Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/zp-lfdxp1HJ0lG3FOZGeLlwe3r0.roa
File: zp-lfdxp1HJ0lG3FOZGeLlwe3r0.roa (raw, json)
Hash identifier: wU+NjYTdXAxaD5tEODHqnTVf5w1LjJQtQo7nyibF/QI=
Subject key identifier: CE:9F:A5:7D:DC:69:D4:72:74:94:6D:C5:39:91:9E:2E:5C:1E:DE:BD
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 0187C4CA3E98FCC197AE2821A92D1447DE58
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/zp-lfdxp1HJ0lG3FOZGeLlwe3r0.roa
Signing time: Thu 27 Apr 2023 22:16:41 +0000
ROA not before: Thu 27 Apr 2023 22:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204092
IP address blocks: 80.67.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c4:ca:3e:98:fc:c1:97:ae:28:21:a9:2d:14:47:de:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Apr 27 22:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce9fa57ddc69d47274946dc539919e2e5c1edebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ef:21:a0:72:5a:e4:25:d1:d4:ce:45:52:43:
f2:d8:40:bc:11:14:64:7f:13:03:65:37:56:e3:26:
77:55:73:f6:ac:6a:3d:39:42:21:27:bc:eb:d2:da:
f4:45:3e:98:ce:6c:8f:9c:81:50:94:ab:ce:56:3f:
13:cf:0a:5c:98:01:d7:03:05:ad:78:9d:44:58:ad:
8a:8c:92:10:07:42:a3:5f:27:f2:98:9b:64:0a:94:
06:ff:a4:b0:5d:8c:2e:d5:42:d9:dc:de:5e:fa:36:
b3:05:38:56:21:8d:35:00:3a:c8:64:97:80:d2:91:
f8:bd:4b:e7:cc:4c:2e:a8:f6:36:65:86:dd:d5:6b:
c0:84:7f:94:30:38:f4:2c:e8:d8:c1:7b:41:27:68:
11:38:46:d1:a7:dd:45:25:9e:6d:38:83:47:84:72:
1f:e9:29:e5:ea:3c:8b:40:90:25:cb:04:ed:a1:39:
19:b0:b2:90:f4:9c:c2:52:af:dd:75:0b:a2:cf:67:
ae:92:bd:89:c5:26:c9:4b:f4:7c:2c:56:39:95:14:
3d:f4:0c:f9:03:6e:a5:76:ab:03:bc:3c:35:ea:66:
4d:52:20:95:57:a4:49:41:42:6d:e0:fc:00:2a:84:
68:bb:dd:89:a7:86:a2:a8:55:a6:90:78:81:9e:a2:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9F:A5:7D:DC:69:D4:72:74:94:6D:C5:39:91:9E:2E:5C:1E:DE:BD
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/zp-lfdxp1HJ0lG3FOZGeLlwe3r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.190.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f8:18:a2:a2:a3:e5:12:19:4c:b8:69:f5:34:05:c0:cb:23:
3c:ab:a4:67:ec:1a:49:c6:df:92:41:35:69:34:33:c4:ce:e0:
cf:71:c5:b0:e1:02:c9:24:ea:0f:1a:a9:11:c2:bf:73:21:87:
4e:a7:4e:41:0d:71:97:2d:d6:24:55:46:c2:9e:5b:e5:66:26:
34:74:8a:0e:4a:9b:57:cb:5f:d5:0b:60:0d:f0:cc:f3:16:24:
d8:5c:8f:45:d6:88:09:d1:0e:bd:3d:52:7e:68:92:c5:cc:f3:
41:65:3d:9f:38:4c:8d:a4:ff:7d:3b:9a:ec:f1:61:bb:63:fb:
ee:65:4c:91:42:e7:74:5e:74:25:45:63:d7:c2:f5:37:f9:05:
e3:7b:64:6c:4a:2d:64:6c:5f:0a:c7:61:7c:26:43:d1:fe:52:
60:a3:12:e7:1b:a0:af:94:15:7c:cf:cc:98:88:6c:7f:b1:1c:
99:ca:a9:e6:05:61:1e:75:46:21:a3:f1:0d:1b:9b:d5:84:04:
91:e2:84:6e:0a:12:a3:1c:0a:3e:72:c7:4c:57:26:b3:0f:d9:
88:95:68:47:26:3e:aa:34:ea:fd:f8:a0:e3:dc:50:49:10:e4:
a4:56:7a:71:d4:9e:8e:23:41:86:d1:69:bb:98:ef:3b:56:10:
77:fc:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:28 2024 by rpki-client on console-ams.rpki-client.org