Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/PDqoFAjfnax_K-FV-OIUFHbkSjE.roa
File: PDqoFAjfnax_K-FV-OIUFHbkSjE.roa (raw, json)
Hash identifier: v8rRUxaj0TxU0OOlX/fNis1kBo4I4q9o2wJDynQ498Q=
Subject key identifier: 3C:3A:A8:14:08:DF:9D:AC:7F:2B:E1:55:F8:E2:14:14:76:E4:4A:31
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01904FEE484CC727E190D07DDAAD86774E6D
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/PDqoFAjfnax_K-FV-OIUFHbkSjE.roa
Signing time: Tue 25 Jun 2024 15:05:34 +0000
ROA not before: Tue 25 Jun 2024 15:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 88.80.135.0/24 maxlen: 24
88.80.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jul 2024 13:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:ee:48:4c:c7:27:e1:90:d0:7d:da:ad:86:77:4e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 25 15:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c3aa81408df9dac7f2be155f8e2141476e44a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:e4:7e:5b:60:1a:5e:0c:c0:a6:8c:09:d8:
62:2b:35:b5:68:07:1c:af:e1:fe:88:25:0e:e6:a8:
93:c3:6d:d8:d5:d1:fb:07:80:83:59:bf:30:b2:8a:
eb:11:f4:8b:90:12:f2:fd:5d:bb:3b:85:9c:30:59:
72:9f:1f:e2:ed:e3:21:24:41:7a:e1:2f:50:af:a5:
29:1b:9b:ec:d9:ed:9b:69:3b:9b:b4:ef:68:a6:31:
f6:38:a4:88:37:7f:1b:8b:6a:d8:2a:0d:21:f1:fc:
fd:f0:07:a7:12:07:af:94:7b:6f:f5:8c:42:09:00:
ad:7b:40:bb:9d:b7:04:3d:75:af:8b:2c:52:0c:78:
ec:53:4d:8c:20:19:73:ee:3e:8c:e5:3f:58:8d:4c:
ec:df:40:98:da:56:4e:32:0a:d6:37:ab:69:81:ef:
3a:19:91:b1:81:2b:f4:e7:1b:82:0e:25:18:8f:45:
57:c5:17:68:e0:e9:1d:bd:4d:de:85:26:c3:ee:2b:
a4:1c:c0:11:1b:39:8d:b8:00:04:e8:b8:16:29:28:
9b:97:5e:84:aa:63:72:5d:b1:05:0a:b3:e0:8c:80:
53:39:d2:9c:1d:af:20:bf:88:0b:25:83:fa:f8:2c:
4c:e5:0f:ce:ae:94:79:bd:32:0b:e7:56:60:1c:8b:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:A8:14:08:DF:9D:AC:7F:2B:E1:55:F8:E2:14:14:76:E4:4A:31
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/PDqoFAjfnax_K-FV-OIUFHbkSjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.135.0/24
88.80.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b0:d4:89:9f:87:f5:35:77:2b:9f:1a:67:8f:de:81:b8:a7:
f8:77:c6:37:e4:35:5e:e7:a0:a3:ea:48:f7:6f:44:70:da:4e:
57:99:88:f9:b2:e2:fd:80:5c:0e:77:ef:20:53:e2:46:9b:3a:
b8:78:e2:48:f7:c7:61:e7:53:c1:ee:87:50:c8:9a:d2:11:11:
ef:93:01:05:81:b3:96:8c:ef:d6:79:d8:11:3b:77:38:e2:ef:
03:ba:67:f5:55:7e:cc:82:b8:88:d9:60:54:b0:a4:4e:b2:74:
97:fa:e6:08:0d:37:55:7f:d6:29:11:ca:b1:a3:68:09:7d:87:
9b:3e:4c:1b:4a:e6:ac:a9:7b:09:4e:54:cf:1f:cc:78:9c:34:
16:4b:a6:14:78:c6:4e:a2:2f:73:34:ce:e8:34:cf:29:0c:0d:
f4:db:41:d7:9d:ad:2d:88:73:7b:6c:f9:49:09:b0:56:ab:fd:
cf:fe:81:df:7b:f2:36:ab:77:8c:af:09:01:d2:88:08:cb:bb:
66:94:38:03:50:7b:5a:92:cf:ba:57:ef:bd:64:40:d5:75:b8:
07:4b:b0:a0:eb:45:0e:c9:9c:f1:4b:72:a2:b2:43:9b:81:93:
a1:db:c3:14:12:54:4e:ea:5d:eb:40:4a:25:3f:21:66:3f:f7:
f8:f0:69:f8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZBP7khMxyfhkNB92q2Gd05tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwNjI1MTUwNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzNhYTgxNDA4ZGY5ZGFjN2YyYmUxNTVmOGUyMTQxNDc2ZTQ0YTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw7kfltgGl4MwKaMCdhiKzW1aAcc
r+H+iCUO5qiTw23Y1dH7B4CDWb8wsorrEfSLkBLy/V27O4WcMFlynx/i7eMhJEF6
4S9Qr6UpG5vs2e2baTubtO9opjH2OKSIN38bi2rYKg0h8fz98AenEgevlHtv9YxC
CQCte0C7nbcEPXWviyxSDHjsU02MIBlz7j6M5T9YjUzs30CY2lZOMgrWN6tpge86
GZGxgSv05xuCDiUYj0VXxRdo4OkdvU3ehSbD7iukHMARGzmNuAAE6LgWKSibl16E
qmNyXbEFCrPgjIBTOdKcHa8gv4gLJYP6+CxM5Q/OrpR5vTIL51ZgHIvrYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDw6qBQI352sfyvhVfjiFBR25EoxMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvUERxb0ZBamZuYXhfSy1GVi1PSVVGSGJrU2pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWFCHAwQA
WFCLMA0GCSqGSIb3DQEBCwUAA4IBAQB9sNSJn4f1NXcrnxpnj96BuKf4d8Y35DVe
56Cj6kj3b0Rw2k5XmYj5suL9gFwOd+8gU+JGmzq4eOJI98dh51PB7odQyJrSERHv
kwEFgbOWjO/WedgRO3c44u8Dumf1VX7MgriI2WBUsKROsnSX+uYIDTdVf9YpEcqx
o2gJfYebPkwbSuasqXsJTlTPH8x4nDQWS6YUeMZOoi9zNM7oNM8pDA3020HXna0t
iHN7bPlJCbBWq/3P/oHfe/I2q3eMrwkB0ogIy7tmlDgDUHtaks+6V++9ZEDVdbgH
S7Cg60UOyZzxS3KiskObgZOh28MUElRO6l3rQEolPyFmP/f48Gn4
Generated at Sat Jul 6 14:04:44 2024 by rpki-client on console-fra.rpki-client.org