Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/zo9xhovZbPbnDOugld4ff1FizPQ.roa
File: zo9xhovZbPbnDOugld4ff1FizPQ.roa (raw, json)
Hash identifier: rQwSRajRcjXBRtOfwBDNk502NifqaCZMDvTb0p1JVPk=
Subject key identifier: CE:8F:71:86:8B:D9:6C:F6:E7:0C:EB:A0:95:DE:1F:7F:51:62:CC:F4
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 018CC3B6BCEFCAF99094B481867D5B0F6709
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/zo9xhovZbPbnDOugld4ff1FizPQ.roa
Signing time: Mon 01 Jan 2024 06:29:42 +0000
ROA not before: Mon 01 Jan 2024 06:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20882
IP address blocks: 80.75.224.0/24 maxlen: 24
80.75.225.0/24 maxlen: 24
80.75.224.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:bc:ef:ca:f9:90:94:b4:81:86:7d:5b:0f:67:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Jan 1 06:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8f71868bd96cf6e70ceba095de1f7f5162ccf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:7b:34:db:35:d9:a3:c4:8d:43:fb:ac:6e:
8c:73:6b:6c:d9:89:40:96:87:4c:37:19:aa:5b:28:
9f:8e:7e:48:8f:f0:b0:2c:f4:ad:cc:56:8f:20:4b:
12:66:7a:62:29:24:84:9c:22:52:46:3d:c0:cc:36:
4a:3c:ac:b2:98:9c:de:19:93:32:19:b0:d8:fe:d2:
fc:32:12:66:2c:72:99:7a:9f:39:77:77:d8:d7:3d:
e9:de:74:ef:a4:3d:29:b6:3b:a8:84:e8:ae:21:48:
bf:e3:db:5f:16:8a:36:eb:f9:7f:65:e1:76:20:a2:
01:75:91:36:4f:29:df:14:35:a4:10:27:31:db:41:
9a:09:07:28:82:f9:17:7a:84:93:36:37:5c:3f:a1:
91:6a:9b:a0:45:bc:b7:0f:ec:23:ea:0c:f4:7f:a4:
45:d8:54:83:8d:40:8b:4b:bf:40:66:fe:4e:a0:22:
17:54:c9:8c:7a:d9:85:f9:ae:89:fe:5f:d1:39:3f:
67:33:c9:2e:6a:54:87:35:2d:6b:a0:ce:36:09:ce:
c7:ce:3e:6f:aa:05:5f:5a:aa:e6:42:cc:54:db:93:
77:9f:22:51:68:66:d8:7d:3c:5e:a4:c5:1a:fe:11:
fe:07:fa:de:12:8e:2c:06:93:01:1c:7b:25:15:3a:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8F:71:86:8B:D9:6C:F6:E7:0C:EB:A0:95:DE:1F:7F:51:62:CC:F4
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/zo9xhovZbPbnDOugld4ff1FizPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:d4:7e:55:bf:f5:c1:5b:db:76:2a:d1:01:6f:a9:b5:d7:c3:
5e:0d:a0:6b:5b:f5:71:15:91:1c:de:5d:06:ff:2c:04:9f:55:
b4:f6:5f:93:12:9b:c1:a5:c0:c6:6d:6d:b1:a1:b3:2a:af:34:
cd:e3:d7:bb:72:22:76:bb:65:2f:87:5e:e2:7f:d1:1a:86:08:
24:28:6d:28:c4:86:24:22:39:c6:03:ff:31:b0:1c:ff:df:ce:
d0:ee:87:ff:68:5b:5d:20:ec:3f:80:95:89:ca:21:7d:b4:6e:
81:ce:6d:a1:8a:f9:7e:2e:5c:80:85:38:8a:0b:de:60:ba:b1:
6f:ed:a4:83:56:47:2e:c0:ad:8b:69:98:d2:10:28:28:d9:8f:
6d:42:83:b5:21:1c:c9:f2:ef:40:12:17:3e:6f:eb:63:a8:7a:
2d:b3:4e:eb:49:62:19:99:76:c2:61:c0:e5:76:bc:ff:92:60:
4e:94:50:02:c2:47:aa:df:5a:f4:1e:ea:ca:b9:cd:de:eb:53:
38:2c:ab:ab:6b:0d:35:e9:49:db:5f:4d:6a:6a:09:c0:d1:4d:
42:8a:5e:4b:d0:7d:04:10:b8:34:14:c5:c1:51:c1:db:4d:78:
95:93:62:ff:df:25:c2:cf:34:4f:1a:22:59:1b:f2:00:ee:ad:
50:71:95:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtrzvyvmQlLSBhn1bD2cJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNmExNDEzY2M4OTY1ZWU5MjQxNmI2MDU5ZjkwYjE4Nzc4
YzhiMzgwHhcNMjQwMTAxMDYyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZThmNzE4NjhiZDk2Y2Y2ZTcwY2ViYTA5NWRlMWY3ZjUxNjJjY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquB7NNs12aPEjUP7rG6Mc2ts2YlA
lodMNxmqWyifjn5Ij/CwLPStzFaPIEsSZnpiKSSEnCJSRj3AzDZKPKyymJzeGZMy
GbDY/tL8MhJmLHKZep85d3fY1z3p3nTvpD0ptjuohOiuIUi/49tfFoo26/l/ZeF2
IKIBdZE2TynfFDWkECcx20GaCQcogvkXeoSTNjdcP6GRapugRby3D+wj6gz0f6RF
2FSDjUCLS79AZv5OoCIXVMmMetmF+a6J/l/ROT9nM8kualSHNS1roM42Cc7Hzj5v
qgVfWqrmQsxU25N3nyJRaGbYfTxepMUa/hH+B/reEo4sBpMBHHslFTpbZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM6PcYaL2Wz25wzroJXeH39RYsz0MB8GA1UdIwQY
MBaAFBpqFBPMiWXukkFrYFn5Cxh3jIs4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2Ut
ODJjMDg1YTkyNzc3LzEvem85eGhvdlpiUGJuRE91Z2xkNGZmMUZpelBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2UtODJjMDg1YTkyNzc3
LzEvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUEvgMA0G
CSqGSIb3DQEBCwUAA4IBAQB+1H5Vv/XBW9t2KtEBb6m118NeDaBrW/VxFZEc3l0G
/ywEn1W09l+TEpvBpcDGbW2xobMqrzTN49e7ciJ2u2Uvh17if9EahggkKG0oxIYk
IjnGA/8xsBz/387Q7of/aFtdIOw/gJWJyiF9tG6Bzm2hivl+LlyAhTiKC95gurFv
7aSDVkcuwK2LaZjSECgo2Y9tQoO1IRzJ8u9AEhc+b+tjqHots07rSWIZmXbCYcDl
drz/kmBOlFACwkeq31r0HurKuc3e61M4LKuraw016UnbX01qagnA0U1Cil5L0H0E
ELg0FMXBUcHbTXiVk2L/3yXCzzRPGiJZG/IA7q1QcZXD
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:45 2025 by rpki-client