Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6v6H-Rzwgbw_Mf3Tn9t7GW-sncM.roa
File: 6v6H-Rzwgbw_Mf3Tn9t7GW-sncM.roa (raw, json)
Hash identifier: w/zDDKp6TSlE/dhkh3dCpUnsVyof3thQwzvDbst7Kuk=
Subject key identifier: EA:FE:87:F9:1C:F0:81:BC:3F:31:FD:D3:9F:DB:7B:19:6F:AC:9D:C3
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018CC8DF949C44B20360F2B96BFA715BED5C
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6v6H-Rzwgbw_Mf3Tn9t7GW-sncM.roa
Signing time: Tue 02 Jan 2024 06:32:24 +0000
ROA not before: Tue 02 Jan 2024 06:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61310
IP address blocks: 88.80.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:94:9c:44:b2:03:60:f2:b9:6b:fa:71:5b:ed:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 2 06:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eafe87f91cf081bc3f31fdd39fdb7b196fac9dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:d9:e9:6d:4d:a7:02:e0:45:ba:f7:93:15:
19:22:63:ee:1c:2e:89:a9:8a:fe:f4:b5:0d:b8:61:
18:e1:10:8f:80:ff:4d:f2:fe:17:db:63:a0:c6:c3:
66:45:63:8c:3e:68:1e:71:96:18:93:37:bd:91:5f:
a8:56:b3:b7:58:6e:4a:f4:49:49:6b:04:08:8d:4c:
6a:3c:56:51:20:b0:cb:bd:c1:97:34:21:d9:fb:29:
a3:4a:50:90:70:d8:7c:ac:1f:21:6f:70:66:fd:61:
f0:e4:c3:90:18:e4:f1:f3:21:9f:ec:e8:db:2c:4b:
43:ec:8e:0f:04:e0:6b:ff:01:92:f6:f2:8e:b6:cf:
9a:71:de:35:2f:5f:31:8c:07:9d:2c:46:cd:3b:f8:
bf:17:b0:0c:28:57:8e:61:26:00:59:4b:ea:9c:b9:
93:73:77:4b:00:86:5f:86:7a:37:67:cc:5d:47:04:
ac:d7:dc:de:d4:47:2e:8c:42:0d:08:64:09:00:21:
fd:fa:9e:1a:09:cc:4b:24:b0:2a:de:6f:e1:a4:df:
6b:eb:fd:a2:1b:47:95:19:79:3c:f8:6e:f8:8d:14:
f6:1d:34:cb:e2:c1:de:28:2f:e9:10:a0:f7:58:8a:
71:9f:36:02:f4:bb:46:35:47:e6:57:19:5c:7c:20:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FE:87:F9:1C:F0:81:BC:3F:31:FD:D3:9F:DB:7B:19:6F:AC:9D:C3
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6v6H-Rzwgbw_Mf3Tn9t7GW-sncM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.138.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c5:33:5f:03:1c:d7:f0:a2:dc:dd:3b:66:ab:4e:f3:02:77:
b1:2d:9c:36:e7:65:07:88:43:b9:c0:cd:c7:03:ff:5c:4e:20:
10:60:0d:52:1a:73:e4:25:ea:fd:90:83:99:94:8a:cf:27:8c:
c7:82:00:d8:16:6d:ca:52:91:4a:f3:de:fa:3e:ac:cd:c8:eb:
58:01:c2:bb:b7:b4:dc:77:5f:16:be:71:25:fe:02:54:a2:45:
7e:0a:31:1d:2e:b4:48:11:dc:2b:dd:a8:60:2e:9d:31:4e:47:
b5:d9:0b:cc:7b:ab:36:df:91:35:a7:f6:5f:43:e0:70:72:c0:
be:1f:c3:88:68:e2:64:33:22:08:6a:ea:37:6d:bd:6f:2e:c9:
f7:2e:27:e6:f7:dd:d9:a9:43:c3:dd:a7:eb:5f:09:70:c8:1a:
0f:73:ac:bc:74:9c:50:1f:c0:65:3d:f7:24:59:c9:2a:56:f8:
94:9a:82:40:9c:80:96:3a:2d:88:5c:82:91:33:87:79:6e:84:
c8:90:80:a3:22:77:18:e7:29:d5:64:f9:33:9c:ad:20:ef:9c:
8a:d7:ba:12:cb:4a:4a:c5:5e:03:52:cc:08:c5:dd:3d:a7:b7:
95:b4:4c:73:e1:54:4f:1f:8e:ea:6d:93:c5:7e:1c:25:60:3b:
44:dd:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org