Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/zDS-ApxwVdcIvWnw3ZhuTmDQpoQ.roa
File: zDS-ApxwVdcIvWnw3ZhuTmDQpoQ.roa (raw, json)
Hash identifier: zxl/d9WLODjs8oInDszNeDklkBS/jNuYeQEVtDtZmZs=
Subject key identifier: CC:34:BE:02:9C:70:55:D7:08:BD:69:F0:DD:98:6E:4E:60:D0:A6:84
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 01856C1CBE2BE1E98AB9B7DE9288D8F42C64
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/zDS-ApxwVdcIvWnw3ZhuTmDQpoQ.roa
Signing time: Sun 01 Jan 2023 06:55:00 +0000
ROA not before: Sun 01 Jan 2023 06:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12322
IP address blocks: 83.152.0.0/13 maxlen: 15
88.120.0.0/13 maxlen: 13
213.36.0.0/16 maxlen: 18
91.160.0.0/12 maxlen: 12
82.142.0.0/18 maxlen: 18
83.214.0.0/16 maxlen: 16
212.62.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Sat 23 Dec 2023 09:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:be:2b:e1:e9:8a:b9:b7:de:92:88:d8:f4:2c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Jan 1 06:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc34be029c7055d708bd69f0dd986e4e60d0a684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f9:b2:a4:a8:ea:51:b3:ee:67:12:e1:37:a2:
7f:b8:bc:89:dc:43:0c:7d:6e:54:ca:75:15:5f:de:
71:9c:18:18:50:7c:05:32:98:60:1c:0f:b1:fc:b1:
8b:40:14:b7:19:54:fa:90:fd:e1:6c:66:6c:a1:f7:
f2:25:8b:e2:f9:14:d0:a6:a4:fe:c9:6a:53:d3:3b:
1e:0c:fd:12:18:1d:e9:41:b1:e3:ed:67:df:eb:41:
57:d7:2a:e4:ef:81:c8:ad:4e:18:40:85:41:70:32:
e0:12:e1:cf:36:5e:2a:d1:76:01:6f:85:a1:1f:99:
e2:a4:2d:93:0d:00:55:cc:d9:ac:16:27:3d:b7:e5:
85:ab:39:7c:ea:03:42:77:bb:88:ce:f3:30:dc:82:
56:c5:50:11:ac:5f:71:b0:f4:ee:12:45:6c:55:76:
cb:af:1f:35:6e:eb:f8:53:47:64:43:a2:c1:75:db:
c9:e3:41:37:1e:7c:4f:f3:c9:85:c8:7c:f7:b2:20:
df:b4:2e:86:72:42:96:79:ce:f5:0f:cd:d3:fa:5a:
36:e7:ca:25:d9:d1:38:a6:0e:4b:c6:d4:b4:ec:b9:
93:26:4e:dd:df:99:00:c3:91:d8:d8:e7:82:a5:40:
24:c4:c4:6d:18:91:92:df:c2:c5:eb:dd:b9:bf:76:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:34:BE:02:9C:70:55:D7:08:BD:69:F0:DD:98:6E:4E:60:D0:A6:84
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/zDS-ApxwVdcIvWnw3ZhuTmDQpoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.142.0.0/18
83.152.0.0/13
83.214.0.0/16
88.120.0.0/13
91.160.0.0/12
212.62.128.0/18
213.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:96:ef:21:45:2f:41:4b:e4:0e:ef:22:ba:cd:bb:f7:af:af:
fd:5a:a0:d7:8b:48:50:20:de:75:3d:7c:39:c7:61:f8:04:ba:
39:73:29:ac:8b:cb:f4:c5:03:76:b4:dc:8f:07:47:a0:ed:f3:
50:7b:bc:2e:d1:dd:1c:c4:6d:0e:e1:30:7b:00:51:81:6c:35:
90:aa:7a:b5:82:d2:ee:7d:ee:5f:0a:9b:84:ac:7a:d5:d5:de:
bb:41:9d:73:de:55:3a:6b:f4:49:66:b8:99:e9:dd:15:bc:57:
9f:99:b8:49:3a:41:72:ed:8a:72:21:2d:15:94:51:c7:82:15:
f4:b4:a8:95:ae:97:59:4c:fa:08:3a:46:e5:27:c1:d6:7f:ec:
91:59:61:71:4c:84:9a:ec:9a:b9:d5:cf:bd:6a:f6:91:67:06:
58:c9:5b:98:9a:77:43:86:48:27:c8:f0:55:87:26:84:0c:7b:
2a:aa:f8:94:17:ee:e4:88:1b:ed:f2:00:f2:41:9e:1d:11:01:
fc:ee:51:0e:7c:8e:b3:42:e8:84:10:2e:78:c4:aa:85:04:2b:
d0:30:73:c7:65:1e:f7:42:2e:e9:87:0e:7b:b8:d7:26:cb:86:
79:3c:b4:16:ed:bf:0c:48:b9:62:98:37:1e:8d:9d:ec:40:99:
54:20:db:10
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVsHL4r4emKubfekojY9CxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTE2YjQ5M2QyYTEyODk3Y2FmNDc1N2JiMThhMDJlZWMy
Y2RlMTcwHhcNMjMwMTAxMDY1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzM0YmUwMjljNzA1NWQ3MDhiZDY5ZjBkZDk4NmU0ZTYwZDBhNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fmypKjqUbPuZxLhN6J/uLyJ3EMM
fW5UynUVX95xnBgYUHwFMphgHA+x/LGLQBS3GVT6kP3hbGZsoffyJYvi+RTQpqT+
yWpT0zseDP0SGB3pQbHj7Wff60FX1yrk74HIrU4YQIVBcDLgEuHPNl4q0XYBb4Wh
H5nipC2TDQBVzNmsFic9t+WFqzl86gNCd7uIzvMw3IJWxVARrF9xsPTuEkVsVXbL
rx81buv4U0dkQ6LBddvJ40E3HnxP88mFyHz3siDftC6GckKWec71D83T+lo258ol
2dE4pg5LxtS07LmTJk7d35kAw5HY2OeCpUAkxMRtGJGS38LF6925v3YEKwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFMw0vgKccFXXCL1p8N2Ybk5g0KaEMB8GA1UdIwQY
MBaAFPrha0k9KhKJfK9HV7sYoC7sLN4XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11RnJTVDBxRW9sOHIwZFh1eGlnTHV3czNoYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUz
LTRhZmQ4MjU0YWU0My8xL3pEUy1BcHh3VmRjSXZXbnczWmh1VG1EUXBvUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUzLTRhZmQ4MjU0YWU0
My8xLzEtdUZyU1QwcUVvbDhyMGRYdXhpZ0x1d3MzaGMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPgYIKwYBBQUHAQcBAf8ELzAtMCsEAgABMCUDBAZSjgAD
AwNTmAMDAFPWAwMDWHgDAwRboAMEBtQ+gAMDANUkMA0GCSqGSIb3DQEBCwUAA4IB
AQB0lu8hRS9BS+QO7yK6zbv3r6/9WqDXi0hQIN51PXw5x2H4BLo5cymsi8v0xQN2
tNyPB0eg7fNQe7wu0d0cxG0O4TB7AFGBbDWQqnq1gtLufe5fCpuErHrV1d67QZ1z
3lU6a/RJZriZ6d0VvFefmbhJOkFy7YpyIS0VlFHHghX0tKiVrpdZTPoIOkblJ8HW
f+yRWWFxTISa7Jq51c+9avaRZwZYyVuYmndDhkgnyPBVhyaEDHsqqviUF+7kiBvt
8gDyQZ4dEQH87lEOfI6zQuiEEC54xKqFBCvQMHPHZR73Qi7phw57uNcmy4Z5PLQW
7b8MSLlimDcejZ3sQJlUINsQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:14 2024 by rpki-client on console-ams.rpki-client.org