Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/zvpiFtrdWJ1GOkJAPa5wgMWy3zI.roa
File: zvpiFtrdWJ1GOkJAPa5wgMWy3zI.roa (raw, json)
Hash identifier: 03KjsqZPo7qKor1ty3bgaRUsW0TuGaFGnZW0nI7IAbE=
Subject key identifier: CE:FA:62:16:DA:DD:58:9D:46:3A:42:40:3D:AE:70:80:C5:B2:DF:32
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 01856F94914106012583347D2CA04E48628E
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/zvpiFtrdWJ1GOkJAPa5wgMWy3zI.roa
Signing time: Sun 01 Jan 2023 23:04:45 +0000
ROA not before: Sun 01 Jan 2023 23:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 88.214.59.0/24 maxlen: 24
185.249.196.0/24 maxlen: 24
194.156.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:91:41:06:01:25:83:34:7d:2c:a0:4e:48:62:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Jan 1 23:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cefa6216dadd589d463a42403dae7080c5b2df32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:c7:3f:29:5c:ee:35:cc:c4:a7:c8:0c:04:
25:e3:c5:d7:2e:79:f7:8d:c1:d8:c2:85:11:55:da:
02:95:93:0a:2a:72:bf:2d:b7:e6:b8:5d:64:7b:ee:
b2:55:2a:82:c0:87:ba:63:88:0a:9e:32:30:97:bf:
2a:49:10:11:8f:41:ae:0e:1b:96:72:ca:8f:00:b2:
0c:c2:9a:24:c7:70:81:38:52:1b:97:e8:91:75:53:
11:d7:87:fb:2b:fa:56:5c:ad:50:70:e6:45:ed:68:
3f:df:da:9c:66:75:5a:5d:6a:77:a6:42:b6:06:b1:
1b:0d:38:62:65:0c:ed:e0:f8:38:25:62:ef:35:ad:
67:3b:49:01:73:c6:cb:2a:36:8b:d9:94:e7:7b:67:
0b:d2:c8:c5:7e:c9:c6:26:4c:d7:f0:68:a9:fd:a0:
f2:ab:d5:5c:c5:c5:dc:19:5b:0b:04:65:34:f7:c2:
90:04:75:d0:89:6a:b5:b1:9e:38:18:63:ea:c6:f1:
47:e1:69:07:f4:bc:31:f5:15:c5:8c:c5:5b:df:35:
a9:8e:74:c7:97:b0:43:fa:e7:c9:98:b6:1e:1c:ea:
5b:08:02:d6:a4:5b:38:31:5a:03:c7:be:1d:25:35:
e5:c9:6c:2a:bd:b0:e1:44:5e:09:99:bd:23:99:3e:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FA:62:16:DA:DD:58:9D:46:3A:42:40:3D:AE:70:80:C5:B2:DF:32
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/zvpiFtrdWJ1GOkJAPa5wgMWy3zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.59.0/24
185.249.196.0/24
194.156.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:fc:45:32:e5:43:ae:d0:c0:90:81:3a:64:cb:fb:2e:eb:11:
4f:bd:03:f1:e8:8a:8c:fa:46:66:d2:c9:c3:22:f8:37:68:87:
3c:8d:26:ba:99:68:a0:1d:da:eb:d9:5c:ca:5c:4f:30:0e:16:
f8:bc:c4:fa:bc:1f:6f:c2:a0:98:4b:9b:92:bd:79:54:99:74:
cf:cf:86:c1:79:e8:36:46:e1:dd:64:e7:5d:f5:58:6c:18:21:
76:1b:a3:31:4c:88:c2:ab:0f:21:51:93:e6:66:0f:9f:40:63:
d5:4b:fb:52:45:fa:14:78:e3:e3:e0:b4:05:fd:5c:54:bb:06:
54:c4:85:3e:b0:c1:10:81:2e:9d:0d:9d:09:fd:da:e1:ea:38:
2d:44:f1:40:94:1c:be:42:e8:3a:b8:26:c2:a9:be:58:50:9e:
bb:df:3e:a9:57:37:33:58:2c:bc:13:7f:60:5f:33:43:67:1d:
4d:d5:d7:9f:43:0e:81:91:c3:ed:00:9e:23:9f:d5:6a:5b:46:
a3:bb:24:14:ba:e1:30:b0:67:93:9f:68:60:00:5f:6d:bb:99:
29:98:a0:18:6a:0e:50:9d:38:32:30:b4:e4:ba:c4:ee:dc:7e:
ab:07:49:89:fd:69:5d:8a:28:10:c7:ca:e0:6c:ca:bc:35:4e:
8e:eb:66:e7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvlJFBBgElgzR9LKBOSGKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz
ZWNiNjAwHhcNMjMwMTAxMjMwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWZhNjIxNmRhZGQ1ODlkNDYzYTQyNDAzZGFlNzA4MGM1YjJkZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhLHPylc7jXMxKfIDAQl48XXLnn3
jcHYwoURVdoClZMKKnK/LbfmuF1ke+6yVSqCwIe6Y4gKnjIwl78qSRARj0GuDhuW
csqPALIMwpokx3CBOFIbl+iRdVMR14f7K/pWXK1QcOZF7Wg/39qcZnVaXWp3pkK2
BrEbDThiZQzt4Pg4JWLvNa1nO0kBc8bLKjaL2ZTne2cL0sjFfsnGJkzX8Gip/aDy
q9VcxcXcGVsLBGU098KQBHXQiWq1sZ44GGPqxvFH4WkH9Lwx9RXFjMVb3zWpjnTH
l7BD+ufJmLYeHOpbCALWpFs4MVoDx74dJTXlyWwqvbDhRF4Jmb0jmT7XGwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM76Yhba3VidRjpCQD2ucIDFst8yMB8GA1UdIwQY
MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct
ZTBkN2RkNWUyZTZmLzEvenZwaUZ0cmRXSjFHT2tKQVBhNXdnTVd5M3pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm
LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNY7AwQA
ufnEAwQAwpxZMA0GCSqGSIb3DQEBCwUAA4IBAQBr/EUy5UOu0MCQgTpky/su6xFP
vQPx6IqM+kZm0snDIvg3aIc8jSa6mWigHdrr2VzKXE8wDhb4vMT6vB9vwqCYS5uS
vXlUmXTPz4bBeeg2RuHdZOdd9VhsGCF2G6MxTIjCqw8hUZPmZg+fQGPVS/tSRfoU
eOPj4LQF/VxUuwZUxIU+sMEQgS6dDZ0J/drh6jgtRPFAlBy+Qug6uCbCqb5YUJ67
3z6pVzczWCy8E39gXzNDZx1N1defQw6BkcPtAJ4jn9VqW0ajuyQUuuEwsGeTn2hg
AF9tu5kpmKAYag5QnTgyMLTkusTu3H6rB0mJ/WldiigQx8rgbMq8NU6O62bn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:27 2024 by rpki-client on console-ams.rpki-client.org