Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/ZCT8HzDDe7On2XHseGAh0PacRAI.roa
File: ZCT8HzDDe7On2XHseGAh0PacRAI.roa (raw, json)
Hash identifier: ngpwqRMjDir7EnIm2PUNFbmRBXklNx8PkMJLbXslusE=
Subject key identifier: 64:24:FC:1F:30:C3:7B:B3:A7:D9:71:EC:78:60:21:D0:F6:9C:44:02
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 018A064561F51E718BBEA2287855C84584A3
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/ZCT8HzDDe7On2XHseGAh0PacRAI.roa
Signing time: Fri 18 Aug 2023 01:32:04 +0000
ROA not before: Fri 18 Aug 2023 01:32:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 80.88.76.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:06:45:61:f5:1e:71:8b:be:a2:28:78:55:c8:45:84:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Aug 18 01:32:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6424fc1f30c37bb3a7d971ec786021d0f69c4402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c2:ee:3b:e9:f8:fb:12:95:13:ae:fb:eb:c3:
1c:6a:a2:0c:ba:58:71:88:e5:3b:84:de:30:cb:df:
bb:47:fe:43:39:05:05:b7:09:9a:62:2b:60:5c:36:
45:5d:f7:64:ed:47:3f:ac:85:1f:14:a6:33:8f:dd:
27:21:2d:01:71:10:7e:3a:ed:c6:ee:9e:0f:11:d6:
7c:b7:f6:2b:87:0f:98:60:e1:40:5c:35:5e:bc:95:
21:c3:01:d7:28:ee:2f:fe:5d:7d:e2:f8:94:19:34:
f8:8c:58:67:f8:e7:d0:62:58:5e:b2:2e:7a:eb:d7:
4a:7c:12:60:61:67:64:9a:17:d3:12:73:bf:8c:ba:
2a:ed:03:c3:31:72:a6:44:35:a6:9a:4b:e3:6c:f2:
70:97:aa:1d:63:bf:06:5b:c5:9f:4a:2a:6e:f0:cf:
45:c8:b6:67:4f:72:61:e1:d6:85:21:6b:84:28:3f:
c0:69:2b:25:1b:9d:c7:d4:90:df:22:4b:c2:22:c1:
ad:0b:e3:a8:22:ca:1b:f8:3e:f9:aa:b6:81:34:ce:
b4:76:ef:fe:a9:08:4d:06:0c:f9:37:45:dc:8a:f3:
28:41:26:71:32:70:5a:60:74:af:8c:3a:98:9a:34:
31:fe:8a:2b:cb:49:b7:8d:7a:dd:f3:9c:89:96:b9:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:24:FC:1F:30:C3:7B:B3:A7:D9:71:EC:78:60:21:D0:F6:9C:44:02
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/ZCT8HzDDe7On2XHseGAh0PacRAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.76.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:34:80:42:e2:a6:d6:73:97:71:03:ea:af:06:91:6f:25:0e:
f1:6a:d1:a2:99:e9:aa:fc:66:5b:a8:29:a9:13:28:27:5d:e7:
0f:db:1d:e4:e5:9b:75:cb:98:67:dd:d0:83:c1:fd:05:24:7c:
a5:54:d3:5b:73:5d:11:be:0d:b7:80:d6:9c:4c:d6:a3:9e:fc:
80:ec:ab:e5:a5:48:6a:31:c2:77:98:2b:33:3a:ee:be:11:91:
01:58:9d:94:45:e0:5c:e0:bb:f7:d4:26:d5:c7:e0:66:fb:c4:
12:61:eb:fc:0e:fb:5e:1b:0c:1a:eb:18:3a:c2:15:66:b9:65:
99:69:42:3a:2e:4a:7a:e0:1b:9c:d2:9f:52:1a:51:48:18:50:
78:39:3e:5d:7a:89:b9:07:aa:d0:01:29:bc:dc:15:26:be:5a:
62:2f:86:e1:df:44:72:d1:d1:42:e2:86:c0:42:c9:33:d2:5c:
d1:a0:4d:c9:df:ce:49:9c:de:78:7f:c4:3b:27:f4:8d:1b:62:
5c:94:d8:b0:87:3a:c8:1b:c6:68:4e:9f:ab:3d:15:93:ea:28:
7d:ca:b7:03:0b:ec:70:3c:84:86:e4:a2:91:bb:2f:ae:a9:4a:
c8:1c:81:fe:9e:77:6d:a4:09:5d:96:e2:31:bb:87:11:5e:07:
cc:f2:8c:1b
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 22 03:14:17 2023 by rpki-client on console-fra.rpki-client.org