Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/ZESehusLBLo-17BU4_UHUAopwPw.roa
File: ZESehusLBLo-17BU4_UHUAopwPw.roa (raw, json)
Hash identifier: Ljo+b0fZmoWoB3URw7TK2vZxzOa+opp+Gkt5eIeRiSM=
Subject key identifier: 64:44:9E:86:EB:0B:04:BA:3E:D7:B0:54:E3:F5:07:50:0A:29:C0:FC
Certificate issuer: /CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Certificate serial: 01856C6EFBFF2F5C7B91D3BE1EEF9FCF7165
Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/ZESehusLBLo-17BU4_UHUAopwPw.roa
Signing time: Sun 01 Jan 2023 08:24:50 +0000
ROA not before: Sun 01 Jan 2023 08:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9086
IP address blocks: 81.24.192.0/24 maxlen: 24
81.24.192.0/20 maxlen: 20
81.24.194.0/24 maxlen: 24
81.24.198.0/24 maxlen: 24
81.24.193.0/24 maxlen: 24
81.24.197.0/24 maxlen: 24
81.24.199.0/24 maxlen: 24
81.24.196.0/24 maxlen: 24
81.24.195.0/24 maxlen: 24
81.24.201.0/24 maxlen: 24
81.24.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:fb:ff:2f:5c:7b:91:d3:be:1e:ef:9f:cf:71:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Validity
Not Before: Jan 1 08:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64449e86eb0b04ba3ed7b054e3f507500a29c0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:46:83:22:c1:8d:5f:51:01:45:54:b5:ec:
8f:62:59:60:38:2c:7f:be:e0:48:29:16:a3:8b:99:
5d:d2:85:c1:3d:e7:1b:81:26:92:f0:84:9d:e4:f1:
47:8b:98:51:02:82:d1:f2:5c:cc:f8:01:fc:5f:2c:
bd:9d:bf:4a:fb:7f:f3:3c:f0:fd:cd:04:fd:86:51:
cc:07:f4:70:2a:7b:40:1f:ee:55:46:9f:1f:11:bc:
0d:93:3e:8c:f5:3b:46:be:73:d7:fe:78:c0:ac:47:
fe:d7:5c:bc:ed:83:49:01:12:77:b9:d2:d9:a1:19:
8c:10:86:a7:a2:40:d2:0d:c7:1d:ad:3a:e8:20:17:
11:80:90:95:18:4a:24:84:c0:76:e3:5c:d4:c5:bd:
01:32:7c:bb:2f:94:eb:06:af:6c:bd:8f:32:46:07:
5d:0f:e9:da:07:28:b0:96:0a:57:cd:be:f7:6d:32:
76:41:39:84:85:a6:0d:18:c4:dd:c8:d4:13:0e:61:
20:37:61:21:89:0a:28:1b:6a:06:f3:89:7b:04:96:
80:03:0b:9a:96:5c:4e:3e:25:79:3c:49:40:3d:af:
d3:72:62:5a:0f:97:46:12:3f:c4:c4:3c:e4:4d:30:
c4:43:c0:be:9b:02:21:9c:84:96:4c:9e:11:d4:7f:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:44:9E:86:EB:0B:04:BA:3E:D7:B0:54:E3:F5:07:50:0A:29:C0:FC
X509v3 Authority Key Identifier:
keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/ZESehusLBLo-17BU4_UHUAopwPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.192.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:49:aa:c6:80:76:aa:4f:52:6a:0d:3c:86:c7:7e:c2:ab:32:
b5:37:b3:cc:89:5f:db:1d:3e:42:08:da:ad:57:fd:92:3c:cf:
c3:3d:60:2d:96:cc:85:59:ec:07:ac:85:e7:58:c2:95:95:85:
42:18:2b:f8:90:41:b2:4f:92:43:6c:ed:19:05:69:71:13:ef:
fe:a0:ad:be:41:40:23:12:8a:8e:35:52:7b:c3:b9:ab:29:db:
8d:0a:ea:0e:67:a4:f1:4f:e5:50:cb:4b:5c:8d:4e:49:da:8f:
af:e5:76:2b:45:4e:89:07:34:ba:d5:5b:0a:37:77:c7:bc:02:
ef:4a:30:0e:82:d7:76:53:4a:ab:14:d2:1e:35:a8:c6:cd:80:
07:26:ee:c0:03:3a:eb:ec:55:09:c3:e5:d6:0a:cf:85:d8:bd:
8b:b7:20:1e:d4:53:0b:b1:a2:c3:0c:1d:a6:1e:e3:28:e2:53:
3f:40:51:1f:df:75:0d:d8:4e:ef:a9:b7:9e:78:d0:7e:6d:77:
95:7d:72:40:41:01:bc:e2:4d:bd:67:f1:d0:b1:08:38:42:04:
ea:0c:99:2f:05:e9:14:0d:2e:84:06:46:d7:7e:f8:01:41:c6:
f8:b8:f6:86:dc:5a:c0:5a:35:7e:7e:2e:f6:27:2d:1d:57:3c:
29:59:f5:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsbvv/L1x7kdO+Hu+fz3FlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZmI1NjQxNWYzNWU2M2ZhNzQwM2E1MDFmZGVkZGFlZWNl
YTQ3NWEwHhcNMjMwMTAxMDgyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDQ0OWU4NmViMGIwNGJhM2VkN2IwNTRlM2Y1MDc1MDBhMjljMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi5GgyLBjV9RAUVUteyPYllgOCx/
vuBIKRaji5ld0oXBPecbgSaS8ISd5PFHi5hRAoLR8lzM+AH8Xyy9nb9K+3/zPPD9
zQT9hlHMB/RwKntAH+5VRp8fEbwNkz6M9TtGvnPX/njArEf+11y87YNJARJ3udLZ
oRmMEIanokDSDccdrTroIBcRgJCVGEokhMB241zUxb0BMny7L5TrBq9svY8yRgdd
D+naByiwlgpXzb73bTJ2QTmEhaYNGMTdyNQTDmEgN2EhiQooG2oG84l7BJaAAwua
llxOPiV5PElAPa/TcmJaD5dGEj/ExDzkTTDEQ8C+mwIhnISWTJ4R1H8ggwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGREnobrCwS6PtewVOP1B1AKKcD8MB8GA1UdIwQY
MBaAFJ77VkFfNeY/p0A6UB/e3a7s6kdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZ0V1FWODE1ai1uUURwUUg5N2RydXpxUjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83NWI0M2QtZTc0Mi00OGVhLTk0NWEt
YWE4MzJkYjdiNTBhLzEvWkVTZWh1c0xCTG8tMTdCVTRfVUhVQW9wd1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83NWI0M2QtZTc0Mi00OGVhLTk0NWEtYWE4MzJkYjdiNTBh
LzEvbnZ0V1FWODE1ai1uUURwUUg5N2RydXpxUjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEURjAMA0G
CSqGSIb3DQEBCwUAA4IBAQChSarGgHaqT1JqDTyGx37CqzK1N7PMiV/bHT5CCNqt
V/2SPM/DPWAtlsyFWewHrIXnWMKVlYVCGCv4kEGyT5JDbO0ZBWlxE+/+oK2+QUAj
EoqONVJ7w7mrKduNCuoOZ6TxT+VQy0tcjU5J2o+v5XYrRU6JBzS61VsKN3fHvALv
SjAOgtd2U0qrFNIeNajGzYAHJu7AAzrr7FUJw+XWCs+F2L2LtyAe1FMLsaLDDB2m
HuMo4lM/QFEf33UN2E7vqbeeeNB+bXeVfXJAQQG84k29Z/HQsQg4QgTqDJkvBekU
DS6EBkbXfvgBQcb4uPaG3FrAWjV+fi72Jy0dVzwpWfVN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:00 2024 by rpki-client on console-ams.rpki-client.org