Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/zeyUK_lbpO-g0-Vme3A7qxzfKek.roa
File: zeyUK_lbpO-g0-Vme3A7qxzfKek.roa (raw, json)
Hash identifier: GTRrMQMpOjolTq51+zeRTObybsh19MNPOFaYaeOECsg=
Subject key identifier: CD:EC:94:2B:F9:5B:A4:EF:A0:D3:E5:66:7B:70:3B:AB:1C:DF:29:E9
Certificate issuer: /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial: 018572D5BFFCA379D4B08A60BE15FB1F6B75
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/zeyUK_lbpO-g0-Vme3A7qxzfKek.roa
Signing time: Mon 02 Jan 2023 14:14:48 +0000
ROA not before: Mon 02 Jan 2023 14:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21104
IP address blocks: 80.86.226.0/24 maxlen: 24
80.86.225.0/24 maxlen: 24
80.86.224.0/24 maxlen: 24
80.86.224.0/20 maxlen: 20
80.86.230.0/23 maxlen: 24
80.86.229.0/24 maxlen: 24
80.86.228.0/24 maxlen: 24
80.86.227.0/24 maxlen: 24
80.86.233.0/24 maxlen: 24
80.86.232.0/24 maxlen: 24
80.86.237.0/24 maxlen: 24
80.86.236.0/24 maxlen: 24
80.86.236.0/23 maxlen: 23
80.86.235.0/24 maxlen: 24
80.86.234.0/24 maxlen: 24
80.86.239.0/24 maxlen: 24
2a03:3d00::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 15 Jun 2023 05:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:bf:fc:a3:79:d4:b0:8a:60:be:15:fb:1f:6b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Validity
Not Before: Jan 2 14:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdec942bf95ba4efa0d3e5667b703bab1cdf29e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0c:4d:86:98:63:d0:5b:f9:eb:d6:fb:5d:10:
fe:00:9d:20:fa:0c:20:39:c5:63:d3:07:6c:f3:e5:
b6:0c:0a:49:97:02:01:e4:a8:fb:91:0f:e8:74:18:
2e:0b:1e:a6:b9:a3:de:e5:bc:ca:2f:fa:eb:ac:7e:
2c:af:bc:f3:be:fe:b2:06:f6:c2:a9:8c:22:e2:10:
63:f3:2e:7c:3e:16:01:0b:0a:54:1f:ec:33:8b:3e:
6f:dc:b7:3b:41:98:fc:94:23:33:02:be:6a:4f:a5:
c7:98:b2:3d:e7:94:cf:81:94:ed:46:5f:a3:df:8c:
e9:0f:ca:d2:33:eb:45:00:e2:3b:b9:11:7c:ef:78:
ab:2d:94:d1:ff:e0:66:eb:f2:69:3e:cd:63:2a:03:
80:58:ed:af:5d:a3:c6:4b:ac:5a:84:39:76:0c:11:
42:5f:d7:b8:76:62:50:99:2b:75:96:5b:5e:63:9e:
6a:80:c9:c5:30:08:00:9f:38:2c:11:82:96:20:64:
c9:6a:5e:42:af:84:f1:7b:c2:48:36:96:78:b8:1c:
fa:da:9e:35:01:2c:2e:da:7c:1c:7a:73:3c:99:df:
34:f2:80:33:d2:70:d9:c6:19:f7:bf:7a:b8:2f:e3:
ee:c6:b0:70:d5:32:da:e6:c0:91:60:0a:66:5f:db:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EC:94:2B:F9:5B:A4:EF:A0:D3:E5:66:7B:70:3B:AB:1C:DF:29:E9
X509v3 Authority Key Identifier:
keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/zeyUK_lbpO-g0-Vme3A7qxzfKek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.224.0/20
IPv6:
2a03:3d00::/32
Signature Algorithm: sha256WithRSAEncryption
59:92:09:46:f4:b4:69:2c:90:83:88:60:0f:8f:81:d2:2a:ea:
6e:24:0b:02:5f:4e:c0:bc:57:4c:58:6f:54:a6:20:ce:b5:15:
42:f6:17:d9:21:d0:e2:9d:cc:61:c5:93:fc:41:a1:76:6d:02:
15:b6:35:e4:b3:7c:93:b2:a1:2f:66:22:5a:4e:be:66:a4:19:
76:04:f6:89:53:aa:83:2a:ed:52:e1:bf:a3:7f:7e:d6:c4:84:
3d:ac:58:d7:ea:de:13:c6:bc:96:76:1a:78:58:e4:b3:aa:5c:
36:ae:2e:2d:0b:ad:a2:1b:d3:97:da:55:66:9b:a5:83:2b:3d:
a6:47:ca:af:8e:75:1c:7e:00:ce:63:d6:21:7a:55:3f:1c:04:
b5:b0:63:14:fa:52:0c:38:d2:e6:f2:bf:dd:6e:48:61:43:af:
8f:3a:be:6c:2c:c3:05:5b:38:de:bb:1c:bc:a8:40:69:33:05:
de:23:1a:93:25:4a:25:92:5c:b1:cf:04:57:75:b5:18:ff:8d:
f3:35:c9:8f:f3:01:14:f4:9b:91:eb:ca:16:c5:4d:15:3c:b9:
32:49:64:cb:56:0b:32:e6:89:1e:0b:ca:58:bc:42:c1:69:77:
32:d0:51:83:b6:7b:5f:28:6d:98:1b:3a:61:5c:f3:3d:02:bf:
11:23:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:05 2024 by rpki-client on console-ams.rpki-client.org