Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3U98EK5dcuJOAUMbzNiuj1OZv1A.roa
File: 3U98EK5dcuJOAUMbzNiuj1OZv1A.roa (raw, json)
Hash identifier: ZjdUXxrfDSapn+9bNDIuCl+ZwpNgSJYiN8qD5v0GjVc=
Subject key identifier: DD:4F:7C:10:AE:5D:72:E2:4E:01:43:1B:CC:D8:AE:8F:53:99:BF:50
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018F4C4E15E499C4CF4917D2C7721C586D94
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3U98EK5dcuJOAUMbzNiuj1OZv1A.roa
Signing time: Mon 06 May 2024 05:08:56 +0000
ROA not before: Mon 06 May 2024 05:08:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 88.80.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 05:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:4e:15:e4:99:c4:cf:49:17:d2:c7:72:1c:58:6d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: May 6 05:08:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd4f7c10ae5d72e24e01431bccd8ae8f5399bf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:10:2e:6c:da:60:f9:43:d4:cc:1d:cb:a1:fb:
f0:5b:c8:2b:38:09:da:88:39:d5:86:5d:e0:3a:29:
cb:28:d9:ef:5e:68:b0:46:91:2e:02:14:07:04:b8:
37:c0:76:c3:a9:58:d8:a3:52:ad:4f:61:18:79:3d:
bc:ee:19:8b:f9:80:d7:c7:af:22:5b:e0:4a:75:e1:
bb:70:db:2c:9a:87:83:e7:a4:88:0a:ac:a6:20:a8:
5e:5c:ee:42:df:e9:e2:35:7a:3d:b4:53:8b:ef:a7:
07:aa:82:51:a3:41:a6:ad:33:48:45:22:05:74:7a:
21:61:35:84:2f:7b:6c:71:37:f5:c3:6d:28:c7:22:
25:61:c4:71:cd:f8:d2:bc:cb:f0:ed:38:e2:c0:d1:
dc:1d:40:c8:2f:ed:ae:5e:13:af:8c:af:f6:7a:d9:
5b:e1:b7:54:46:89:bb:d6:69:af:af:5f:78:fd:00:
a3:ec:1a:83:0f:5e:0d:17:85:b5:a6:ef:8d:21:70:
b1:38:6d:0e:71:2e:ec:75:56:e4:09:14:9b:61:e0:
19:31:23:54:23:0a:ac:ec:e0:a5:7a:08:4c:dd:ce:
3a:1e:09:01:74:eb:47:c1:f1:03:8d:5f:e3:98:44:
ca:69:f9:4d:f1:e2:ae:81:a1:3a:85:c7:5b:d3:2c:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4F:7C:10:AE:5D:72:E2:4E:01:43:1B:CC:D8:AE:8F:53:99:BF:50
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3U98EK5dcuJOAUMbzNiuj1OZv1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2a:07:af:10:ca:93:53:27:36:62:e8:7c:60:5e:4f:70:e3:
e5:f8:d5:5c:18:82:d7:06:ac:54:cf:93:20:4f:90:ee:b3:27:
19:5f:fb:3a:7c:67:b3:02:7a:f6:83:4c:e1:47:09:a6:98:93:
83:a5:bc:e4:27:59:6d:22:1b:81:80:f7:51:b7:5b:05:96:95:
1b:60:48:a9:64:77:d7:f6:7e:3c:ca:b8:bf:69:24:d7:eb:09:
ab:38:15:3f:17:91:b5:35:ca:24:a1:b7:7f:4a:1a:b5:33:da:
98:97:e4:46:37:07:d3:3a:e7:ca:e6:ea:11:88:32:c9:c4:4f:
ce:de:7d:94:ff:d0:bb:54:ed:93:88:79:04:88:0f:d9:2e:db:
de:0f:0d:b7:56:50:77:84:89:c1:6e:95:d3:5a:a9:a9:bd:de:
f8:3f:0a:a0:4d:7c:77:4c:cb:c1:b7:9c:cc:ee:cc:dd:6c:d1:
bc:7e:d9:bb:3d:d2:a9:56:15:32:c5:fd:52:80:32:1a:b3:9e:
c1:ab:9f:76:83:b8:4f:60:f5:fc:69:27:68:43:68:bd:2b:84:
c8:50:4b:70:b6:00:b3:8b:cb:82:b5:eb:31:fa:47:18:e6:ab:
bb:d3:94:b9:df:fe:59:ec:fc:b4:1a:4e:c8:77:5d:ce:68:ec:
01:94:0c:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9MThXkmcTPSRfSx3IcWG2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwNTA2MDUwODU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDRmN2MxMGFlNWQ3MmUyNGUwMTQzMWJjY2Q4YWU4ZjUzOTliZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xAubNpg+UPUzB3LofvwW8grOAna
iDnVhl3gOinLKNnvXmiwRpEuAhQHBLg3wHbDqVjYo1KtT2EYeT287hmL+YDXx68i
W+BKdeG7cNssmoeD56SICqymIKheXO5C3+niNXo9tFOL76cHqoJRo0GmrTNIRSIF
dHohYTWEL3tscTf1w20oxyIlYcRxzfjSvMvw7TjiwNHcHUDIL+2uXhOvjK/2etlb
4bdURom71mmvr194/QCj7BqDD14NF4W1pu+NIXCxOG0OcS7sdVbkCRSbYeAZMSNU
Iwqs7OCleghM3c46HgkBdOtHwfEDjV/jmETKaflN8eKugaE6hcdb0yw/gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN1PfBCuXXLiTgFDG8zYro9Tmb9QMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvM1U5OEVLNWRjdUpPQVVNYnpOaXVqMU9adjFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCGMA0G
CSqGSIb3DQEBCwUAA4IBAQAaKgevEMqTUyc2Yuh8YF5PcOPl+NVcGILXBqxUz5Mg
T5DusycZX/s6fGezAnr2g0zhRwmmmJODpbzkJ1ltIhuBgPdRt1sFlpUbYEipZHfX
9n48yri/aSTX6wmrOBU/F5G1Ncokobd/Shq1M9qYl+RGNwfTOufK5uoRiDLJxE/O
3n2U/9C7VO2TiHkEiA/ZLtveDw23VlB3hInBbpXTWqmpvd74PwqgTXx3TMvBt5zM
7szdbNG8ftm7PdKpVhUyxf1SgDIas57Bq592g7hPYPX8aSdoQ2i9K4TIUEtwtgCz
i8uCtesx+kcY5qu705S53/5Z7Py0Gk7Id13OaOwBlAx/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org