Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ZjZFtz3H_Xy7Db9AimiDl92R0XU.roa
File: ZjZFtz3H_Xy7Db9AimiDl92R0XU.roa (raw, json)
Hash identifier: u1EmlmBWc6iA43Z+jBF3GYXcMgUyCmD6jErbAvWoo5o=
Subject key identifier: 66:36:45:B7:3D:C7:FD:7C:BB:0D:BF:40:8A:68:83:97:DD:91:D1:75
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A983340775043FA28F03D2BB8587C3CB2
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ZjZFtz3H_Xy7Db9AimiDl92R0XU.roa
Signing time: Fri 15 Sep 2023 09:36:50 +0000
ROA not before: Fri 15 Sep 2023 09:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24620
IP address blocks: 78.154.128.0/20 maxlen: 20
213.175.84.0/23 maxlen: 23
213.175.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 28 Dec 2023 14:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:33:40:77:50:43:fa:28:f0:3d:2b:b8:58:7c:3c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=663645b73dc7fd7cbb0dbf408a688397dd91d175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d6:da:88:95:b7:30:bd:93:1e:32:93:1c:01:
e2:0e:1f:27:17:78:d8:bd:f0:82:33:4a:df:83:b8:
80:38:bf:ae:6b:4d:9c:8f:b7:1e:3a:92:94:82:c2:
17:8b:e0:49:2c:53:29:8e:34:53:97:6d:03:ac:f5:
53:3a:df:93:9e:6d:9f:27:e1:5d:19:f5:77:ec:c2:
a8:89:e4:9f:f9:1c:6a:1d:41:b3:6a:e8:49:d9:05:
58:c5:36:ba:da:84:f9:6e:b8:ae:ae:ab:57:f8:97:
ba:fb:0a:ea:1f:e1:11:78:90:ff:29:b4:70:27:d2:
ac:3e:49:a3:19:60:92:c1:e6:aa:d1:30:45:2e:04:
cf:2a:68:a7:ff:91:cc:79:5d:80:a3:3c:66:1c:18:
a3:be:1a:14:ac:b3:89:e3:44:c7:01:58:50:5a:cd:
05:de:2f:c6:3a:fd:40:88:f8:e0:01:09:a7:56:ff:
b6:8b:ad:7b:6a:aa:e8:7c:e0:a3:86:43:6f:57:47:
c8:0a:df:6f:d0:d2:d2:2b:cf:56:c6:a5:27:07:52:
88:c4:fd:0f:b4:95:23:5c:e7:98:d5:9d:1c:1c:a6:
71:e3:1a:04:79:04:e2:21:c5:42:ee:31:b6:4d:da:
90:5e:f1:1c:4f:ec:37:f5:c2:26:08:ad:22:21:9d:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:36:45:B7:3D:C7:FD:7C:BB:0D:BF:40:8A:68:83:97:DD:91:D1:75
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ZjZFtz3H_Xy7Db9AimiDl92R0XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.128.0/20
213.175.84.0/23
213.175.88.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:e0:41:c4:29:a3:ed:35:6f:90:2c:c3:8d:52:0c:57:a3:1d:
f6:ca:90:e6:fe:8d:bb:b5:cd:74:94:d1:6f:e6:13:e1:55:36:
fc:bb:5d:a9:90:74:e5:3e:3e:d2:9e:ba:f0:7c:b7:ef:99:36:
5f:4a:9e:5b:29:55:25:46:c9:08:04:2a:e9:64:2c:ec:e9:f4:
be:2c:a7:07:fa:a4:6d:d2:7a:ae:73:24:d6:9f:2d:06:a5:bb:
b2:a6:a1:12:42:2c:de:0f:f2:3a:55:d2:40:0f:e9:83:e2:4d:
4e:bb:01:fe:3e:c4:7e:57:b1:3b:05:80:a8:ea:e5:7f:9b:da:
9f:bf:5e:b7:f7:a9:24:02:ae:d3:1f:f3:f6:2d:3c:00:a5:ed:
2c:7b:cb:95:3e:71:21:d8:28:0e:61:8c:42:a1:df:ae:40:12:
dc:2b:25:09:18:d0:b9:e8:ef:30:df:b1:35:a1:77:23:b7:9b:
bb:8f:92:00:d4:eb:00:bf:c9:12:55:12:51:dd:c4:22:92:a6:
2a:81:f6:87:3f:61:22:b2:78:52:08:8b:b6:97:9a:e0:1f:bb:
22:9c:0b:5a:70:f5:ba:4a:36:50:e1:48:90:55:f5:c3:93:75:
a7:05:fe:07:92:02:7e:5a:f2:b2:28:f6:d8:79:bf:8b:14:13:
8e:58:ca:27
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYqYM0B3UEP6KPA9K7hYfDyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjMwOTE1MDkzNjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjM2NDViNzNkYzdmZDdjYmIwZGJmNDA4YTY4ODM5N2RkOTFkMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdbaiJW3ML2THjKTHAHiDh8nF3jY
vfCCM0rfg7iAOL+ua02cj7ceOpKUgsIXi+BJLFMpjjRTl20DrPVTOt+Tnm2fJ+Fd
GfV37MKoieSf+RxqHUGzauhJ2QVYxTa62oT5briurqtX+Je6+wrqH+EReJD/KbRw
J9KsPkmjGWCSweaq0TBFLgTPKmin/5HMeV2AozxmHBijvhoUrLOJ40THAVhQWs0F
3i/GOv1AiPjgAQmnVv+2i617aqrofOCjhkNvV0fICt9v0NLSK89WxqUnB1KIxP0P
tJUjXOeY1Z0cHKZx4xoEeQTiIcVC7jG2TdqQXvEcT+w39cImCK0iIZ2bkwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGY2Rbc9x/18uw2/QIpog5fdkdF1MB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvWmpaRnR6M0hfWHk3RGI5QWltaURsOTJSMFhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQETpqAAwQB
1a9UAwQD1a9YMA0GCSqGSIb3DQEBCwUAA4IBAQCi4EHEKaPtNW+QLMONUgxXox32
ypDm/o27tc10lNFv5hPhVTb8u12pkHTlPj7SnrrwfLfvmTZfSp5bKVUlRskIBCrp
ZCzs6fS+LKcH+qRt0nqucyTWny0GpbuypqESQizeD/I6VdJAD+mD4k1OuwH+PsR+
V7E7BYCo6uV/m9qfv16396kkAq7TH/P2LTwApe0se8uVPnEh2CgOYYxCod+uQBLc
KyUJGNC56O8w37E1oXcjt5u7j5IA1OsAv8kSVRJR3cQikqYqgfaHP2EisnhSCIu2
l5rgH7sinAtacPW6SjZQ4UiQVfXDk3WnBf4HkgJ+WvKyKPbYeb+LFBOOWMon
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org