Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/ZWvj8-SpngklYyQCJyXmNO77MA4.roa
File: ZWvj8-SpngklYyQCJyXmNO77MA4.roa (raw, json)
Hash identifier: k8HNIk/bz3OX60sy4HZ+iDKz5vXxY2qxFnujsWXgaNw=
Subject key identifier: 65:6B:E3:F3:E4:A9:9E:09:25:63:24:02:27:25:E6:34:EE:FB:30:0E
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 01856CAF27413FEC1F428039793793F16E7E
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/ZWvj8-SpngklYyQCJyXmNO77MA4.roa
Signing time: Sun 01 Jan 2023 09:34:56 +0000
ROA not before: Sun 01 Jan 2023 09:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 194.26.8.0/22 maxlen: 22
194.26.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:27:41:3f:ec:1f:42:80:39:79:37:93:f1:6e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Jan 1 09:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=656be3f3e4a99e09256324022725e634eefb300e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:a1:de:47:82:c6:b8:a5:c7:bd:2a:fe:a2:
b4:29:a9:a0:5c:83:ab:89:a3:cd:23:05:fb:ee:65:
92:f5:59:bc:41:c9:46:9b:8e:0f:fd:8e:0b:b0:da:
9e:3c:09:ba:3d:8c:1f:ad:d0:46:0e:7c:b1:46:ba:
9c:a4:1a:1b:0f:d7:f8:3c:19:1b:36:95:9d:ca:03:
d4:bd:1c:82:37:e6:06:6e:71:6f:03:fe:31:95:36:
f1:7a:70:80:ed:09:68:09:9d:54:1b:e9:5c:8d:65:
5a:c9:c0:e9:b0:d9:dc:7f:98:51:20:8a:ba:14:53:
45:9f:bf:3e:19:d6:3e:fd:db:6c:75:18:64:cc:f7:
0a:66:1c:2e:f1:40:05:c3:6e:83:3d:1a:c6:46:c6:
60:1f:d8:17:7d:5e:8d:90:95:03:fd:2b:fc:9f:19:
96:fb:4b:f3:48:8e:ed:6e:18:84:55:e5:fe:4f:54:
75:65:be:3f:2e:30:09:1f:cd:e8:12:ee:00:66:bf:
2c:c0:18:7e:9f:0b:83:ce:df:4d:5e:54:14:e5:be:
08:01:2a:00:6c:cf:1b:99:54:ce:4f:53:3b:bc:05:
d2:02:48:07:c8:0e:c5:b9:26:81:2e:6c:63:99:3b:
41:d2:d2:e2:88:52:95:29:c6:bb:ad:e5:c9:7e:63:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6B:E3:F3:E4:A9:9E:09:25:63:24:02:27:25:E6:34:EE:FB:30:0E
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/ZWvj8-SpngklYyQCJyXmNO77MA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.8.0/21
Signature Algorithm: sha256WithRSAEncryption
50:bc:07:a4:10:f5:bf:30:65:77:90:4b:7b:23:70:39:85:34:
00:8e:11:dc:17:c4:75:c2:00:fb:1e:92:df:06:3e:33:89:0a:
c6:7b:cf:f9:e6:ee:7a:56:e8:6f:e6:96:12:97:71:56:2a:43:
70:94:16:06:19:f2:1e:16:8e:f4:ec:d3:46:3c:a8:47:3a:59:
61:f5:b3:23:eb:c7:cb:9b:96:b6:75:31:8a:2c:30:a6:da:f0:
9d:c2:1f:b4:7d:6f:96:10:b0:47:a2:ad:c1:9d:a7:8e:e3:4d:
3b:51:7e:e0:f9:73:92:59:0e:88:94:81:68:e1:22:85:d4:e6:
b5:2b:7c:60:f4:85:67:9e:b1:4b:b4:38:3d:69:65:0b:c2:9f:
e0:73:cd:6f:13:b6:5f:4e:48:52:77:7c:97:33:fc:75:46:f1:
03:a0:eb:c6:19:d8:29:44:9d:9d:e3:c2:3d:41:a4:11:2f:db:
1b:33:47:b6:f0:07:84:3d:3a:27:2b:ca:0a:0f:f6:2b:27:f9:
0e:c8:ee:cf:13:61:9f:4a:f3:5d:f2:d2:06:68:13:6e:da:10:
49:77:32:ce:ac:e4:44:cb:20:66:ec:cf:9e:80:76:98:3a:72:
db:29:65:8d:fd:e5:79:18:19:52:30:a9:50:06:4e:bd:ef:60:
72:ca:2c:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsrydBP+wfQoA5eTeT8W5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYjZhMjVmMmY3NDE5MWJlOWVhMGNhOWMxOTE1ZmU3NDVj
ZjU3YzgwHhcNMjMwMTAxMDkzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTZiZTNmM2U0YTk5ZTA5MjU2MzI0MDIyNzI1ZTYzNGVlZmIzMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOWh3keCxrilx70q/qK0KamgXIOr
iaPNIwX77mWS9Vm8QclGm44P/Y4LsNqePAm6PYwfrdBGDnyxRrqcpBobD9f4PBkb
NpWdygPUvRyCN+YGbnFvA/4xlTbxenCA7QloCZ1UG+lcjWVaycDpsNncf5hRIIq6
FFNFn78+GdY+/dtsdRhkzPcKZhwu8UAFw26DPRrGRsZgH9gXfV6NkJUD/Sv8nxmW
+0vzSI7tbhiEVeX+T1R1Zb4/LjAJH83oEu4AZr8swBh+nwuDzt9NXlQU5b4IASoA
bM8bmVTOT1M7vAXSAkgHyA7FuSaBLmxjmTtB0tLiiFKVKca7reXJfmOQkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGVr4/PkqZ4JJWMkAicl5jTu+zAOMB8GA1UdIwQY
MBaAFCK2ol8vdBkb6eoMqcGRX+dFz1fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgt
YjkwYTk0MWVhNTFhLzEvWld2ajgtU3BuZ2tsWXlRQ0p5WG1OTzc3TUE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgtYjkwYTk0MWVhNTFh
LzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwhoIMA0G
CSqGSIb3DQEBCwUAA4IBAQBQvAekEPW/MGV3kEt7I3A5hTQAjhHcF8R1wgD7HpLf
Bj4ziQrGe8/55u56Vuhv5pYSl3FWKkNwlBYGGfIeFo707NNGPKhHOllh9bMj68fL
m5a2dTGKLDCm2vCdwh+0fW+WELBHoq3BnaeO4007UX7g+XOSWQ6IlIFo4SKF1Oa1
K3xg9IVnnrFLtDg9aWULwp/gc81vE7ZfTkhSd3yXM/x1RvEDoOvGGdgpRJ2d48I9
QaQRL9sbM0e28AeEPTonK8oKD/YrJ/kOyO7PE2GfSvNd8tIGaBNu2hBJdzLOrORE
yyBm7M+egHaYOnLbKWWN/eV5GBlSMKlQBk6972ByyiyE
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:48 2024 by rpki-client on console-fra.rpki-client.org