Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/zDO3ZYFQQWzfvVJCExhmKNbbFJ8.roa
File: zDO3ZYFQQWzfvVJCExhmKNbbFJ8.roa (raw, json)
Hash identifier: tzHXygIbJzDAVN2PpDhEovZG7dgWNqryaOKGaQf/8Yg=
Subject key identifier: CC:33:B7:65:81:50:41:6C:DF:BD:52:42:13:18:66:28:D6:DB:14:9F
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 01872DAC73F3FEC26C6F03B0D9B064E91D3F
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/zDO3ZYFQQWzfvVJCExhmKNbbFJ8.roa
Signing time: Wed 29 Mar 2023 14:01:29 +0000
ROA not before: Wed 29 Mar 2023 14:01:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400513
IP address blocks: 80.77.93.0/24 maxlen: 24
88.214.197.0/24 maxlen: 24
88.214.200.0/24 maxlen: 24
88.214.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 13:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:ac:73:f3:fe:c2:6c:6f:03:b0:d9:b0:64:e9:1d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Mar 29 14:01:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc33b7658150416cdfbd524213186628d6db149f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e2:10:b6:30:c6:ca:41:b2:d0:47:86:d4:79:
18:ba:3a:3f:90:44:1f:ca:91:57:67:77:00:98:f6:
f0:06:61:75:f1:f0:dd:a2:ba:4a:c9:3f:2d:cf:94:
04:d6:e9:b0:44:bd:1a:68:cc:bb:27:3c:f2:a0:27:
e1:d1:07:c2:31:59:05:ac:23:ea:56:1c:98:0e:3f:
e2:08:60:0f:f4:a5:03:ae:49:c8:6a:e9:49:cd:b7:
ee:56:30:46:aa:93:90:36:f9:0d:95:73:c6:4c:99:
2a:30:21:c3:41:c3:b8:ae:2d:c1:61:bb:c5:16:43:
84:80:40:67:dd:d8:7a:23:a5:df:45:61:e3:88:ea:
13:05:eb:d3:3b:fe:29:c9:4c:73:9b:d3:d5:e2:24:
c3:67:66:70:a1:e8:46:89:3b:1f:5a:62:04:b6:64:
40:39:e4:35:10:03:6b:7f:dc:39:4c:b9:ee:83:22:
c2:a2:bc:11:f1:29:1a:19:e9:bf:6c:1c:c5:05:92:
07:58:fd:2c:c2:4d:1f:d1:a3:26:a3:85:2e:c0:7f:
a5:a3:e5:6b:b7:57:23:11:c5:47:07:a1:22:c4:d1:
fe:58:71:5f:a0:2c:87:b7:99:54:12:81:2c:bc:1a:
5d:2a:6c:a6:3b:52:1a:bd:9c:6f:dd:b4:c5:7b:30:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:B7:65:81:50:41:6C:DF:BD:52:42:13:18:66:28:D6:DB:14:9F
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/zDO3ZYFQQWzfvVJCExhmKNbbFJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.93.0/24
88.214.197.0/24
88.214.200.0/24
88.214.203.0/24
Signature Algorithm: sha256WithRSAEncryption
73:94:5f:39:b9:eb:6a:40:cf:2e:5b:66:b8:e7:6b:7e:df:4a:
17:4f:ff:6f:0a:cd:4e:e3:97:38:9d:e8:3b:cc:08:b7:03:cf:
e6:d9:39:f9:80:76:e9:6d:42:c7:e4:fd:48:7e:3c:41:67:a7:
06:2a:35:04:66:a8:a0:4c:1f:1e:03:9b:6c:ff:09:48:35:75:
e7:4e:84:c5:89:ee:f9:66:56:63:5e:fe:b8:2b:7f:d1:81:a7:
c4:ef:ed:1e:52:c9:b7:cf:fc:06:d9:a9:62:1e:e8:cd:80:07:
05:a6:04:62:6a:5b:34:b4:e7:75:16:19:9e:c2:a9:81:47:ee:
37:69:22:4c:16:9b:14:bd:be:f9:63:9c:de:0b:02:e5:48:bd:
1a:7a:ba:37:de:23:cb:fb:b8:b3:d4:9a:b3:46:b1:9c:0e:19:
87:82:c4:2a:de:fe:ac:81:be:8b:a7:a9:18:6c:ac:dc:b3:a4:
cd:8e:25:86:ca:db:61:cc:bc:c7:bc:37:33:27:13:95:5f:1e:
6d:61:85:06:7b:e0:45:b1:e3:f7:75:9b:f1:8e:14:57:c0:e8:
a2:43:40:8a:d0:f6:be:11:09:08:56:7e:f9:41:df:c1:ac:f8:
fb:5b:ff:57:30:0a:de:b9:b9:ef:a4:5c:d9:fd:14:85:16:84:
4b:5c:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:26 2024 by rpki-client on console-ams.rpki-client.org