Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/ZB-AqqwsKheOFisKuGbdQ7BDE40.roa
File: ZB-AqqwsKheOFisKuGbdQ7BDE40.roa (raw, json)
Hash identifier: 6oQcazBC3iBydU5/m7V0ufVhV+YIJsn+cFutJ+kRKA0=
Subject key identifier: 64:1F:80:AA:AC:2C:2A:17:8E:16:2B:0A:B8:66:DD:43:B0:43:13:8D
Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial: 018E392625D5A7A8199F059630C61C902630
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/ZB-AqqwsKheOFisKuGbdQ7BDE40.roa
Signing time: Wed 13 Mar 2024 18:49:45 +0000
ROA not before: Wed 13 Mar 2024 18:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3188
IP address blocks: 5.2.80.0/24 maxlen: 24
5.2.81.0/24 maxlen: 24
5.2.82.0/24 maxlen: 24
5.2.83.0/24 maxlen: 24
5.2.84.0/24 maxlen: 24
5.2.85.0/24 maxlen: 24
5.2.86.0/24 maxlen: 24
5.2.87.0/24 maxlen: 24
185.8.32.0/24 maxlen: 24
185.8.33.0/24 maxlen: 24
185.8.34.0/24 maxlen: 24
185.8.128.0/24 maxlen: 24
185.8.129.0/24 maxlen: 24
185.8.130.0/24 maxlen: 24
185.8.131.0/24 maxlen: 24
185.150.128.0/24 maxlen: 24
185.150.129.0/24 maxlen: 24
185.150.131.0/24 maxlen: 24
2a02:d9c0::/29 maxlen: 29
2a04:b600::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 19 Mar 2024 10:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:26:25:d5:a7:a8:19:9f:05:96:30:c6:1c:90:26:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Validity
Not Before: Mar 13 18:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=641f80aaac2c2a178e162b0ab866dd43b043138d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:80:21:7f:73:66:2a:ad:17:54:0b:76:c4:50:
ef:28:35:6c:40:a8:49:cc:7f:23:a1:19:c2:fd:9f:
74:3a:98:ba:33:5e:a3:9a:61:1f:b6:74:c2:22:48:
24:8d:d1:c0:82:76:d5:b3:2f:c5:f1:fb:74:a2:5b:
b5:0d:8a:ee:a1:ea:7a:78:c2:cf:21:ee:a5:a6:cb:
90:0c:8f:4b:b3:f3:da:fc:27:2a:ac:05:16:e6:b2:
91:48:36:41:a4:7e:8c:9c:b0:1e:9d:7d:ff:07:40:
7e:3a:ae:c0:a5:a0:56:df:0f:0c:59:7b:3c:2e:2b:
de:1e:d6:2e:c0:3c:1c:3b:85:34:43:b8:70:38:1c:
be:30:a9:23:32:94:16:68:24:f5:7c:d6:09:27:31:
44:a0:32:37:bd:2c:4d:7e:30:cd:80:b3:34:22:c0:
0c:26:4d:66:d6:1a:a5:5b:07:1a:3e:9f:71:af:e6:
95:b0:c7:9c:2e:9f:fa:94:43:40:4d:88:27:a3:96:
f5:c4:48:15:c3:0b:18:44:e5:20:55:c2:a8:20:84:
5c:de:29:1c:56:17:13:ae:93:2e:93:cc:73:9b:cd:
4e:7c:7a:38:5b:ed:8a:2b:bb:c8:83:d9:75:2d:a6:
1d:8c:ac:c2:8e:4c:33:82:c7:70:d1:ff:57:af:46:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1F:80:AA:AC:2C:2A:17:8E:16:2B:0A:B8:66:DD:43:B0:43:13:8D
X509v3 Authority Key Identifier:
keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/ZB-AqqwsKheOFisKuGbdQ7BDE40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.80.0/21
185.8.32.0-185.8.34.255
185.8.128.0/22
185.150.128.0/23
185.150.131.0/24
IPv6:
2a02:d9c0::/29
2a04:b600::/29
Signature Algorithm: sha256WithRSAEncryption
68:60:6a:89:bb:59:38:fe:38:a4:28:3f:9a:68:e0:74:be:8d:
24:35:aa:b3:10:e1:53:be:2c:b8:f7:d8:21:46:93:2f:2f:02:
40:29:e5:f1:2b:ba:80:70:09:08:08:51:0f:5d:39:08:6a:ab:
e7:95:60:a9:34:81:f7:e1:04:aa:81:48:dd:3c:be:f0:a2:b0:
51:75:90:d7:d8:69:9a:28:bc:62:9d:21:20:ec:b9:0f:22:f0:
7d:a6:66:eb:7f:dc:8d:69:10:ff:4d:f7:3b:ea:ea:a0:7e:7b:
18:9a:57:16:de:29:12:43:29:5d:26:57:b5:c1:d8:a9:46:15:
08:59:6e:a2:6b:d5:0f:61:92:b1:d2:40:f5:d3:ac:04:90:4e:
3c:df:06:5a:7f:f6:da:dc:13:60:7f:0d:5d:f7:c1:3c:f0:8b:
a5:ac:b6:a0:79:7e:4b:60:9d:6f:8b:b5:ff:e5:e3:7c:3f:f0:
cb:86:95:2f:4b:f4:70:4d:90:8c:da:df:d9:95:a1:bb:1c:f1:
74:b9:b4:a3:27:5f:ed:c9:c1:3a:b9:c0:26:db:d2:23:7a:2b:
c6:d1:bd:38:79:99:e8:28:19:6e:d8:db:4e:38:13:52:76:9a:
b4:e2:21:d3:33:85:fe:90:15:47:ed:82:ae:fa:af:86:37:90:
11:84:ae:cd
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAY45JiXVp6gZnwWWMMYckCYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYmZkM2U3MmQ0YTAzOTZmOTUzNDczMzZiNDI2NzhmNjhj
MjY0MzAwHhcNMjQwMzEzMTg0OTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDFmODBhYWFjMmMyYTE3OGUxNjJiMGFiODY2ZGQ0M2IwNDMxMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IAhf3NmKq0XVAt2xFDvKDVsQKhJ
zH8joRnC/Z90Opi6M16jmmEftnTCIkgkjdHAgnbVsy/F8ft0olu1DYruoep6eMLP
Ie6lpsuQDI9Ls/Pa/CcqrAUW5rKRSDZBpH6MnLAenX3/B0B+Oq7ApaBW3w8MWXs8
LiveHtYuwDwcO4U0Q7hwOBy+MKkjMpQWaCT1fNYJJzFEoDI3vSxNfjDNgLM0IsAM
Jk1m1hqlWwcaPp9xr+aVsMecLp/6lENATYgno5b1xEgVwwsYROUgVcKoIIRc3ikc
VhcTrpMuk8xzm81OfHo4W+2KK7vIg9l1LaYdjKzCjkwzgsdw0f9Xr0Y5bwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFGQfgKqsLCoXjhYrCrhm3UOwQxONMB8GA1UdIwQY
MBaAFEy/0+ctSgOW+VNHM2tCZ49owmQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAt
ZmY2MGUyMThlZDQxLzEvWkItQXFxd3NLaGVPRmlzS3VHYmRRN0JERTQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAtZmY2MGUyMThlZDQx
LzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAsBAIAATAmAwQDBQJQMAwD
BAW5CCADBAC5CCIDBAK5CIADBAG5loADBAC5loMwFAQCAAIwDgMFAyoC2cADBQMq
BLYAMA0GCSqGSIb3DQEBCwUAA4IBAQBoYGqJu1k4/jikKD+aaOB0vo0kNaqzEOFT
viy499ghRpMvLwJAKeXxK7qAcAkICFEPXTkIaqvnlWCpNIH34QSqgUjdPL7worBR
dZDX2GmaKLxinSEg7LkPIvB9pmbrf9yNaRD/Tfc76uqgfnsYmlcW3ikSQyldJle1
wdipRhUIWW6ia9UPYZKx0kD106wEkE483wZaf/ba3BNgfw1d98E88IulrLageX5L
YJ1vi7X/5eN8P/DLhpUvS/RwTZCM2t/ZlaG7HPF0ubSjJ1/tycE6ucAm29IjeivG
0b04eZnoKBlu2NtOOBNSdpq04iHTM4X+kBVH7YKu+q+GN5ARhK7N
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:59 2025 by rpki-client