Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/ZdKNrZWtkN8jokBNG2AQAeTZl7I.roa
File: ZdKNrZWtkN8jokBNG2AQAeTZl7I.roa (raw, json)
Hash identifier: Fr7wuqPX9al/VuNzElkWOegpuu6Z5SinOqS+eU0eKX4=
Subject key identifier: 65:D2:8D:AD:95:AD:90:DF:23:A2:40:4D:1B:60:10:01:E4:D9:97:B2
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 018B1EBE63E019213B584CEDEF9B841992BA
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/ZdKNrZWtkN8jokBNG2AQAeTZl7I.roa
Signing time: Wed 11 Oct 2023 12:37:55 +0000
ROA not before: Wed 11 Oct 2023 12:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50785
IP address blocks: 185.77.70.0/24 maxlen: 24
185.77.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:be:63:e0:19:21:3b:58:4c:ed:ef:9b:84:19:92:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Oct 11 12:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d28dad95ad90df23a2404d1b601001e4d997b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:cf:9d:ad:71:06:c9:7c:8d:5e:89:5b:e6:
0d:74:ab:74:9c:e3:7d:48:76:f8:5e:1f:15:14:09:
83:7c:ed:8f:5f:82:33:70:2b:69:d3:c9:70:c5:1d:
1f:18:b9:42:0d:58:bc:d1:cc:e0:86:a5:3d:0f:d0:
90:24:fd:86:40:7f:f1:1f:0d:ab:b9:8f:60:c8:80:
58:de:df:6a:d4:0d:17:5a:2c:7e:b8:82:a0:dd:a2:
7c:af:3a:b5:be:b2:90:1f:dd:d8:96:42:fe:aa:0d:
6a:61:d9:01:02:8d:35:56:b8:44:ed:07:a2:1c:84:
a0:8d:a5:ab:d9:77:ea:bf:a6:a3:57:90:a0:9d:e0:
6b:8d:3f:ad:b2:b2:79:77:80:be:24:52:e4:77:00:
37:1b:5d:cb:67:95:12:82:5d:4a:5c:ef:d9:12:d1:
28:88:20:d8:e9:80:4e:d9:3f:39:49:1d:ac:25:0f:
63:42:60:7b:1b:7a:3a:52:5e:49:af:85:29:b9:9e:
90:67:d7:b6:86:57:29:dc:f0:1d:3c:24:49:81:65:
fd:14:8f:eb:64:11:e3:ec:37:d1:61:d3:22:be:df:
92:85:b3:57:d3:7b:17:9e:31:d8:12:35:91:15:e7:
0e:3a:18:4a:89:fd:7e:6f:81:f6:95:b8:88:82:dd:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D2:8D:AD:95:AD:90:DF:23:A2:40:4D:1B:60:10:01:E4:D9:97:B2
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/ZdKNrZWtkN8jokBNG2AQAeTZl7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.70.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:d0:39:dd:dd:56:24:46:34:9e:36:2b:b1:3c:b9:65:8f:fa:
09:d3:a3:a8:09:a2:dc:29:22:5c:d2:bd:2e:19:ed:d6:9f:57:
46:17:d1:f4:c9:ef:36:12:20:16:86:32:e3:e4:5d:eb:0c:50:
7d:fb:2f:91:36:87:e8:2e:ad:5d:f0:e6:ed:80:57:40:9b:9d:
b9:a3:92:8d:fa:1e:84:13:f0:29:0d:3d:3b:67:52:a7:dc:36:
45:d6:1d:d6:7f:ac:da:28:bd:8f:00:77:4e:77:18:23:e6:36:
69:ed:43:ce:c4:01:9d:b6:70:c9:09:b2:e6:07:a6:56:e5:a5:
cf:15:95:a5:5d:53:b0:93:f8:17:ea:e1:3d:43:15:7f:08:7a:
d6:7b:02:e7:87:3c:fc:24:9d:66:ee:fd:08:c7:ba:53:19:b4:
ff:6d:95:df:c6:85:90:ad:8d:9a:f9:aa:99:4e:f9:d5:da:3d:
67:22:42:4c:89:21:a1:34:b6:93:2c:d2:a6:27:de:98:98:08:
9c:1c:dc:df:44:78:fd:3e:ac:79:bb:2a:27:a8:eb:2a:0a:c8:
be:9b:09:28:69:1b:39:cf:c2:9d:78:83:03:fb:54:d9:10:61:
5b:fb:d4:d5:1a:ac:d4:f5:be:8c:74:b8:32:91:83:26:10:2c:
b3:32:23:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsevmPgGSE7WEzt75uEGZK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjM0MDM1MzA0OThkODI1ZjJlNzg4YTA3NjUwM2JjOWRj
ZTE1NzQwHhcNMjMxMDExMTIzNzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWQyOGRhZDk1YWQ5MGRmMjNhMjQwNGQxYjYwMTAwMWU0ZDk5N2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35fPna1xBsl8jV6JW+YNdKt0nON9
SHb4Xh8VFAmDfO2PX4IzcCtp08lwxR0fGLlCDVi80czghqU9D9CQJP2GQH/xHw2r
uY9gyIBY3t9q1A0XWix+uIKg3aJ8rzq1vrKQH93YlkL+qg1qYdkBAo01VrhE7Qei
HISgjaWr2Xfqv6ajV5CgneBrjT+tsrJ5d4C+JFLkdwA3G13LZ5USgl1KXO/ZEtEo
iCDY6YBO2T85SR2sJQ9jQmB7G3o6Ul5Jr4UpuZ6QZ9e2hlcp3PAdPCRJgWX9FI/r
ZBHj7DfRYdMivt+ShbNX03sXnjHYEjWRFecOOhhKif1+b4H2lbiIgt1AnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXSja2VrZDfI6JATRtgEAHk2ZeyMB8GA1UdIwQY
MBaAFPezQDUwSY2CXy54igdlA7ydzhV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQt
NDBkZDJjNzVmMWI3LzEvWmRLTnJaV3RrTjhqb2tCTkcyQVFBZVRabDdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQtNDBkZDJjNzVmMWI3
LzEvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuU1GMA0G
CSqGSIb3DQEBCwUAA4IBAQCO0Dnd3VYkRjSeNiuxPLllj/oJ06OoCaLcKSJc0r0u
Ge3Wn1dGF9H0ye82EiAWhjLj5F3rDFB9+y+RNofoLq1d8ObtgFdAm525o5KN+h6E
E/ApDT07Z1Kn3DZF1h3Wf6zaKL2PAHdOdxgj5jZp7UPOxAGdtnDJCbLmB6ZW5aXP
FZWlXVOwk/gX6uE9QxV/CHrWewLnhzz8JJ1m7v0Ix7pTGbT/bZXfxoWQrY2a+aqZ
TvnV2j1nIkJMiSGhNLaTLNKmJ96YmAicHNzfRHj9Pqx5uyonqOsqCsi+mwkoaRs5
z8KdeIMD+1TZEGFb+9TVGqzU9b6MdLgykYMmECyzMiOG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:01 2024 by rpki-client on console-fra.rpki-client.org