Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/35ZnCDWdcKwE_-FPdHRfCm1oLB0.roa
File: 35ZnCDWdcKwE_-FPdHRfCm1oLB0.roa (raw, json)
Hash identifier: dfp/8kSYhe9tTNTaGjdyqpiXDjpUfnN6LuMhQytFbfw=
Subject key identifier: DF:96:67:08:35:9D:70:AC:04:FF:E1:4F:74:74:5F:0A:6D:68:2C:1D
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018A73DBB950DF6A003F2034A0B3549715AB
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/35ZnCDWdcKwE_-FPdHRfCm1oLB0.roa
Signing time: Fri 08 Sep 2023 08:14:54 +0000
ROA not before: Fri 08 Sep 2023 08:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 92.61.96.0/24 maxlen: 24
92.61.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Sep 2023 08:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:73:db:b9:50:df:6a:00:3f:20:34:a0:b3:54:97:15:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 8 08:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df966708359d70ac04ffe14f74745f0a6d682c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:f7:2c:8e:df:4d:3d:06:34:56:53:27:6c:
7a:05:73:92:81:c1:b2:17:77:8f:da:6f:95:28:23:
35:39:1d:2a:85:7b:f9:4f:b3:d8:be:d3:4e:5b:c2:
d6:a1:7b:df:4a:54:de:1a:66:dd:d7:30:bb:04:d2:
a4:8a:7e:47:9e:93:25:1c:26:b7:0c:a5:8a:b6:31:
be:cf:dd:99:fa:0f:a9:41:8a:ed:b3:67:b0:26:b2:
17:2a:7f:b6:dc:8a:f7:16:b2:bd:75:62:21:93:3e:
c6:8d:4d:c5:00:70:70:b6:67:7a:cb:b6:6f:ac:06:
8a:73:e9:b7:7d:4c:bc:ee:13:de:49:07:c5:fb:c8:
6a:2e:cf:1d:e9:45:ac:f2:27:9d:e2:4e:8a:d6:0b:
95:c0:c0:d3:3b:a5:8e:c1:45:dd:cc:fa:da:33:99:
ac:f4:b6:16:ea:23:8d:a8:49:8e:4e:97:74:1a:aa:
c6:89:f5:1d:23:e3:b2:de:a6:88:5d:4e:5a:27:4a:
c3:53:a7:70:d2:31:cc:bf:08:56:da:80:b9:90:3d:
36:b3:d3:27:af:37:6b:90:52:c6:15:8a:77:f7:83:
c3:d1:f6:12:3f:de:9b:73:35:93:85:11:8a:63:2e:
08:28:05:94:10:3f:3c:d5:f9:05:62:a3:e7:0e:a4:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:96:67:08:35:9D:70:AC:04:FF:E1:4F:74:74:5F:0A:6D:68:2C:1D
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/35ZnCDWdcKwE_-FPdHRfCm1oLB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.96.0/24
92.61.99.0/24
Signature Algorithm: sha256WithRSAEncryption
79:14:65:fd:c7:41:e2:b7:73:97:46:a1:c1:b7:e4:cf:0e:58:
b5:b1:4d:b1:59:ea:ba:06:e9:72:c0:f9:24:8e:fc:70:1a:c4:
e9:e8:ad:21:96:3e:57:56:d3:76:4c:53:a5:ce:bb:54:72:9a:
6a:10:53:7b:c5:ee:ad:2b:12:7e:70:c7:9f:43:62:f4:be:4d:
64:c6:68:0f:81:e8:21:49:a5:77:e5:e9:54:06:a1:17:34:39:
ae:79:19:fd:6f:87:d3:51:00:f2:6e:78:dd:0d:d4:e7:4a:ac:
ce:21:25:f6:71:52:98:bc:62:9b:00:f5:93:3a:d9:0a:c2:b6:
2f:07:43:27:df:91:dc:f2:34:10:a5:ff:8e:75:a9:60:65:6c:
7f:5c:d8:9b:7f:50:92:15:9e:2e:ea:b3:82:bb:4e:81:fd:56:
b5:00:97:be:5f:7a:fd:18:90:90:29:be:5a:80:f4:b4:08:7b:
cc:a2:44:7a:6f:1d:e2:a9:42:07:ea:ac:27:67:49:67:c9:6e:
7a:7b:66:af:46:64:12:a2:d3:4e:f6:2a:74:21:d7:ae:c2:85:
1f:3e:de:aa:4b:e9:ee:d4:b5:04:41:39:12:a8:7c:ac:ca:f4:
b7:55:a8:9a:14:40:76:f0:c2:fe:1b:ec:1d:a2:c0:c3:4a:9a:
18:a5:b7:ee
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYpz27lQ32oAPyA0oLNUlxWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjMwOTA4MDgxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjk2NjcwODM1OWQ3MGFjMDRmZmUxNGY3NDc0NWYwYTZkNjgyYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyX3LI7fTT0GNFZTJ2x6BXOSgcGy
F3eP2m+VKCM1OR0qhXv5T7PYvtNOW8LWoXvfSlTeGmbd1zC7BNKkin5HnpMlHCa3
DKWKtjG+z92Z+g+pQYrts2ewJrIXKn+23Ir3FrK9dWIhkz7GjU3FAHBwtmd6y7Zv
rAaKc+m3fUy87hPeSQfF+8hqLs8d6UWs8ied4k6K1guVwMDTO6WOwUXdzPraM5ms
9LYW6iONqEmOTpd0GqrGifUdI+Oy3qaIXU5aJ0rDU6dw0jHMvwhW2oC5kD02s9Mn
rzdrkFLGFYp394PD0fYSP96bczWThRGKYy4IKAWUED881fkFYqPnDqTJMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN+WZwg1nXCsBP/hT3R0XwptaCwdMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvMzVabkNEV2RjS3dFXy1GUGRIUmZDbTFvTEIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXD1gAwQA
XD1jMA0GCSqGSIb3DQEBCwUAA4IBAQB5FGX9x0Hit3OXRqHBt+TPDli1sU2xWeq6
BulywPkkjvxwGsTp6K0hlj5XVtN2TFOlzrtUcppqEFN7xe6tKxJ+cMefQ2L0vk1k
xmgPgeghSaV35elUBqEXNDmueRn9b4fTUQDybnjdDdTnSqzOISX2cVKYvGKbAPWT
OtkKwrYvB0Mn35Hc8jQQpf+OdalgZWx/XNibf1CSFZ4u6rOCu06B/Va1AJe+X3r9
GJCQKb5agPS0CHvMokR6bx3iqUIH6qwnZ0lnyW56e2avRmQSotNO9ip0IdeuwoUf
Pt6qS+nu1LUEQTkSqHysyvS3VaiaFEB28ML+G+wdosDDSpoYpbfu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org