Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZoZovqApUzQQVUdCNOqCX5r08JM.roa
File: ZoZovqApUzQQVUdCNOqCX5r08JM.roa (raw, json)
Hash identifier: IE+jCGEKqQnCu+0Bp6/IwcV0VOlFlBxXhevbBiWjD0Y=
Subject key identifier: 66:86:68:BE:A0:29:53:34:10:55:47:42:34:EA:82:5F:9A:F4:F0:93
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2ED27DEDA1AB1ADCC9A293595ADAFF
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZoZovqApUzQQVUdCNOqCX5r08JM.roa
Signing time: Sun 01 Jan 2023 07:14:45 +0000
ROA not before: Sun 01 Jan 2023 07:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209241
IP address blocks: 80.78.134.0/24 maxlen: 24
2a0d:2146:8050::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:d2:7d:ed:a1:ab:1a:dc:c9:a2:93:59:5a:da:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=668668bea02953341055474234ea825f9af4f093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:72:73:cf:87:61:35:89:c4:8a:04:bc:45:
be:7c:24:38:a0:19:04:26:72:b4:6b:e0:7a:14:f3:
ad:d3:1b:d0:53:07:b0:25:d3:de:24:c0:e5:b4:c9:
33:4e:2d:14:65:d4:6d:0e:73:13:01:1f:fa:73:be:
94:96:ac:3f:77:c6:77:9b:8a:fa:1d:23:c0:89:05:
0f:13:ed:ef:3c:48:de:2f:0f:3f:c8:f8:0d:71:30:
8e:27:dd:7f:cb:fe:95:44:0d:40:42:d3:37:e7:63:
f4:ab:6d:23:a7:22:88:f6:bf:09:6e:84:78:30:5c:
03:b4:a8:b4:8f:58:0b:9c:f1:36:2e:01:4b:b6:6c:
05:e8:a2:30:47:cb:c6:ce:a2:0a:84:7d:e6:e6:24:
6c:82:68:28:39:23:46:d2:e5:35:36:34:ec:14:ca:
ed:fd:83:90:17:3d:e0:63:64:ff:17:1a:10:ad:90:
57:92:80:dc:73:06:d6:a1:e7:8a:6d:98:57:7d:12:
2b:89:91:71:03:c8:e0:a2:77:9d:79:af:65:41:26:
f5:da:d3:51:45:6e:06:66:7e:06:b0:8b:ad:00:27:
77:eb:f4:25:99:3c:6d:42:45:b7:ac:7c:b3:b2:4d:
07:4c:9a:9d:c5:a0:9a:db:a5:f0:d5:fe:74:65:43:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:86:68:BE:A0:29:53:34:10:55:47:42:34:EA:82:5F:9A:F4:F0:93
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZoZovqApUzQQVUdCNOqCX5r08JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.134.0/24
IPv6:
2a0d:2146:8050::/44
Signature Algorithm: sha256WithRSAEncryption
0b:80:36:e2:65:f1:95:a8:82:54:48:14:87:06:ce:15:1d:54:
e1:88:11:78:4b:a0:24:77:5e:f2:74:7a:32:0f:1a:24:d6:10:
0d:88:0f:74:5a:89:ad:99:83:57:07:a5:b3:a5:99:32:07:91:
bd:7d:86:21:82:e2:59:79:02:21:a6:0e:77:22:2a:f1:3d:6d:
99:f1:31:ae:40:13:30:53:28:f7:f5:be:46:88:b6:25:0b:2b:
97:4c:bd:88:6f:a5:e8:a2:37:51:fa:f6:ee:e8:e8:e9:7b:9b:
69:c6:52:79:63:28:2e:95:b9:f2:bf:57:41:7c:28:84:ed:cf:
46:37:67:41:34:39:e2:75:e2:c0:f7:f6:ca:c7:52:9d:45:8f:
8c:33:b6:2c:6c:80:ea:66:87:b6:3f:30:ae:22:06:a5:ee:f1:
c4:c3:43:cf:18:c0:dd:e4:74:1c:8f:cb:00:06:0c:0a:94:c4:
79:7f:64:b8:3f:e5:ed:6f:6d:8f:93:e2:c0:71:58:fb:59:94:
9b:d4:55:e8:c4:d2:9e:e5:4f:31:40:40:4a:76:55:3a:97:9d:
97:76:14:1f:54:ee:2f:ac:55:7b:81:d7:28:bc:a8:60:49:08:
44:31:e7:c7:27:95:0f:51:18:55:6e:46:1a:f6:75:64:7b:ff:
c9:3d:e0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org