Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/zI_TL8xxtnO1dTYNXmwsQtLsAGo.roa
File: zI_TL8xxtnO1dTYNXmwsQtLsAGo.roa (raw, json)
Hash identifier: nnLq+t+D0nVmrqok8RxI1u68/zk/SqMDI5NyH4WsXjs=
Subject key identifier: CC:8F:D3:2F:CC:71:B6:73:B5:75:36:0D:5E:6C:2C:42:D2:EC:00:6A
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 0189E44907DA4A6E2005A7CCE0925E1D2522
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/zI_TL8xxtnO1dTYNXmwsQtLsAGo.roa
Signing time: Fri 11 Aug 2023 11:08:58 +0000
ROA not before: Fri 11 Aug 2023 11:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 185.228.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:49:07:da:4a:6e:20:05:a7:cc:e0:92:5e:1d:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Aug 11 11:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc8fd32fcc71b673b575360d5e6c2c42d2ec006a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:24:ab:18:5a:e0:5f:aa:c1:f8:39:ce:97:
eb:7c:2d:54:46:f3:e1:a0:9b:64:68:d3:07:7c:83:
8e:b1:e1:80:53:63:4d:75:e9:09:b7:77:16:a3:b0:
3c:09:20:63:d4:2f:bf:63:8a:93:35:0a:82:5b:f6:
10:16:9d:31:99:29:5b:ef:35:da:26:28:dd:48:97:
8d:90:03:50:31:e7:64:eb:06:5a:6c:c3:4e:a1:20:
e5:07:4b:6a:24:c9:76:05:82:01:21:fa:dd:9d:71:
f0:22:8b:7b:12:01:53:24:fd:b2:4b:d9:ce:30:4e:
1c:76:35:41:87:ef:39:56:61:88:a4:07:ee:ee:08:
cd:20:77:4c:68:f6:22:e9:7c:6c:6d:01:6f:3d:0b:
27:51:f5:f8:45:8b:0c:65:9d:6c:d1:b2:f5:ba:c7:
76:62:9f:95:c8:89:48:11:a7:4c:8e:a2:d2:50:8e:
b6:6a:b8:13:2f:a3:c7:02:0d:c3:32:77:f0:4f:b9:
c4:00:98:13:25:7f:cc:87:dd:a0:31:6a:8f:c8:21:
c6:0e:a8:b6:9c:c8:e7:0a:27:7f:38:70:eb:99:f5:
1a:43:9f:50:cc:f0:40:6e:bf:43:93:14:3a:8e:d9:
28:99:f8:e4:04:fa:b3:73:8d:73:48:59:61:bc:e4:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8F:D3:2F:CC:71:B6:73:B5:75:36:0D:5E:6C:2C:42:D2:EC:00:6A
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/zI_TL8xxtnO1dTYNXmwsQtLsAGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.3.0/24
Signature Algorithm: sha256WithRSAEncryption
22:34:71:1c:46:c5:d9:1a:d3:f5:f8:29:ab:a9:66:d3:e7:af:
9d:7d:dc:12:2a:ee:a7:e5:0b:e9:ec:56:8f:cd:9c:80:f6:f7:
57:84:b3:73:6c:b7:be:62:5b:27:72:6e:be:c4:b2:c2:dd:a6:
2a:c2:3a:c2:3a:bd:de:a0:66:9a:46:d0:41:7e:72:80:16:c9:
0f:af:2a:73:a5:47:d6:86:5a:6e:67:1f:28:54:07:8a:63:56:
96:e9:f8:29:b1:68:80:e8:73:a8:24:80:12:7b:c6:68:a3:62:
83:2f:85:7f:94:4d:a9:24:bc:06:50:82:d3:38:55:de:26:62:
2b:f7:d3:77:c2:2b:95:c0:69:d9:79:e0:82:5f:2a:bf:79:ed:
51:1b:b4:48:49:7d:5a:1f:c7:96:35:94:3d:ae:76:ea:11:05:
84:99:95:60:fa:8b:e1:51:79:8d:33:e8:fe:d7:34:ab:a4:b4:
7c:b6:1f:d2:77:50:c2:80:b3:c6:37:35:bf:de:0d:52:96:5f:
c4:30:51:32:24:78:82:74:10:f8:10:ea:8e:1c:3f:74:a9:6a:
7d:c0:96:5d:bb:23:bf:89:8c:b5:11:a4:f1:75:2b:c6:a3:79:
b8:e0:0f:7e:3e:3c:cd:c9:ea:f6:82:c7:7c:ca:d4:8f:c6:2b:
67:77:f5:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnkSQfaSm4gBafM4JJeHSUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjMwODExMTEwODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzhmZDMyZmNjNzFiNjczYjU3NTM2MGQ1ZTZjMmM0MmQyZWMwMDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOskqxha4F+qwfg5zpfrfC1URvPh
oJtkaNMHfIOOseGAU2NNdekJt3cWo7A8CSBj1C+/Y4qTNQqCW/YQFp0xmSlb7zXa
JijdSJeNkANQMedk6wZabMNOoSDlB0tqJMl2BYIBIfrdnXHwIot7EgFTJP2yS9nO
ME4cdjVBh+85VmGIpAfu7gjNIHdMaPYi6XxsbQFvPQsnUfX4RYsMZZ1s0bL1usd2
Yp+VyIlIEadMjqLSUI62argTL6PHAg3DMnfwT7nEAJgTJX/Mh92gMWqPyCHGDqi2
nMjnCid/OHDrmfUaQ59QzPBAbr9DkxQ6jtkomfjkBPqzc41zSFlhvOQPPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMyP0y/McbZztXU2DV5sLELS7ABqMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEveklfVEw4eHh0bk8xZFRZTlhtd3NRdExzQUdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueQDMA0G
CSqGSIb3DQEBCwUAA4IBAQAiNHEcRsXZGtP1+CmrqWbT56+dfdwSKu6n5Qvp7FaP
zZyA9vdXhLNzbLe+Ylsncm6+xLLC3aYqwjrCOr3eoGaaRtBBfnKAFskPrypzpUfW
hlpuZx8oVAeKY1aW6fgpsWiA6HOoJIASe8Zoo2KDL4V/lE2pJLwGUILTOFXeJmIr
99N3wiuVwGnZeeCCXyq/ee1RG7RISX1aH8eWNZQ9rnbqEQWEmZVg+ovhUXmNM+j+
1zSrpLR8th/Sd1DCgLPGNzW/3g1Sll/EMFEyJHiCdBD4EOqOHD90qWp9wJZduyO/
iYy1EaTxdSvGo3m44A9+PjzNyer2gsd8ytSPxitnd/XJ
Generated at Thu Dec 14 10:09:09 2023 by rpki-client on console-ams.rpki-client.org