Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z7sEzdShQZYK3dCMS2q98rhSVWw.roa
File: z7sEzdShQZYK3dCMS2q98rhSVWw.roa (raw, json)
Hash identifier: ZLEfXrLa/uBKRfOd+pBwCTjNtNfB3hcI4xrWftpxJkU=
Subject key identifier: CF:BB:04:CD:D4:A1:41:96:0A:DD:D0:8C:4B:6A:BD:F2:B8:52:55:6C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C540D90C63FAC87DE2BF3B08E14369D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z7sEzdShQZYK3dCMS2q98rhSVWw.roa
Signing time: Sun 01 Jan 2023 07:55:25 +0000
ROA not before: Sun 01 Jan 2023 07:55:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204526
IP address blocks: 194.34.230.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:0d:90:c6:3f:ac:87:de:2b:f3:b0:8e:14:36:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfbb04cdd4a141960addd08c4b6abdf2b852556c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:80:8d:fa:de:04:be:08:be:ef:0b:9d:10:
1d:1c:3c:57:9d:eb:ad:81:a7:af:bc:11:42:ee:d1:
2a:0b:5a:54:51:57:bd:1b:85:eb:55:6b:72:96:d1:
60:f7:13:a3:6a:b8:a3:65:5f:cd:9d:39:ed:a5:4d:
8f:1a:23:1d:35:63:49:52:99:08:bc:e2:85:2e:b4:
d2:11:9a:3f:e0:08:4c:23:28:d7:b5:4f:ec:10:a4:
a3:b4:45:cd:08:80:6a:4d:ac:1e:e2:ae:f4:a8:7b:
b0:66:72:a0:a6:6e:0f:62:b0:f9:8c:35:2f:5e:b0:
fe:3e:80:b9:8e:4b:56:64:6c:98:ac:7f:88:08:7f:
7a:0e:10:cc:55:9f:30:bb:89:e4:a0:6a:bd:f8:f9:
ac:ff:8f:50:ef:ec:43:22:58:67:f2:dd:05:8f:0e:
ef:6b:7b:dc:1b:5e:8f:d8:4b:32:ee:2a:09:a3:fd:
a1:57:a9:8d:dc:01:68:55:4c:c0:a7:38:d8:f0:22:
1c:1e:da:5a:82:40:08:02:84:95:e0:da:0a:6a:5c:
cd:e4:41:03:06:bc:47:2b:44:5f:ae:62:e0:5b:46:
df:9a:e9:da:a7:c9:8c:06:95:e5:66:10:d8:44:4a:
04:77:c8:38:8f:d8:92:d4:c8:0c:e0:b9:f8:05:4a:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BB:04:CD:D4:A1:41:96:0A:DD:D0:8C:4B:6A:BD:F2:B8:52:55:6C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z7sEzdShQZYK3dCMS2q98rhSVWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.230.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e2:9e:40:68:20:58:69:de:c5:18:ec:97:65:41:4d:f6:18:
fb:ba:45:f5:1c:b4:50:88:b1:35:2f:12:3b:a6:7b:ad:af:3b:
07:7f:62:c4:d2:a8:73:37:18:46:68:1a:04:81:bc:ed:90:2a:
06:79:ac:a4:fd:a2:18:c1:8c:f2:1a:62:77:31:1b:4a:3f:1b:
41:b4:fd:3d:21:fe:10:02:b4:01:d5:a7:d4:e1:e5:08:ff:3a:
05:bb:9e:fd:f7:39:83:c0:15:0c:e5:8f:01:f3:f7:6c:e2:56:
ad:da:c7:ea:31:76:bd:b6:ab:ac:cd:76:fc:22:43:ad:07:ea:
83:e9:c0:a8:8a:e3:b2:7c:61:1b:be:92:a0:39:a7:9a:66:07:
0a:14:e9:b9:f5:8c:b9:43:36:1d:b0:aa:bb:33:c4:03:f3:03:
a4:84:f1:5a:2a:97:b8:00:76:34:a3:3a:9c:4e:85:8b:12:88:
26:65:93:23:34:9d:bc:e3:ff:51:64:aa:f9:14:76:f4:56:8b:
1a:42:e5:80:9a:55:e6:c6:37:09:0e:f5:ea:54:22:40:e7:2b:
ca:64:4e:06:ab:ba:3f:bd:74:88:13:3f:c5:6c:40:55:b8:9b:
01:a5:dc:4c:42:96:ca:a2:7f:b7:f2:bf:25:87:72:3a:a3:79:
ec:10:1f:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsVA2Qxj+sh94r87COFDadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjMwMTAxMDc1NTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmJiMDRjZGQ0YTE0MTk2MGFkZGQwOGM0YjZhYmRmMmI4NTI1NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneSAjfreBL4Ivu8LnRAdHDxXneut
gaevvBFC7tEqC1pUUVe9G4XrVWtyltFg9xOjarijZV/NnTntpU2PGiMdNWNJUpkI
vOKFLrTSEZo/4AhMIyjXtU/sEKSjtEXNCIBqTawe4q70qHuwZnKgpm4PYrD5jDUv
XrD+PoC5jktWZGyYrH+ICH96DhDMVZ8wu4nkoGq9+Pms/49Q7+xDIlhn8t0Fjw7v
a3vcG16P2Esy7ioJo/2hV6mN3AFoVUzApzjY8CIcHtpagkAIAoSV4NoKalzN5EED
BrxHK0RfrmLgW0bfmunap8mMBpXlZhDYREoEd8g4j9iS1MgM4Ln4BUrI6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM+7BM3UoUGWCt3QjEtqvfK4UlVsMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvejdzRXpkU2hRWllLM2RDTVMycTk4cmhTVld3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiLmMA0G
CSqGSIb3DQEBCwUAA4IBAQBF4p5AaCBYad7FGOyXZUFN9hj7ukX1HLRQiLE1LxI7
pnutrzsHf2LE0qhzNxhGaBoEgbztkCoGeayk/aIYwYzyGmJ3MRtKPxtBtP09If4Q
ArQB1afU4eUI/zoFu5799zmDwBUM5Y8B8/ds4lat2sfqMXa9tquszXb8IkOtB+qD
6cCoiuOyfGEbvpKgOaeaZgcKFOm59Yy5QzYdsKq7M8QD8wOkhPFaKpe4AHY0ozqc
ToWLEogmZZMjNJ284/9RZKr5FHb0VosaQuWAmlXmxjcJDvXqVCJA5yvKZE4Gq7o/
vXSIEz/FbEBVuJsBpdxMQpbKon+38r8lh3I6o3nsEB+L
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org