Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/JConEZvmF3JUeCSYCQrnihuNG2Y.roa
File: JConEZvmF3JUeCSYCQrnihuNG2Y.roa (raw, json)
Hash identifier: rzRG2REcp8kCXzihrGf6ajJTn/RVdosd8KDixLbiwnc=
Subject key identifier: 24:2A:27:11:9B:E6:17:72:54:78:24:98:09:0A:E7:8A:1B:8D:1B:66
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0185735F13C13C2240BB6FC54F29365BF336
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/JConEZvmF3JUeCSYCQrnihuNG2Y.roa
Signing time: Mon 02 Jan 2023 16:44:48 +0000
ROA not before: Mon 02 Jan 2023 16:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43063
IP address blocks: 88.80.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5f:13:c1:3c:22:40:bb:6f:c5:4f:29:36:5b:f3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 2 16:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=242a27119be6177254782498090ae78a1b8d1b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:46:cf:ce:c0:c1:06:4b:64:58:1e:db:db:57:
4f:82:00:8f:a4:1e:d1:e4:34:a3:87:c8:e6:b2:27:
a6:f5:68:dd:86:64:17:80:bb:aa:6f:39:7c:ee:16:
8d:07:87:bf:6f:0b:e4:f2:a0:6b:6e:3d:dc:98:bd:
df:6c:be:ca:a1:fa:85:1c:81:60:6f:c7:03:0b:d5:
01:d8:13:d1:be:4b:93:90:9d:84:c0:8a:fa:59:c3:
73:dc:4a:0c:ae:3d:e8:ff:e8:70:7a:d1:81:fc:14:
38:7d:4b:79:71:f6:d0:c9:92:1a:1d:48:41:ef:20:
ef:f7:07:f9:15:48:38:2a:3a:85:e9:50:0a:84:32:
b5:eb:06:aa:98:61:69:e5:41:4b:13:54:9a:83:88:
ef:13:7a:c0:db:73:33:da:b5:01:52:d0:67:00:32:
3b:de:78:f3:38:b3:1c:d0:ac:8f:71:3a:0a:2a:9a:
17:6a:de:0d:cd:d6:20:af:b8:f1:8c:02:80:55:e9:
51:93:e9:d5:60:e9:89:ba:93:af:e0:b0:d1:d3:8d:
ed:0b:39:46:e8:77:a0:96:3f:0a:f7:da:14:e7:7b:
98:74:63:eb:80:3f:0f:aa:6b:00:78:c8:e5:35:5e:
e8:bd:f4:68:15:53:d5:b5:25:92:0d:86:fb:5d:fb:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:27:11:9B:E6:17:72:54:78:24:98:09:0A:E7:8A:1B:8D:1B:66
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/JConEZvmF3JUeCSYCQrnihuNG2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.130.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e5:b3:3e:ee:e8:7d:bc:e9:e7:77:aa:6d:03:12:53:0d:4c:
8b:1b:7c:54:16:cd:6e:ae:42:17:4b:92:b5:36:ca:eb:0c:81:
e4:eb:ca:3d:17:88:eb:c9:fe:ea:2f:b9:4e:a4:68:8e:f1:9b:
41:d9:61:ca:73:bd:96:c5:9f:05:b2:70:fa:79:c5:d3:6d:75:
4f:2d:3c:2f:28:07:79:c5:03:47:81:78:8a:87:38:34:88:8e:
23:e0:0c:a3:f8:6c:a0:1d:db:df:36:c9:27:cc:08:0e:37:e4:
73:4d:3d:52:40:c8:17:24:f1:ce:b5:a4:04:8b:1e:f5:82:a6:
16:1a:80:91:d7:13:6c:ff:09:26:74:6c:a9:64:44:69:4c:61:
1a:85:c5:aa:6e:43:30:11:4a:54:d4:8b:a2:bf:7b:1f:81:1e:
07:cb:2f:9c:0f:f1:75:80:b3:4f:3a:f0:7d:25:e0:79:27:c7:
ff:79:40:c4:3f:a1:c4:43:71:47:e8:c5:04:90:e6:cf:57:d4:
8a:c0:bc:de:76:3c:e9:34:5f:33:87:c5:25:93:3d:30:4b:84:
e0:af:52:66:75:53:2c:50:15:55:ec:ce:2f:f8:bc:88:2d:8e:
2b:03:c4:6e:3b:60:ad:8c:5c:50:58:2e:fe:f4:1b:f6:cd:f0:
c9:ca:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org