Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/0wZVjQyAZN7FUqqo_q2T_2ztqMo.roa
File: 0wZVjQyAZN7FUqqo_q2T_2ztqMo.roa (raw, json)
Hash identifier: MJnmrIBvunFzRqSMb+2sC4OLYwKz4zEaS8FaPRBIoLs=
Subject key identifier: D3:06:55:8D:0C:80:64:DE:C5:52:AA:A8:FE:AD:93:FF:6C:ED:A8:CA
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018DC34343FBC7C17C6EE6736FDFFE36A36C
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/0wZVjQyAZN7FUqqo_q2T_2ztqMo.roa
Signing time: Mon 19 Feb 2024 21:26:21 +0000
ROA not before: Mon 19 Feb 2024 21:26:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.80.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 13:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c3:43:43:fb:c7:c1:7c:6e:e6:73:6f:df:fe:36:a3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 19 21:26:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d306558d0c8064dec552aaa8fead93ff6ceda8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:7e:61:2a:55:14:58:44:81:a4:4c:e5:32:
b5:7c:ac:d2:52:82:c6:45:01:85:aa:aa:20:70:ce:
6d:71:6d:e0:10:47:da:b9:95:71:b9:16:81:cb:62:
ab:45:10:ab:11:0b:3b:f1:ba:5f:e1:f2:f1:e8:a4:
a2:5f:a5:ae:42:3f:21:fa:72:47:cf:63:cd:1e:d5:
c1:3b:e1:b7:11:ff:9c:f5:b1:54:11:46:03:d8:31:
a4:d4:ef:9d:3d:38:cc:6f:93:02:f0:96:81:f3:c9:
f7:e2:13:a6:20:e5:2c:37:4f:b0:04:f8:bf:09:fa:
9b:e8:34:84:6d:44:f0:76:bb:9c:3d:b9:1d:91:16:
7e:2d:24:52:62:b7:e0:e9:f2:cf:b2:fa:a9:5d:36:
64:07:55:8d:6d:f1:35:31:0b:d4:0b:9f:53:be:a7:
cb:ca:b8:d2:a0:4c:6e:65:a0:f1:fd:53:c8:28:a3:
f7:1e:77:e5:03:21:99:d2:5a:d1:4e:a4:5d:d1:be:
38:d3:8f:30:5e:71:51:ee:d6:e7:a3:cb:7a:a2:12:
df:11:37:81:58:0e:a2:1d:b4:62:aa:e3:36:4c:ca:
93:f2:2f:92:54:5d:85:06:b7:95:71:38:10:4e:6b:
ad:5d:00:f8:28:fe:6c:10:5e:56:be:d9:55:b6:c9:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:55:8D:0C:80:64:DE:C5:52:AA:A8:FE:AD:93:FF:6C:ED:A8:CA
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/0wZVjQyAZN7FUqqo_q2T_2ztqMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:16:1d:8e:80:8b:ed:7e:b6:68:3a:52:e8:3b:a4:9e:d5:e3:
6b:58:02:e0:80:c5:e8:a4:c8:76:d2:a8:ac:4b:84:19:77:7a:
44:87:e5:00:96:68:a6:e3:3e:62:7e:4d:53:83:97:83:8e:27:
01:09:2c:b2:a4:b6:48:6a:64:8f:dd:f4:1f:1d:b3:59:9d:3f:
87:b3:41:ae:10:9b:54:f8:3e:90:2e:67:33:0f:ef:17:60:52:
0d:f3:25:90:1e:11:94:5f:92:57:de:12:73:e9:9e:40:43:d2:
88:b6:1e:7d:13:86:d7:18:2d:9c:9d:96:eb:2c:18:9d:18:bb:
8f:1b:be:60:ef:de:41:ca:cf:e3:d3:76:b3:e6:03:0e:c7:e0:
a9:44:d3:56:5f:cc:35:7f:dc:2c:3d:27:d1:d1:00:df:c7:57:
9b:d6:36:38:28:60:05:27:5f:d1:8d:64:95:d7:df:a6:f5:71:
07:25:6a:08:86:a2:3c:9c:9c:ad:68:ef:62:84:95:ea:e0:71:
76:65:99:fb:a8:7c:c7:77:39:d5:41:1f:c6:cd:69:69:bf:8f:
21:78:a8:59:1c:a5:3c:19:8d:20:33:93:e2:d3:e0:1e:65:0f:
3e:e2:72:a2:04:89:ac:cb:28:89:cd:78:de:67:37:aa:e5:c8:
c5:18:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org