Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/jzvbs6CwCsCuMIm42BWSLGZs4qU.roa
File: jzvbs6CwCsCuMIm42BWSLGZs4qU.roa (raw, json)
Hash identifier: zPCaEJc7rH5eX/Ip8focDpU8T+28ajcoKj6DrnzqIak=
Subject key identifier: 8F:3B:DB:B3:A0:B0:0A:C0:AE:30:89:B8:D8:15:92:2C:66:6C:E2:A5
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0185AAE194B590D6AA0BF7C1FDB8EDC83E96
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/jzvbs6CwCsCuMIm42BWSLGZs4qU.roa
Signing time: Fri 13 Jan 2023 11:26:28 +0000
ROA not before: Fri 13 Jan 2023 11:26:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44247
IP address blocks: 109.160.63.0/24 maxlen: 24
109.160.64.0/22 maxlen: 22
109.160.70.0/24 maxlen: 24
109.160.69.0/24 maxlen: 24
109.160.82.0/23 maxlen: 23
109.160.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:e1:94:b5:90:d6:aa:0b:f7:c1:fd:b8:ed:c8:3e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 13 11:26:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f3bdbb3a0b00ac0ae3089b8d815922c666ce2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:17:2d:31:b4:d5:18:84:e6:17:01:02:21:de:
b8:c8:99:b6:5f:ef:30:47:95:20:86:20:94:5b:19:
cf:57:3e:92:1a:c6:f3:94:54:0b:54:d6:ec:31:11:
db:d8:ed:2e:c2:0b:11:97:41:53:d4:f3:fb:f8:04:
18:3d:7e:61:4e:57:e6:8b:0f:5a:6f:ac:23:b0:ce:
78:1b:45:b6:46:0b:5e:e8:99:9b:94:96:b3:e6:ae:
ae:4b:66:51:2f:66:3a:c1:a3:e3:43:c9:b5:ab:48:
1d:3b:b6:48:17:dc:57:5d:c9:62:df:03:eb:30:7d:
11:e1:54:d6:42:bb:20:cc:20:4a:c8:6e:0e:48:c4:
f7:06:cc:38:01:4a:64:78:d3:0d:6f:f1:f1:3c:43:
0c:63:e5:08:55:00:3c:e8:1e:1d:4d:ce:81:c5:4e:
27:29:eb:2f:f7:4c:18:2e:f2:2b:f8:91:4c:03:04:
cb:9e:32:bf:ac:65:a4:81:04:c7:b2:03:94:d1:a8:
98:48:62:c5:ea:fd:55:23:c6:71:07:48:0b:f9:54:
33:ae:c4:e4:65:cd:af:dd:2f:6c:1e:dd:3f:1f:0b:
a5:76:fe:02:75:31:d0:1f:b1:d1:44:1d:aa:15:d0:
ef:87:db:7d:4a:98:60:27:a7:bb:69:dd:2c:6f:f1:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3B:DB:B3:A0:B0:0A:C0:AE:30:89:B8:D8:15:92:2C:66:6C:E2:A5
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/jzvbs6CwCsCuMIm42BWSLGZs4qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.63.0-109.160.67.255
109.160.69.0-109.160.70.255
109.160.82.0-109.160.84.255
Signature Algorithm: sha256WithRSAEncryption
45:c3:b1:44:e9:c8:01:2e:45:e5:e0:7c:6f:7b:54:cf:3e:92:
7b:68:5b:8f:ba:42:73:1f:a0:8a:42:19:5a:ab:ea:25:d5:6e:
ad:72:39:33:05:6d:f3:6d:99:45:1b:b5:1d:78:31:22:33:7f:
cd:9e:2b:a0:13:1b:dc:7c:fd:17:57:40:1f:25:51:35:07:e8:
b6:16:2c:7c:67:29:d6:de:82:bd:e4:c1:1e:7a:46:4c:f2:28:
cd:80:3d:24:89:25:b9:9d:25:f3:d2:29:6e:a1:03:95:90:a5:
98:4a:47:ee:d8:48:17:42:65:29:53:72:94:85:69:1a:84:de:
76:cf:74:cb:26:71:72:f6:84:50:ab:64:2c:62:9f:b8:99:d4:
d3:aa:0d:4f:c1:70:36:34:8d:83:4b:1c:86:00:b2:d2:b2:a4:
c4:f0:5a:7d:5f:47:4d:d9:fa:41:44:97:f7:23:7b:5f:9d:63:
00:3a:c5:04:5f:1c:84:9f:83:d2:67:81:5b:2c:39:f3:a7:f3:
1e:9e:26:72:eb:76:b5:b5:b4:85:2d:be:b9:34:c8:c6:cd:67:
ee:15:83:63:ee:56:63:8e:76:8d:09:a7:75:72:91:28:3a:f0:
ab:68:2d:5e:90:fd:22:1f:f2:92:8e:67:16:58:a9:b2:e3:d9:
27:41:67:89
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYWq4ZS1kNaqC/fB/bjtyD6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjMwMTEzMTEyNjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjNiZGJiM2EwYjAwYWMwYWUzMDg5YjhkODE1OTIyYzY2NmNlMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hctMbTVGITmFwECId64yJm2X+8w
R5UghiCUWxnPVz6SGsbzlFQLVNbsMRHb2O0uwgsRl0FT1PP7+AQYPX5hTlfmiw9a
b6wjsM54G0W2Rgte6JmblJaz5q6uS2ZRL2Y6waPjQ8m1q0gdO7ZIF9xXXcli3wPr
MH0R4VTWQrsgzCBKyG4OSMT3Bsw4AUpkeNMNb/HxPEMMY+UIVQA86B4dTc6BxU4n
Kesv90wYLvIr+JFMAwTLnjK/rGWkgQTHsgOU0aiYSGLF6v1VI8ZxB0gL+VQzrsTk
Zc2v3S9sHt0/Hwuldv4CdTHQH7HRRB2qFdDvh9t9SphgJ6e7ad0sb/FKBQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFI8727OgsArArjCJuNgVkixmbOKlMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvanp2YnM2Q3dDc0N1TUltNDJCV1NMR1pzNHFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBABtoD8D
BAJtoEAwDAMEAG2gRQMEAG2gRjAMAwQBbaBSAwQAbaBUMA0GCSqGSIb3DQEBCwUA
A4IBAQBFw7FE6cgBLkXl4Hxve1TPPpJ7aFuPukJzH6CKQhlaq+ol1W6tcjkzBW3z
bZlFG7UdeDEiM3/NniugExvcfP0XV0AfJVE1B+i2Fix8ZynW3oK95MEeekZM8ijN
gD0kiSW5nSXz0iluoQOVkKWYSkfu2EgXQmUpU3KUhWkahN52z3TLJnFy9oRQq2Qs
Yp+4mdTTqg1PwXA2NI2DSxyGALLSsqTE8Fp9X0dN2fpBRJf3I3tfnWMAOsUEXxyE
n4PSZ4FbLDnzp/MeniZy63a1tbSFLb65NMjGzWfuFYNj7lZjjnaNCad1cpEoOvCr
aC1ekP0iH/KSjmcWWKmy49knQWeJ
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:42 2024 by rpki-client on console-fra.rpki-client.org