Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/zEvyRWbVfaVEksPJyOiXpYFHp9w.roa
File: zEvyRWbVfaVEksPJyOiXpYFHp9w.roa (raw, json)
Hash identifier: LlrAQc4lpwoqzQ55hGSxDx+s/OdNmKhU3qIrRiT4hXI=
Subject key identifier: CC:4B:F2:45:66:D5:7D:A5:44:92:C3:C9:C8:E8:97:A5:81:47:A7:DC
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 018CC34962EF2D081A145B1634D8753742D5
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/zEvyRWbVfaVEksPJyOiXpYFHp9w.roa
Signing time: Mon 01 Jan 2024 04:30:15 +0000
ROA not before: Mon 01 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21177
IP address blocks: 80.84.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:62:ef:2d:08:1a:14:5b:16:34:d8:75:37:42:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc4bf24566d57da54492c3c9c8e897a58147a7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:96:f1:23:88:fc:f3:9c:fe:d9:0e:56:4f:
ff:3e:00:d2:17:3d:f8:62:f9:0f:8a:52:52:d9:74:
cb:be:ae:fe:1b:55:f1:6f:e6:26:f9:6c:5a:df:e1:
f6:47:62:12:e9:fd:cd:f0:3e:95:e2:76:13:bf:31:
18:af:3c:33:14:f3:0f:42:21:20:87:12:75:a8:1f:
87:0e:d0:0e:13:be:71:fe:ac:6e:00:0f:0d:9e:44:
3b:c9:a1:08:07:70:68:dc:38:3e:b0:73:d6:c2:e2:
ea:87:83:12:a8:47:17:5a:dc:ad:ce:ce:d7:e5:7a:
2f:be:b2:8e:c2:ab:82:ea:c8:bf:e5:f5:d9:05:69:
f3:03:c2:9e:36:cc:26:63:95:ea:82:80:3c:5f:34:
0b:c1:08:a9:4c:8b:c6:cb:da:a9:4a:fc:6e:d6:c7:
c4:a3:5e:fd:ec:a8:0d:10:ba:59:11:10:71:0c:da:
83:3f:12:d4:e9:ac:f6:8e:3d:b6:62:d9:37:34:80:
ae:62:5e:51:89:e5:e6:52:30:9a:38:62:fa:d5:51:
15:b5:10:95:32:3a:8d:b6:4c:e2:e9:e8:8d:94:dd:
ef:04:cc:91:95:63:a9:de:32:bb:86:f2:0d:19:ea:
b1:68:c2:f9:ea:e3:3e:7d:74:65:13:64:88:86:2c:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4B:F2:45:66:D5:7D:A5:44:92:C3:C9:C8:E8:97:A5:81:47:A7:DC
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/zEvyRWbVfaVEksPJyOiXpYFHp9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.80.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:b5:49:63:f2:77:6d:63:c1:58:f3:a7:48:0c:d9:ba:14:c1:
ff:25:53:12:4b:1a:89:28:d3:69:c0:73:ec:fa:3a:0a:e2:d3:
a6:39:8c:71:43:b3:d2:35:e0:91:23:77:da:a1:30:5b:84:f7:
e0:d8:6b:ee:0c:25:8e:1e:63:7a:2f:46:72:06:c6:e1:41:ed:
76:be:f3:1b:42:1e:d2:43:4e:a7:21:c2:49:78:57:ee:74:da:
56:4e:a6:09:a2:1d:50:8d:fe:5a:96:f1:a0:dc:d9:5a:a2:7f:
2a:15:19:69:e0:37:00:5c:c1:15:a9:ca:9a:7e:ec:1d:ab:f0:
43:cc:b5:4f:8c:7b:08:a4:fd:19:87:59:02:6e:f2:b0:b3:69:
38:40:62:04:89:d8:c2:4a:d3:8b:0e:05:21:a2:60:72:fc:91:
fe:8a:62:c5:a1:da:fc:4d:f9:87:5d:a0:75:46:c8:5d:02:a9:
e0:87:37:31:9c:a6:13:4d:27:7c:98:6c:13:a3:f5:e1:64:7c:
8b:27:63:06:e5:e5:65:ea:5a:5d:06:f2:a4:f6:bf:38:28:6e:
6f:bc:7a:8c:2b:50:84:3b:95:ab:52:ee:d2:97:96:12:35:c6:
5e:a5:e2:f7:1e:dd:0b:67:cb:0f:5c:b5:ec:21:96:7d:92:cb:
96:6a:d9:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSWLvLQgaFFsWNNh1N0LVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTgyNWNlOGJmNTQ0MTcwMjgyZjcyMGEyNDg0MTQxNTY4
YjBlN2QwHhcNMjQwMTAxMDQzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzRiZjI0NTY2ZDU3ZGE1NDQ5MmMzYzljOGU4OTdhNTgxNDdhN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovKW8SOI/POc/tkOVk//PgDSFz34
YvkPilJS2XTLvq7+G1Xxb+Ym+Wxa3+H2R2IS6f3N8D6V4nYTvzEYrzwzFPMPQiEg
hxJ1qB+HDtAOE75x/qxuAA8NnkQ7yaEIB3Bo3Dg+sHPWwuLqh4MSqEcXWtytzs7X
5XovvrKOwquC6si/5fXZBWnzA8KeNswmY5XqgoA8XzQLwQipTIvGy9qpSvxu1sfE
o1797KgNELpZERBxDNqDPxLU6az2jj22Ytk3NICuYl5RieXmUjCaOGL61VEVtRCV
MjqNtkzi6eiNlN3vBMyRlWOp3jK7hvINGeqxaML56uM+fXRlE2SIhizCPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMxL8kVm1X2lRJLDycjol6WBR6fcMB8GA1UdIwQY
MBaAFFNYJc6L9UQXAoL3IKJIQUFWiw59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFnbHpvdjFSQmNDZ3ZjZ29raEJRVmFMRG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wMWY3MzYtYWY4My00NTZjLThiNDUt
NTE0NmFiN2VhMDE1LzEvekV2eVJXYlZmYVZFa3NQSnlPaVhwWUZIcDl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wMWY3MzYtYWY4My00NTZjLThiNDUtNTE0NmFiN2VhMDE1
LzEvVTFnbHpvdjFSQmNDZ3ZjZ29raEJRVmFMRG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUFRQMA0G
CSqGSIb3DQEBCwUAA4IBAQC4tUlj8ndtY8FY86dIDNm6FMH/JVMSSxqJKNNpwHPs
+joK4tOmOYxxQ7PSNeCRI3faoTBbhPfg2GvuDCWOHmN6L0ZyBsbhQe12vvMbQh7S
Q06nIcJJeFfudNpWTqYJoh1Qjf5alvGg3Nlaon8qFRlp4DcAXMEVqcqafuwdq/BD
zLVPjHsIpP0Zh1kCbvKws2k4QGIEidjCStOLDgUhomBy/JH+imLFodr8TfmHXaB1
RshdAqnghzcxnKYTTSd8mGwTo/XhZHyLJ2MG5eVl6lpdBvKk9r84KG5vvHqMK1CE
O5WrUu7Sl5YSNcZepeL3Ht0LZ8sPXLXsIZZ9ksuWatk6
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:36 2025 by rpki-client