Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/Fzw58_ZYHnAxJshMyyFHFo0fL_M.roa
File: Fzw58_ZYHnAxJshMyyFHFo0fL_M.roa (raw, json)
Hash identifier: Q7hRIwcQ8+6Nxq5Hb0HBzSIcjLE7KpY4v2ZXu2Xr4B8=
Subject key identifier: 17:3C:39:F3:F6:58:1E:70:31:26:C8:4C:CB:21:47:16:8D:1F:2F:F3
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 0185720346A72446D432BB5DBC0A9969E72C
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/Fzw58_ZYHnAxJshMyyFHFo0fL_M.roa
Signing time: Mon 02 Jan 2023 10:24:55 +0000
ROA not before: Mon 02 Jan 2023 10:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205086
IP address blocks: 109.234.86.0/24 maxlen: 24
185.33.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:46:a7:24:46:d4:32:bb:5d:bc:0a:99:69:e7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 10:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=173c39f3f6581e703126c84ccb2147168d1f2ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:01:4f:14:4f:02:87:cd:aa:07:bb:ac:5f:
a4:60:07:74:30:aa:4e:8a:33:e7:0c:79:65:fd:a2:
b6:80:9e:ab:24:c3:52:db:1a:26:dc:f9:f0:a5:80:
d1:f1:ee:df:00:d2:35:b5:ea:25:5d:72:94:90:e9:
24:b8:d5:6e:91:b5:ac:73:cb:3c:ed:d5:cb:e5:9c:
e0:92:44:c9:09:98:65:d9:1b:04:e1:a1:09:a5:9c:
a3:9b:f6:6e:88:c4:3c:e3:1a:ff:8c:38:c5:be:4e:
0b:13:28:5f:ba:98:b2:95:b7:04:2f:5f:9b:dc:4b:
76:b8:89:ca:ef:04:a0:86:08:11:7b:9d:6e:a9:cf:
45:26:2a:2e:72:05:29:f1:fd:91:ea:f0:b2:24:81:
55:b0:63:2a:96:27:c1:c3:d9:a6:11:ee:d6:56:e3:
a1:9b:0a:56:52:bc:cc:46:5d:43:ec:df:0b:78:d7:
5b:7e:d8:a0:13:ad:5c:b8:72:99:27:68:ef:05:d3:
9b:db:bc:93:34:e0:6e:8b:56:46:f0:32:1a:1c:ff:
25:93:f5:72:a7:d8:0b:b6:36:38:25:b9:8d:1c:ad:
f8:70:fc:90:35:13:3e:9f:02:45:e0:1f:50:88:b1:
54:7e:4e:e3:cc:2a:25:19:52:61:86:51:03:f7:d4:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3C:39:F3:F6:58:1E:70:31:26:C8:4C:CB:21:47:16:8D:1F:2F:F3
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/Fzw58_ZYHnAxJshMyyFHFo0fL_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.86.0/24
185.33.66.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5d:8f:bc:d3:38:93:64:ad:35:a4:43:18:a8:45:9a:84:1e:
c3:f3:6e:d1:11:93:9c:ff:e4:c1:71:53:4f:42:27:89:16:ed:
8f:15:c9:a0:b5:e4:17:78:b5:35:0e:06:f9:56:73:36:ca:64:
1c:f0:8f:6f:d3:1e:14:7e:b1:b7:d9:ac:5a:18:59:be:ad:e1:
c4:a7:87:e7:71:70:02:cc:5b:d0:7f:3b:54:29:3d:71:7b:73:
ce:39:d5:26:0a:5f:ca:d6:5b:92:59:24:cd:3c:62:3a:d0:91:
38:f7:9c:6d:18:1d:34:00:12:09:4f:d3:1f:cd:df:c1:76:49:
1f:af:7f:c5:28:2e:df:ae:cc:b8:9a:32:5e:b0:98:04:ed:71:
54:b0:c7:04:b5:79:e4:de:6d:bf:ec:59:68:30:f5:12:93:1a:
25:da:7f:b5:53:61:a8:93:5b:36:e6:70:41:55:f2:e1:29:00:
11:58:ac:19:3d:74:18:29:37:20:0b:5f:91:5a:46:c6:76:4a:
65:9d:8b:4a:3a:e2:c0:a1:57:b1:79:a5:66:af:f8:35:b0:53:
7b:d3:12:11:f0:b7:36:96:35:3b:ca:29:df:1e:ed:34:2d:e9:
6c:86:f7:64:b8:02:47:00:2a:fb:7e:58:52:de:46:43:95:45:
36:5a:83:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVyA0anJEbUMrtdvAqZaecsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl
NzYxZmIwHhcNMjMwMTAyMTAyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzNjMzlmM2Y2NTgxZTcwMzEyNmM4NGNjYjIxNDcxNjhkMWYyZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz4BTxRPAofNqge7rF+kYAd0MKpO
ijPnDHll/aK2gJ6rJMNS2xom3PnwpYDR8e7fANI1teolXXKUkOkkuNVukbWsc8s8
7dXL5ZzgkkTJCZhl2RsE4aEJpZyjm/ZuiMQ84xr/jDjFvk4LEyhfupiylbcEL1+b
3Et2uInK7wSghggRe51uqc9FJioucgUp8f2R6vCyJIFVsGMqlifBw9mmEe7WVuOh
mwpWUrzMRl1D7N8LeNdbftigE61cuHKZJ2jvBdOb27yTNOBui1ZG8DIaHP8lk/Vy
p9gLtjY4JbmNHK34cPyQNRM+nwJF4B9QiLFUfk7jzColGVJhhlED99QHSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBc8OfP2WB5wMSbITMshRxaNHy/zMB8GA1UdIwQY
MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt
NmZkOTc4OTIwNWJhLzEvRnp3NThfWllIbkF4SnNoTXl5RkhGbzBmTF9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh
LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbepWAwQA
uSFCMA0GCSqGSIb3DQEBCwUAA4IBAQBkXY+80ziTZK01pEMYqEWahB7D827REZOc
/+TBcVNPQieJFu2PFcmgteQXeLU1Dgb5VnM2ymQc8I9v0x4UfrG32axaGFm+reHE
p4fncXACzFvQfztUKT1xe3POOdUmCl/K1luSWSTNPGI60JE495xtGB00ABIJT9Mf
zd/Bdkkfr3/FKC7frsy4mjJesJgE7XFUsMcEtXnk3m2/7FloMPUSkxol2n+1U2Go
k1s25nBBVfLhKQARWKwZPXQYKTcgC1+RWkbGdkplnYtKOuLAoVexeaVmr/g1sFN7
0xIR8Lc2ljU7yinfHu00LelshvdkuAJHACr7flhS3kZDlUU2WoPO
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:00 2024 by rpki-client on console.sobornost.net