Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/RZOW5RkqzAFthzF__Xr4zW2QGt8.roa
File: RZOW5RkqzAFthzF__Xr4zW2QGt8.roa (raw, json)
Hash identifier: PXOypfgw+24JmTMWNdMbdwvEN8LdRYIhktlc50HH080=
Subject key identifier: 45:93:96:E5:19:2A:CC:01:6D:87:31:7F:FD:7A:F8:CD:6D:90:1A:DF
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 0185720C6F4D34F462E5E05C0CDE88CA5ED6
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/RZOW5RkqzAFthzF__Xr4zW2QGt8.roa
Signing time: Mon 02 Jan 2023 10:34:55 +0000
ROA not before: Mon 02 Jan 2023 10:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209817
IP address blocks: 185.253.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:6f:4d:34:f4:62:e5:e0:5c:0c:de:88:ca:5e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jan 2 10:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=459396e5192acc016d87317ffd7af8cd6d901adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:75:67:2f:0d:52:fb:32:b1:0e:10:eb:8a:
37:f8:9e:a0:72:18:d0:ea:9c:0c:b8:5b:45:9b:54:
66:1f:34:7c:3a:b4:a8:27:ea:b6:24:b0:f0:fb:9c:
2b:f4:fa:c8:73:7b:07:2f:f9:00:3b:4a:ef:88:92:
5f:28:d1:c5:4a:7f:23:e8:36:00:a6:6f:5a:9a:a4:
4c:da:16:d4:52:7b:9c:73:b0:c0:0b:ee:76:1e:e1:
9d:e4:f8:bf:1c:f2:8d:11:2a:8f:15:af:a8:ba:d0:
1a:cf:8f:b8:4e:32:f2:54:a5:7a:5d:dc:b7:75:a5:
4e:94:77:06:79:8d:96:b0:31:90:06:cf:90:17:5e:
ad:80:4d:5a:17:5b:0d:02:e3:a1:f3:06:c1:72:73:
35:d0:4e:83:1a:b5:62:37:4a:2e:21:f5:70:12:50:
7c:6e:99:cd:7e:68:37:2f:8d:4c:63:f3:ed:0a:8f:
1a:c6:e8:08:98:74:b9:63:dc:37:7e:f2:86:d7:32:
3b:74:61:dd:e4:93:a8:3c:ba:0a:9b:c1:ed:83:4c:
b3:4d:5e:44:3a:63:82:5d:71:42:cd:b5:63:05:dd:
59:be:40:98:25:74:cb:23:d6:8a:fc:c8:9e:77:03:
b7:7c:3c:b8:2e:eb:7f:5c:b5:a6:be:b1:a3:21:f6:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:93:96:E5:19:2A:CC:01:6D:87:31:7F:FD:7A:F8:CD:6D:90:1A:DF
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/RZOW5RkqzAFthzF__Xr4zW2QGt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.235.0/24
Signature Algorithm: sha256WithRSAEncryption
75:74:c1:62:35:92:a6:f5:64:1f:68:6c:42:2f:12:d0:d7:1c:
23:4c:2a:e3:44:6b:c2:3f:d4:0c:3a:bd:47:c4:ec:11:8b:0b:
ff:f2:9d:ec:8d:86:06:4f:1e:fb:90:b7:b9:5a:28:0a:8b:3b:
d1:38:ac:3f:eb:8b:b1:cd:bb:b9:bd:01:57:f7:d5:e1:a0:62:
c8:08:98:8d:86:04:0d:23:22:52:8f:01:2b:51:fe:da:e9:c7:
5a:40:4f:8a:99:23:26:cb:e5:01:87:40:ff:a1:57:da:2d:17:
f1:d3:9a:83:a1:37:67:d2:24:1a:68:08:bb:d5:59:2a:5c:ac:
e4:4b:6d:ee:25:b9:5b:9c:42:51:4e:2c:3c:c4:d2:52:e4:1a:
54:a1:3d:bb:22:a6:fc:de:67:9e:a6:8f:52:06:0a:eb:de:26:
5f:b1:ed:79:87:13:ff:f5:51:37:e1:da:21:8c:66:70:d5:74:
a7:4a:ff:dd:8a:ad:ce:21:06:be:34:a8:30:a6:1c:a7:e3:83:
c8:09:f2:a1:8b:63:90:d0:ee:08:85:38:78:19:61:e3:d3:91:
ba:a0:2a:92:f4:f5:29:a9:26:d4:8c:dd:71:b2:71:1d:a9:02:
7f:a9:ff:c5:ff:cd:92:8b:78:51:f9:f2:71:1b:a6:bb:70:2f:
41:83:aa:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyDG9NNPRi5eBcDN6Iyl7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh
N2IwYmEwHhcNMjMwMTAyMTAzNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTkzOTZlNTE5MmFjYzAxNmQ4NzMxN2ZmZDdhZjhjZDZkOTAxYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+t1Zy8NUvsysQ4Q64o3+J6gchjQ
6pwMuFtFm1RmHzR8OrSoJ+q2JLDw+5wr9PrIc3sHL/kAO0rviJJfKNHFSn8j6DYA
pm9amqRM2hbUUnucc7DAC+52HuGd5Pi/HPKNESqPFa+outAaz4+4TjLyVKV6Xdy3
daVOlHcGeY2WsDGQBs+QF16tgE1aF1sNAuOh8wbBcnM10E6DGrViN0ouIfVwElB8
bpnNfmg3L41MY/PtCo8axugImHS5Y9w3fvKG1zI7dGHd5JOoPLoKm8Htg0yzTV5E
OmOCXXFCzbVjBd1ZvkCYJXTLI9aK/MiedwO3fDy4Lut/XLWmvrGjIfaPLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWTluUZKswBbYcxf/16+M1tkBrfMB8GA1UdIwQY
MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt
ZGZiZmEzZmNmMDIxLzEvUlpPVzVSa3F6QUZ0aHpGX19YcjR6VzJRR3Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx
LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf3rMA0G
CSqGSIb3DQEBCwUAA4IBAQB1dMFiNZKm9WQfaGxCLxLQ1xwjTCrjRGvCP9QMOr1H
xOwRiwv/8p3sjYYGTx77kLe5WigKizvROKw/64uxzbu5vQFX99XhoGLICJiNhgQN
IyJSjwErUf7a6cdaQE+KmSMmy+UBh0D/oVfaLRfx05qDoTdn0iQaaAi71VkqXKzk
S23uJblbnEJRTiw8xNJS5BpUoT27Iqb83meepo9SBgrr3iZfse15hxP/9VE34doh
jGZw1XSnSv/diq3OIQa+NKgwphyn44PICfKhi2OQ0O4IhTh4GWHj05G6oCqS9PUp
qSbUjN1xsnEdqQJ/qf/F/82Si3hR+fJxG6a7cC9Bg6pr
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:39 2024 by rpki-client on console-fra.rpki-client.org