Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/ZRnTR7VRTgTzAsx18lUa8P33aDM.roa
File: ZRnTR7VRTgTzAsx18lUa8P33aDM.roa (raw, json)
Hash identifier: kY2z8587GvXFlR1Kc9gq4lUEMXEJRdI9pnAexXvCMu8=
Subject key identifier: 65:19:D3:47:B5:51:4E:04:F3:02:CC:75:F2:55:1A:F0:FD:F7:68:33
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 01856F54BB194AD2FDA21EC3720AFB153BBE
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/ZRnTR7VRTgTzAsx18lUa8P33aDM.roa
Signing time: Sun 01 Jan 2023 21:55:01 +0000
ROA not before: Sun 01 Jan 2023 21:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44858
IP address blocks: 193.105.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:bb:19:4a:d2:fd:a2:1e:c3:72:0a:fb:15:3b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Jan 1 21:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6519d347b5514e04f302cc75f2551af0fdf76833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:46:e8:0a:d4:fc:30:f3:bb:38:72:07:a7:
9b:ac:f0:0e:0d:18:e6:f3:b5:91:73:56:b6:fa:2b:
08:d1:84:ae:cb:47:5c:ce:51:07:f3:1a:83:62:92:
93:4a:20:84:f0:16:ea:e0:89:18:46:ad:56:67:c4:
56:cd:92:34:d4:d5:f7:5a:29:fa:13:74:34:ec:49:
84:0c:a8:20:fe:38:cb:96:4a:ba:23:21:ce:0c:e3:
45:ac:53:cd:5e:7c:16:45:7d:ad:01:33:d1:09:27:
c2:40:9f:0e:99:5e:97:4a:2c:7e:c2:2f:38:14:48:
28:ef:1a:4a:86:0d:de:08:6d:b7:00:5a:60:5d:dc:
11:8d:74:7e:86:30:31:bb:da:de:a6:c1:d1:ea:85:
e9:1e:3c:c3:3d:76:ee:59:52:5c:25:bf:ec:13:4a:
3d:8d:6f:15:0f:d8:b0:7c:62:6b:a3:44:16:57:5f:
38:2a:07:dd:c8:40:4a:b5:04:f6:a9:7d:56:ce:0a:
27:46:a7:69:f1:ee:b9:5d:b7:0f:92:95:e6:0a:fd:
bd:0c:67:ce:2c:f8:80:4d:d9:95:9f:d6:89:08:ed:
2b:38:11:18:5c:54:df:ea:14:f4:0c:3f:c2:e9:10:
dd:b8:7a:13:a6:b0:17:2e:29:f2:ee:fe:c4:c7:7e:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:19:D3:47:B5:51:4E:04:F3:02:CC:75:F2:55:1A:F0:FD:F7:68:33
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/ZRnTR7VRTgTzAsx18lUa8P33aDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:14:de:8c:5a:06:e1:d9:66:dd:c5:b0:4e:b6:b0:6b:c9:ee:
0e:80:97:ef:cc:09:dc:16:db:82:60:b1:23:cc:28:db:0d:cb:
e8:95:2c:d7:f2:a4:1c:e7:2a:30:22:7e:76:61:14:a4:d0:4a:
33:79:89:d0:41:36:07:9f:ea:d7:2b:3c:fa:5d:ce:66:5d:a4:
9c:cb:bf:90:b5:f8:03:aa:5e:c0:ef:be:26:9b:f3:05:c9:fb:
08:53:ca:75:30:5b:ed:d6:96:fd:28:70:7c:c8:30:ed:e9:30:
d5:b3:82:c9:03:77:4c:c0:68:58:01:ba:73:1c:3f:a1:85:cb:
82:4a:c8:48:a8:6c:0a:28:35:91:f0:e2:74:42:cc:68:9f:49:
d6:9a:69:41:5a:fa:3d:1c:67:4d:86:45:d5:f3:7b:83:8d:80:
82:ed:56:70:b9:a8:b0:dd:22:3a:f7:5c:3e:0c:78:29:77:47:
72:5d:26:be:ef:1d:b9:c5:a3:65:8b:66:56:61:45:5c:39:ef:
ba:ec:af:4d:70:8a:66:69:36:0c:2d:c9:9e:12:9e:9d:fb:fb:
3f:aa:92:bf:87:02:8e:45:33:bd:ea:e7:5e:0b:8e:05:6a:95:
61:9a:2d:00:28:bc:37:3c:ff:42:36:ef:e5:a9:b7:62:b0:30:
66:e4:8c:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvVLsZStL9oh7Dcgr7FTu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYzI5ZTU3NDllZTkxYzVhMzNhZThlMzBiN2RjOWZmZjM5
NWZmZTYwHhcNMjMwMTAxMjE1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTE5ZDM0N2I1NTE0ZTA0ZjMwMmNjNzVmMjU1MWFmMGZkZjc2ODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnhG6ArU/DDzuzhyB6ebrPAODRjm
87WRc1a2+isI0YSuy0dczlEH8xqDYpKTSiCE8Bbq4IkYRq1WZ8RWzZI01NX3Win6
E3Q07EmEDKgg/jjLlkq6IyHODONFrFPNXnwWRX2tATPRCSfCQJ8OmV6XSix+wi84
FEgo7xpKhg3eCG23AFpgXdwRjXR+hjAxu9repsHR6oXpHjzDPXbuWVJcJb/sE0o9
jW8VD9iwfGJro0QWV184KgfdyEBKtQT2qX1WzgonRqdp8e65XbcPkpXmCv29DGfO
LPiATdmVn9aJCO0rOBEYXFTf6hT0DD/C6RDduHoTprAXLiny7v7Ex35uNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUZ00e1UU4E8wLMdfJVGvD992gzMB8GA1UdIwQY
MBaAFB3CnldJ7pHFozro4wt9yf/zlf/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjct
NTNmZmE1Zjk5ODVjLzEvWlJuVFI3VlJUZ1R6QXN4MThsVWE4UDMzYURNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjctNTNmZmE1Zjk5ODVj
LzEvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkyMA0G
CSqGSIb3DQEBCwUAA4IBAQCzFN6MWgbh2WbdxbBOtrBrye4OgJfvzAncFtuCYLEj
zCjbDcvolSzX8qQc5yowIn52YRSk0EozeYnQQTYHn+rXKzz6Xc5mXaScy7+QtfgD
ql7A774mm/MFyfsIU8p1MFvt1pb9KHB8yDDt6TDVs4LJA3dMwGhYAbpzHD+hhcuC
SshIqGwKKDWR8OJ0Qsxon0nWmmlBWvo9HGdNhkXV83uDjYCC7VZwuaiw3SI691w+
DHgpd0dyXSa+7x25xaNli2ZWYUVcOe+67K9NcIpmaTYMLcmeEp6d+/s/qpK/hwKO
RTO96udeC44FapVhmi0AKLw3PP9CNu/lqbdisDBm5IwG
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:49 2024 by rpki-client on console.sobornost.net