Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/IJ8BThaPVYhBBrZWSVbcdFfXaLM.roa
File: IJ8BThaPVYhBBrZWSVbcdFfXaLM.roa (raw, json)
Hash identifier: YY9IG/UJSxGe6isdhp6biAhSi45pVx6r3SkZC/MKZ4g=
Subject key identifier: 20:9F:01:4E:16:8F:55:88:41:06:B6:56:49:56:DC:74:57:D7:68:B3
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018D45D62A36F0EA457E61FC5E61042374E5
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/IJ8BThaPVYhBBrZWSVbcdFfXaLM.roa
Signing time: Fri 26 Jan 2024 12:54:39 +0000
ROA not before: Fri 26 Jan 2024 12:54:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210972
IP address blocks: 88.80.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 07:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:d6:2a:36:f0:ea:45:7e:61:fc:5e:61:04:23:74:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 26 12:54:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=209f014e168f55884106b6564956dc7457d768b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:c5:1c:8e:1e:90:72:cd:fe:ba:cd:79:e0:
36:9a:90:c4:0e:66:e3:3d:f4:27:6b:72:5f:d4:11:
b3:b9:cd:98:2c:1b:9e:81:85:b8:b0:94:33:c7:bc:
3d:95:18:f4:5f:ea:c0:dc:62:c7:48:a0:d2:11:28:
d4:61:d2:92:03:41:10:68:7e:ad:de:e1:ef:c1:cd:
1e:bc:36:e0:10:b7:60:cc:b5:7f:fc:9d:78:9e:81:
38:a6:ff:56:c6:e4:39:af:2e:61:48:bf:2e:68:89:
6a:64:a0:96:92:e2:9b:1b:70:da:22:92:22:bc:b8:
69:c6:5b:0e:25:7b:f6:c7:df:54:4f:c1:d5:0e:2b:
d2:45:26:fb:19:b9:29:53:11:4d:d8:ab:7f:b0:cb:
33:d6:39:41:c4:bc:c0:c4:40:30:64:6d:e3:18:62:
37:fd:7f:ab:5c:73:32:74:83:b2:57:5e:d3:98:8e:
cb:0c:bc:34:ae:c3:97:7a:43:d4:bf:01:6d:88:aa:
85:0e:6e:20:69:ea:a6:2c:b9:9f:cb:98:e3:19:57:
c3:fe:d6:b7:c4:3d:cb:00:6a:24:76:c6:a0:bd:11:
2d:e6:10:ed:3b:00:36:50:bc:45:01:0c:d3:16:71:
6a:25:74:0e:b2:eb:49:73:c1:2b:cf:c9:2c:a6:5b:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:01:4E:16:8F:55:88:41:06:B6:56:49:56:DC:74:57:D7:68:B3
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/IJ8BThaPVYhBBrZWSVbcdFfXaLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.139.0/24
Signature Algorithm: sha256WithRSAEncryption
53:5c:1b:80:47:b4:ee:9b:68:e7:69:e3:59:4e:f0:1f:7d:05:
cc:37:e1:84:41:9f:97:91:16:d3:88:19:01:fd:92:26:be:73:
21:1d:d0:7d:fb:67:0f:61:75:da:69:2c:1f:d5:74:6e:71:dd:
e5:45:f0:25:33:c0:61:be:ae:27:76:b2:f6:c7:7e:8b:6a:d4:
3e:48:97:1d:04:b7:e3:f0:3d:b5:a4:60:4d:61:b1:d0:7f:d9:
8f:01:ed:d6:9c:48:83:f2:f5:1a:97:72:8c:24:09:49:f8:f2:
f9:7e:a1:a8:f2:5b:17:5f:f4:44:58:6b:41:d0:90:73:64:83:
62:27:20:5f:68:fb:5f:40:52:5c:fa:5d:30:b4:40:01:c7:f4:
83:bd:5b:ba:ac:e6:86:69:9d:71:f1:f0:7c:ba:69:7e:5e:2d:
31:82:e0:c5:e8:a3:52:9f:88:c1:a9:d1:1a:bf:32:5d:f0:8b:
e8:2b:45:e5:02:65:c3:1f:0d:a3:78:3d:9f:c8:0f:02:90:d6:
1c:02:8f:4f:66:d6:b5:d1:05:bb:53:7a:da:c6:d9:26:cd:5c:
09:73:9f:aa:b7:0e:b9:44:e9:d6:3f:72:24:bd:1f:8b:25:bf:
2a:ed:9c:94:ab:32:9f:73:66:05:6f:fd:28:63:aa:b3:2a:5f:
43:70:28:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1F1io28OpFfmH8XmEEI3TlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwMTI2MTI1NDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDlmMDE0ZTE2OGY1NTg4NDEwNmI2NTY0OTU2ZGM3NDU3ZDc2OGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOjFHI4ekHLN/rrNeeA2mpDEDmbj
PfQna3Jf1BGzuc2YLBuegYW4sJQzx7w9lRj0X+rA3GLHSKDSESjUYdKSA0EQaH6t
3uHvwc0evDbgELdgzLV//J14noE4pv9WxuQ5ry5hSL8uaIlqZKCWkuKbG3DaIpIi
vLhpxlsOJXv2x99UT8HVDivSRSb7GbkpUxFN2Kt/sMsz1jlBxLzAxEAwZG3jGGI3
/X+rXHMydIOyV17TmI7LDLw0rsOXekPUvwFtiKqFDm4gaeqmLLmfy5jjGVfD/ta3
xD3LAGokdsagvREt5hDtOwA2ULxFAQzTFnFqJXQOsutJc8Erz8kspltWFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCfAU4Wj1WIQQa2VklW3HRX12izMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvSUo4QlRoYVBWWWhCQnJaV1NWYmNkRmZYYUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCLMA0G
CSqGSIb3DQEBCwUAA4IBAQBTXBuAR7Tum2jnaeNZTvAffQXMN+GEQZ+XkRbTiBkB
/ZImvnMhHdB9+2cPYXXaaSwf1XRucd3lRfAlM8Bhvq4ndrL2x36LatQ+SJcdBLfj
8D21pGBNYbHQf9mPAe3WnEiD8vUal3KMJAlJ+PL5fqGo8lsXX/REWGtB0JBzZINi
JyBfaPtfQFJc+l0wtEABx/SDvVu6rOaGaZ1x8fB8uml+Xi0xguDF6KNSn4jBqdEa
vzJd8IvoK0XlAmXDHw2jeD2fyA8CkNYcAo9PZta10QW7U3raxtkmzVwJc5+qtw65
ROnWP3IkvR+LJb8q7ZyUqzKfc2YFb/0oY6qzKl9DcCiQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org