Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/zriPIuoa2WjNWFgS0QZcmjstSDA.roa
File: zriPIuoa2WjNWFgS0QZcmjstSDA.roa (raw, json)
Hash identifier: yH6+LfS1YRieABbQGnYwxPxgi7pr2by+vVduQDBJHW8=
Subject key identifier: CE:B8:8F:22:EA:1A:D9:68:CD:58:58:12:D1:06:5C:9A:3B:2D:48:30
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 01857082C36B07692B74EC71674096D43474
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/zriPIuoa2WjNWFgS0QZcmjstSDA.roa
Signing time: Mon 02 Jan 2023 03:24:55 +0000
ROA not before: Mon 02 Jan 2023 03:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.187.46.0/23 maxlen: 23
92.42.20.0/22 maxlen: 22
194.50.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jul 2023 11:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:c3:6b:07:69:2b:74:ec:71:67:40:96:d4:34:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 2 03:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceb88f22ea1ad968cd585812d1065c9a3b2d4830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8a:3f:4d:ef:b7:fe:fc:cd:9f:d6:ea:ef:54:
43:0a:6a:7f:9a:1f:62:46:17:5c:5c:42:15:f6:bf:
22:10:a5:a3:c8:85:b8:bf:11:7a:55:21:73:71:85:
c5:84:be:fc:f2:d1:16:1f:eb:48:af:a6:d4:b1:7f:
db:9a:79:9b:e2:59:9a:b3:2f:1f:0c:8b:2f:f4:7e:
6a:60:a5:1c:81:56:ea:5e:2c:0f:52:ab:f0:5f:33:
7a:01:90:f8:c8:11:68:0f:7b:4b:3a:f0:1a:6b:de:
80:47:01:f5:ad:3c:68:b0:38:a7:34:63:ce:12:e1:
59:c2:e8:44:ba:ac:5d:c8:ee:52:66:70:e0:44:d0:
67:60:28:75:94:e2:16:06:cc:41:58:05:ac:b6:c1:
4b:15:d4:8d:3e:0c:b8:d5:e4:54:6c:aa:a3:63:dd:
0c:e8:cf:21:cd:24:85:a1:4c:32:a6:27:fe:f1:90:
65:23:54:45:f2:79:68:98:c9:92:4d:09:28:fe:44:
ba:d8:25:aa:d3:f8:ab:fb:cf:8c:09:65:95:29:b6:
c5:fd:3f:31:33:39:8c:5c:02:40:5d:28:ac:7b:ef:
23:58:a5:1d:d1:f2:43:0d:68:80:09:4a:6e:8d:f2:
7a:76:3f:39:a3:bf:42:c1:f8:a8:d7:d7:ce:61:82:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:8F:22:EA:1A:D9:68:CD:58:58:12:D1:06:5C:9A:3B:2D:48:30
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/zriPIuoa2WjNWFgS0QZcmjstSDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.20.0/22
185.187.46.0/23
194.50.59.0/24
Signature Algorithm: sha256WithRSAEncryption
37:00:b1:f5:70:92:ba:da:78:54:b5:53:d0:c7:6e:84:b9:92:
c8:16:09:d4:43:a5:47:44:75:e8:ea:5c:05:89:86:70:4c:ad:
1c:a8:57:0a:e5:d8:a5:f0:87:37:a8:c7:5a:08:e2:1e:75:04:
e0:17:7b:7d:5a:d2:de:1b:a4:d5:55:b3:a3:ba:2e:0f:77:cb:
36:39:22:33:c6:cc:a0:52:41:80:7b:f9:54:86:ba:6e:b9:64:
8e:bd:33:5b:91:71:c3:5e:2e:29:aa:26:43:c2:03:39:29:d3:
b4:f9:7f:28:6a:0a:18:6b:cd:f3:72:ad:79:24:24:83:fc:49:
f1:0b:f3:26:70:44:1d:d5:e2:53:67:b8:18:9d:ce:0e:b4:d0:
a1:a0:b2:ff:38:e4:c9:ff:46:15:56:22:c9:43:35:01:81:bc:
fd:4c:c5:f3:ca:be:f5:29:d8:c6:3c:3e:11:49:5e:b7:68:8f:
95:a3:c2:31:6b:15:f3:39:3f:a4:7f:bf:c9:bf:d4:6a:dc:23:
bb:dc:b0:7a:13:4c:f2:2d:af:58:b3:2d:e3:2c:be:36:78:2a:
cd:92:bf:30:6c:72:67:4a:f0:57:16:09:f8:ed:5e:cc:4d:56:
b8:ef:c2:b2:1c:d1:ba:37:a3:93:5a:d6:87:12:75:3f:d9:b2:
91:e1:50:1a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVwgsNrB2krdOxxZ0CW1DR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3
MDM4MTUwHhcNMjMwMTAyMDMyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWI4OGYyMmVhMWFkOTY4Y2Q1ODU4MTJkMTA2NWM5YTNiMmQ0ODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoo/Te+3/vzNn9bq71RDCmp/mh9i
RhdcXEIV9r8iEKWjyIW4vxF6VSFzcYXFhL788tEWH+tIr6bUsX/bmnmb4lmasy8f
DIsv9H5qYKUcgVbqXiwPUqvwXzN6AZD4yBFoD3tLOvAaa96ARwH1rTxosDinNGPO
EuFZwuhEuqxdyO5SZnDgRNBnYCh1lOIWBsxBWAWstsFLFdSNPgy41eRUbKqjY90M
6M8hzSSFoUwypif+8ZBlI1RF8nlomMmSTQko/kS62CWq0/ir+8+MCWWVKbbF/T8x
MzmMXAJAXSise+8jWKUd0fJDDWiACUpujfJ6dj85o79Cwfio19fOYYKQ/wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM64jyLqGtlozVhYEtEGXJo7LUgwMB8GA1UdIwQY
MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt
MzAxODlhNWE0ZWJhLzEvenJpUEl1b2EyV2pOV0ZnUzBRWmNtanN0U0RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh
LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCXCoUAwQB
ubsuAwQAwjI7MA0GCSqGSIb3DQEBCwUAA4IBAQA3ALH1cJK62nhUtVPQx26EuZLI
FgnUQ6VHRHXo6lwFiYZwTK0cqFcK5dil8Ic3qMdaCOIedQTgF3t9WtLeG6TVVbOj
ui4Pd8s2OSIzxsygUkGAe/lUhrpuuWSOvTNbkXHDXi4pqiZDwgM5KdO0+X8oagoY
a83zcq15JCSD/EnxC/MmcEQd1eJTZ7gYnc4OtNChoLL/OOTJ/0YVViLJQzUBgbz9
TMXzyr71KdjGPD4RSV63aI+Vo8IxaxXzOT+kf7/Jv9Rq3CO73LB6E0zyLa9Ysy3j
LL42eCrNkr8wbHJnSvBXFgn47V7MTVa478KyHNG6N6OTWtaHEnU/2bKR4VAa
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:03 2024 by rpki-client on console-ams.rpki-client.org