Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ZkHXG7p9fA7n1uUvA9K3hM80iao.roa
File: ZkHXG7p9fA7n1uUvA9K3hM80iao.roa (raw, json)
Hash identifier: JY+Fm/qYjRK0kRdhOzN+gizG4mwxdbgwZAFqHXSq2hc=
Subject key identifier: 66:41:D7:1B:BA:7D:7C:0E:E7:D6:E5:2F:03:D2:B7:84:CF:34:89:AA
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 018BD6AA27DF34945C43A910D60C4227BCFB
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ZkHXG7p9fA7n1uUvA9K3hM80iao.roa
Signing time: Thu 16 Nov 2023 05:45:57 +0000
ROA not before: Thu 16 Nov 2023 05:45:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58250
IP address blocks: 212.93.203.0/24 maxlen: 24
2a02:df4::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 16 Nov 2023 05:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:aa:27:df:34:94:5c:43:a9:10:d6:0c:42:27:bc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Nov 16 05:45:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6641d71bba7d7c0ee7d6e52f03d2b784cf3489aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:bc:53:3f:ce:e3:c9:3d:6a:84:b8:3e:92:
83:6b:9f:2e:b5:be:9d:d0:7a:a9:14:6c:b9:8f:08:
5b:08:8f:b3:f2:e9:78:91:e5:3a:57:d7:d9:48:4e:
92:99:80:f4:c9:93:aa:d0:f4:33:d5:d2:8d:62:3d:
d1:fd:dd:79:91:0e:6a:8f:45:79:99:08:1d:78:4c:
42:0b:6f:36:d1:5f:91:55:20:c9:60:97:f5:ae:33:
be:77:79:5b:e0:17:02:ba:a6:76:33:97:2c:d7:56:
eb:41:55:dd:d4:aa:ff:ac:f8:11:a9:4a:a2:72:71:
33:44:58:bf:19:58:a1:0a:c8:6d:cc:b1:44:c2:1a:
f9:a6:b2:b4:65:3a:72:70:b0:db:9c:db:10:03:e2:
96:14:43:53:e9:0f:06:80:ca:6c:5c:54:05:ad:8f:
c3:a3:b4:e6:e9:57:b6:15:f7:fb:20:c8:e0:48:34:
7f:ad:6a:01:66:21:52:cf:f4:f9:80:ed:f9:f4:16:
11:9e:b3:c2:6d:cc:95:47:f8:4c:75:71:42:8b:e6:
9e:12:2b:17:00:1a:34:69:22:50:09:69:c3:54:e7:
4b:c5:c7:17:89:dc:38:8c:07:9e:2e:c7:1e:05:7c:
a9:f7:06:c5:45:2b:0b:ac:88:91:f3:05:48:bb:da:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:41:D7:1B:BA:7D:7C:0E:E7:D6:E5:2F:03:D2:B7:84:CF:34:89:AA
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ZkHXG7p9fA7n1uUvA9K3hM80iao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.93.203.0/24
IPv6:
2a02:df4::/32
Signature Algorithm: sha256WithRSAEncryption
4d:77:ef:11:35:fa:cc:d0:50:d7:20:e3:3e:89:4c:f3:a9:26:
1e:a6:5c:5c:06:59:ce:8e:4c:4b:c1:c5:95:06:bd:2b:da:68:
27:c9:2f:fc:19:1d:34:07:ca:2a:69:bd:9d:33:a5:68:9e:41:
20:6f:85:bb:59:45:70:17:9d:f0:4d:3c:ac:9a:db:a5:46:8b:
48:fa:42:1c:8f:6e:9a:67:4d:d9:b5:4f:06:4f:e7:b8:d1:76:
61:3d:07:d1:bc:fb:d1:aa:fc:9a:da:9c:e0:d4:ea:68:62:46:
8d:53:52:6e:06:4d:a8:dc:a9:2c:b9:be:5e:68:64:d6:42:52:
62:55:41:da:fc:88:2d:cb:97:44:a2:59:32:8b:8b:30:a4:22:
55:7d:eb:51:01:86:e2:14:98:e0:f2:b1:aa:33:ac:32:c7:9c:
52:0c:02:6a:49:bf:93:7e:6a:fa:6c:89:b5:02:fa:5b:49:c4:
ad:a9:54:f5:52:be:3d:97:fc:3c:83:fc:84:3b:4f:76:fd:84:
2e:46:91:54:9a:ab:cc:d4:ff:78:3a:68:40:23:33:43:cc:83:
e5:4a:37:8c:b8:3e:e6:c9:b8:27:4e:5d:40:c2:42:8c:7e:bd:
40:12:d7:a5:89:04:0e:2a:60:ab:93:5c:9b:4d:c7:3f:ce:60:
e0:8c:f1:15
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYvWqiffNJRcQ6kQ1gxCJ7z7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3
YWJlZmIwHhcNMjMxMTE2MDU0NTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjQxZDcxYmJhN2Q3YzBlZTdkNmU1MmYwM2QyYjc4NGNmMzQ4OWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimi8Uz/O48k9aoS4PpKDa58utb6d
0HqpFGy5jwhbCI+z8ul4keU6V9fZSE6SmYD0yZOq0PQz1dKNYj3R/d15kQ5qj0V5
mQgdeExCC2820V+RVSDJYJf1rjO+d3lb4BcCuqZ2M5cs11brQVXd1Kr/rPgRqUqi
cnEzRFi/GVihCshtzLFEwhr5prK0ZTpycLDbnNsQA+KWFENT6Q8GgMpsXFQFrY/D
o7Tm6Ve2Fff7IMjgSDR/rWoBZiFSz/T5gO359BYRnrPCbcyVR/hMdXFCi+aeEisX
ABo0aSJQCWnDVOdLxccXidw4jAeeLsceBXyp9wbFRSsLrIiR8wVIu9ooXQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGZB1xu6fXwO59blLwPSt4TPNImqMB8GA1UdIwQY
MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt
NzljODk4N2E4YjFjLzEvWmtIWEc3cDlmQTduMXVVdkE5SzNoTTgwaWFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj
LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1F3LMA0E
AgACMAcDBQAqAg30MA0GCSqGSIb3DQEBCwUAA4IBAQBNd+8RNfrM0FDXIOM+iUzz
qSYeplxcBlnOjkxLwcWVBr0r2mgnyS/8GR00B8oqab2dM6VonkEgb4W7WUVwF53w
TTysmtulRotI+kIcj26aZ03ZtU8GT+e40XZhPQfRvPvRqvya2pzg1OpoYkaNU1Ju
Bk2o3Kksub5eaGTWQlJiVUHa/Igty5dEolkyi4swpCJVfetRAYbiFJjg8rGqM6wy
x5xSDAJqSb+Tfmr6bIm1AvpbScStqVT1Ur49l/w8g/yEO092/YQuRpFUmqvM1P94
OmhAIzNDzIPlSjeMuD7mybgnTl1AwkKMfr1AEteliQQOKmCrk1ybTcc/zmDgjPEV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:05 2024 by rpki-client on console-fra.rpki-client.org