Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ZJrN66OIAE7wXvtr5bk_ZhEm010.roa
File: ZJrN66OIAE7wXvtr5bk_ZhEm010.roa (raw, json)
Hash identifier: ZCBDw1Mmx1Gtlgu7zJpcHhXI4Iht0J2c/GGE6SN2Ee0=
Subject key identifier: 64:9A:CD:EB:A3:88:00:4E:F0:5E:FB:6B:E5:B9:3F:66:11:26:D3:5D
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018607240B3C329F98843B3233E643BA9AF8
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ZJrN66OIAE7wXvtr5bk_ZhEm010.roa
Signing time: Tue 31 Jan 2023 09:24:08 +0000
ROA not before: Tue 31 Jan 2023 09:24:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204063
IP address blocks: 5.1.64.0/21 maxlen: 32
94.247.47.0/24 maxlen: 32
185.90.161.0/24 maxlen: 32
185.90.160.0/24 maxlen: 32
185.90.163.0/24 maxlen: 32
5.1.94.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:24:0b:3c:32:9f:98:84:3b:32:33:e6:43:ba:9a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 31 09:24:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=649acdeba388004ef05efb6be5b93f661126d35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9f:03:ec:1d:c0:5b:58:bd:6a:f2:5c:55:bd:
fc:97:2c:d5:1a:bf:06:a8:91:e6:92:38:21:1d:c1:
b7:6f:d3:1d:46:e1:49:99:6e:70:68:6f:d4:ad:05:
58:b4:0b:72:2d:3f:21:73:f9:a3:84:d3:e8:8c:af:
02:d4:6b:28:f2:ec:79:42:4a:8b:d8:29:aa:a1:f5:
3a:d6:2f:5b:52:18:83:05:b7:23:a4:27:43:c6:f6:
7e:ae:4a:f8:a7:00:02:91:4b:51:3d:0b:c8:d0:77:
01:06:58:88:91:02:23:a9:fa:7a:55:58:42:71:50:
cf:d9:31:bb:c7:ec:52:b7:f4:06:21:4e:31:52:80:
d7:9e:8b:54:ea:04:5e:c8:a1:c2:01:4c:bc:78:8f:
b6:dd:70:6f:77:d7:90:d5:7a:72:bc:bf:14:bb:5d:
48:d2:05:4b:57:de:38:bc:2f:9c:0c:32:84:78:c8:
b2:df:3f:f3:af:ea:3f:1f:5a:44:23:87:b6:8b:5c:
16:df:74:f5:c1:1e:bb:27:0e:b0:de:e2:95:f4:37:
ac:25:74:89:48:eb:2b:c0:96:44:23:70:da:1a:a9:
19:8c:43:63:5a:ec:e9:89:de:d8:c7:9b:d0:75:77:
0f:7f:93:91:f9:40:70:da:15:c2:6a:fa:d6:eb:36:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:CD:EB:A3:88:00:4E:F0:5E:FB:6B:E5:B9:3F:66:11:26:D3:5D
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ZJrN66OIAE7wXvtr5bk_ZhEm010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.64.0/21
5.1.94.0/24
94.247.47.0/24
185.90.160.0/23
185.90.163.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:23:17:84:25:21:6a:3a:1b:a6:08:d0:db:85:7d:98:74:e3:
ad:b9:a2:d9:06:b2:22:86:a2:4a:54:47:90:c4:fd:b4:65:ff:
7b:c3:e8:88:11:cb:86:7f:42:fb:f3:8e:98:74:7c:21:e9:3d:
3c:ed:e8:21:72:4f:09:b5:d7:e2:33:36:57:09:56:fb:b8:8b:
f7:26:ee:ab:92:89:ba:3d:ca:e8:54:8f:9b:a3:b7:f4:3f:00:
64:f7:dc:60:96:6e:59:28:52:a9:0c:a9:6d:cb:52:57:fe:5e:
13:dd:4b:ce:5c:61:da:12:15:d3:b7:13:12:35:21:0a:b4:14:
43:e9:a8:91:d5:e7:93:1a:94:88:7a:d2:5c:39:f9:50:aa:3c:
87:d8:00:bf:99:39:a2:8f:aa:d6:41:cf:2f:fb:30:7c:95:23:
92:f0:83:a7:24:6b:13:69:bf:d4:d4:1e:9a:75:82:f2:19:54:
af:bf:e8:ec:da:d2:92:73:22:ea:ec:b6:7c:c6:d9:6a:e6:4b:
8b:b7:4f:03:ec:3f:25:c1:b8:a1:b3:f1:b0:e6:b4:7d:fc:b4:
fb:87:76:a1:02:59:43:68:cf:e1:33:42:ac:dc:43:2b:1a:90:
32:28:ed:06:0b:36:52:83:13:8f:00:11:c4:f3:10:d6:6a:ed:
bf:64:63:3a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYYHJAs8Mp+YhDsyM+ZDupr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjMwMTMxMDkyNDA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDlhY2RlYmEzODgwMDRlZjA1ZWZiNmJlNWI5M2Y2NjExMjZkMzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip8D7B3AW1i9avJcVb38lyzVGr8G
qJHmkjghHcG3b9MdRuFJmW5waG/UrQVYtAtyLT8hc/mjhNPojK8C1Gso8ux5QkqL
2CmqofU61i9bUhiDBbcjpCdDxvZ+rkr4pwACkUtRPQvI0HcBBliIkQIjqfp6VVhC
cVDP2TG7x+xSt/QGIU4xUoDXnotU6gReyKHCAUy8eI+23XBvd9eQ1XpyvL8Uu11I
0gVLV944vC+cDDKEeMiy3z/zr+o/H1pEI4e2i1wW33T1wR67Jw6w3uKV9DesJXSJ
SOsrwJZEI3DaGqkZjENjWuzpid7Yx5vQdXcPf5OR+UBw2hXCavrW6zZfpwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGSazeujiABO8F77a+W5P2YRJtNdMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvWkpyTjY2T0lBRTd3WHZ0cjVia19aaEVtMDEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDBQFAAwQA
BQFeAwQAXvcvAwQBuVqgAwQAuVqjMA0GCSqGSIb3DQEBCwUAA4IBAQB/IxeEJSFq
OhumCNDbhX2YdOOtuaLZBrIihqJKVEeQxP20Zf97w+iIEcuGf0L7846YdHwh6T08
7eghck8JtdfiMzZXCVb7uIv3Ju6rkom6PcroVI+bo7f0PwBk99xglm5ZKFKpDKlt
y1JX/l4T3UvOXGHaEhXTtxMSNSEKtBRD6aiR1eeTGpSIetJcOflQqjyH2AC/mTmi
j6rWQc8v+zB8lSOS8IOnJGsTab/U1B6adYLyGVSvv+js2tKScyLq7LZ8xtlq5kuL
t08D7D8lwbihs/Gw5rR9/LT7h3ahAllDaM/hM0Ks3EMrGpAyKO0GCzZSgxOPABHE
8xDWau2/ZGM6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:08 2023 by rpki-client on console-ams.rpki-client.org