FYl7hQGt6AdJYyUl2zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.236.0/22
Signature Algorithm: sha256WithRSAEncryption
87:16:50:24:72:e4:24:73:99:0e:40:a7:05:bf:0f:45:71:c6:
f1:f6:8f:2d:4c:65:7f:1d:c1:06:ab:e6:5d:1d:61:3f:a4:66:
84:62:6e:a5:14:d5:f6:34:27:4c:0d:10:08:06:fa:ad:a7:b4:
8d:d7:d9:da:6b:51:22:4d:5b:b5:91:36:3c:3c:50:33:ed:6f:
45:4a:89:ce:d3:52:af:7e:8b:1d:2a:57:54:47:d4:b9:ee:9c:
86:b6:76:63:15:32:30:71:e4:8f:18:11:50:fe:c7:1f:cb:2d:
6c:e8:0f:b4:ff:95:63:dc:a2:f9:32:89:8d:20:84:f4:d1:ed:
fb:d8:06:3b:ee:9c:a6:6f:80:bd:cb:d3:a7:84:db:cc:26:8f:
64:d9:af:5f:d9:60:fe:c1:d8:83:81:b2:e9:e5:79:7e:1d:33:
b6:1c:b3:15:75:e8:fc:2a:02:7f:26:f4:fe:a8:41:4f:3d:7b:
09:fb:ed:a5:5e:f3:23:56:70:0c:84:83:13:b8:be:c3:c7:1e:
21:0e:80:7d:c4:ef:01:ef:0b:d2:5a:36:df:b1:c2:c8:d6:14:
5e:5c:2e:a3:3d:e3:ad:85:db:25:a8:9a:95:d0:e8:67:48:43:
1d:c0:56:a1:9e:1c:ad:8c:0b:8b:ee:a5:f7:dd:fb:66:3d:f6:
5d:be:97:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzertqs42lYMNSGza5ViiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjMwMTAyMTcxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGYwNDk3MTE2M2UxNTg5N2I4NTAxYWRlODA3NDk2MzI1MjVkYjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMHiPv0FGEM1aOp3LLXtQvzqUIdG
+BLY8fidR+2sP6uxvvRm+tgMOKal1YTUelLytJzSPXqn7XHwmJN6cKK3v/59eX8T
rXHIHB6ggJJ38fQLFI1mLq0r2okEnBThfa9lTLCu4ll2mYcB9DDwq5T0vk4/Z+8m
IfYPSxggc3LboyqPdwTbfJBJ42fZejyryDYeYCYUoMKjWFjD82JuQCZ0EoPqLwqI
UeuQwKDTW0SIez3JoDb2eh/fDHbDq1MP4NSmn2sZQMkxv+TUZTgUlhSd0QSzPk/S
bJeR/tuVrg6veL5Zt0v3sZ1hZXJs4AirsH33s8x1z7Jhux4U0Z/e4jW+ZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGTwSXEWPhWJe4UBregHSWMlJds7MB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvWlBCSmNSWS1GWWw3aFFHdDZBZEpZeVVsMnpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXfsMA0G
CSqGSIb3DQEBCwUAA4IBAQCHFlAkcuQkc5kOQKcFvw9Fccbx9o8tTGV/HcEGq+Zd
HWE/pGaEYm6lFNX2NCdMDRAIBvqtp7SN19naa1EiTVu1kTY8PFAz7W9FSonO01Kv
fosdKldUR9S57pyGtnZjFTIwceSPGBFQ/scfyy1s6A+0/5Vj3KL5MomNIIT00e37
2AY77pymb4C9y9OnhNvMJo9k2a9f2WD+wdiDgbLp5Xl+HTO2HLMVdej8KgJ/JvT+
qEFPPXsJ++2lXvMjVnAMhIMTuL7Dxx4hDoB9xO8B7wvSWjbfscLI1hReXC6jPeOt
hdslqJqV0OhnSEMdwFahnhytjAuL7qX33ftmPfZdvpd7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org