Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/5sxl_rR_ha_3lsIhCxL8r5Jheh4.roa
File: 5sxl_rR_ha_3lsIhCxL8r5Jheh4.roa (raw, json)
Hash identifier: wTqV6YEAUD7Rju7FjhXGhGy3pUVzKvnqPkmglpMNNpc=
Subject key identifier: E6:CC:65:FE:B4:7F:85:AF:F7:96:C2:21:0B:12:FC:AF:92:61:7A:1E
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0185735F10896A95D10C8D9EA163A931C7F3
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/5sxl_rR_ha_3lsIhCxL8r5Jheh4.roa
Signing time: Mon 02 Jan 2023 16:44:48 +0000
ROA not before: Mon 02 Jan 2023 16:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35011
IP address blocks: 88.80.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5f:10:89:6a:95:d1:0c:8d:9e:a1:63:a9:31:c7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 2 16:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6cc65feb47f85aff796c2210b12fcaf92617a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:a1:0a:c2:99:fe:3e:a7:a2:fe:88:36:59:
ce:83:c8:ad:dd:fc:a8:fc:0b:3d:a2:a8:16:05:1d:
83:48:29:36:9e:8d:e4:e1:28:c9:f0:43:52:6b:50:
56:4a:13:19:fe:23:21:6b:6f:23:51:6d:54:1b:06:
33:c9:0c:7f:1b:0a:b8:6a:53:a6:bc:39:d8:27:83:
3d:f7:5f:f3:53:86:35:98:9e:37:e4:c8:0b:92:7a:
b8:2a:bf:fc:df:f5:33:d6:a9:1a:fc:c1:fa:73:da:
b3:ed:4d:95:da:23:3b:69:5c:01:42:ac:8f:b5:b4:
33:8b:9d:02:5a:d0:80:51:1c:43:e6:e7:e1:c4:bd:
5e:a2:6e:43:fc:77:21:16:d6:5d:58:76:2e:44:1b:
bd:93:b4:2b:79:4a:b9:9b:b3:57:34:b6:a4:65:68:
d8:77:f1:40:b7:02:13:e4:3b:f3:ea:52:0d:d3:5c:
a7:8d:2f:55:d0:f6:71:ae:66:d0:52:1b:f6:0f:c2:
a6:3b:46:16:56:6b:6b:ab:4f:5b:b8:97:84:d7:18:
16:ea:05:a8:2f:a1:c6:97:8d:f7:31:7d:26:a4:43:
bb:4d:09:45:99:5d:fe:c2:17:f7:a1:71:4d:5a:c2:
2a:87:dd:2c:ac:eb:9e:93:3c:79:14:df:73:0b:44:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CC:65:FE:B4:7F:85:AF:F7:96:C2:21:0B:12:FC:AF:92:61:7A:1E
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/5sxl_rR_ha_3lsIhCxL8r5Jheh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c4:eb:b8:b8:fb:d8:46:47:32:a6:af:78:f8:79:ff:df:2d:
45:fd:e0:d7:76:b5:0b:c4:6e:dd:dc:e5:a1:20:9e:50:8f:dd:
fe:ee:38:30:41:ca:38:79:30:0b:8e:48:98:53:62:e8:8b:2c:
cf:7d:3a:e3:f5:85:0b:35:c3:3e:fc:5a:9d:5a:2d:59:cd:d3:
ba:21:95:d4:55:cd:9c:23:67:9e:8c:b6:40:77:f5:35:9c:eb:
88:7c:e6:0f:8d:d7:25:2c:64:c8:a4:84:c2:08:d1:28:ca:f9:
dc:81:94:f0:db:d9:6b:5b:a9:6c:00:fe:5d:9f:d9:d1:a2:d6:
2c:3e:a9:0f:52:fc:21:12:5d:b9:ec:5a:cb:cd:d1:11:5b:7e:
85:40:bb:a0:c9:85:3b:90:13:b5:e7:74:13:a4:4b:a2:14:91:
ce:e0:68:d5:55:69:aa:a9:94:27:1c:be:44:87:83:3c:d1:f0:
a0:59:dc:45:e0:bd:2d:f9:f8:ce:50:fc:ae:8d:1f:82:e7:65:
db:d0:99:45:60:56:b5:5c:e0:40:f9:c9:6c:2b:07:79:9f:67:
d1:da:2a:12:c0:0e:1d:d3:a4:1e:87:fb:08:dd:1b:c3:b1:8e:
66:02:88:1c:32:22:fe:a3:1b:11:17:81:9b:23:af:39:7a:97:
40:8d:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org