Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/QtdVJrs7Sd1DL_Sh8w6IwBQC1FM.roa
File: QtdVJrs7Sd1DL_Sh8w6IwBQC1FM.roa (raw, json)
Hash identifier: RaTzPYVavuSRYMIyuoL2j1N/TjeBl1CZOuvPqD70WGs=
Subject key identifier: 42:D7:55:26:BB:3B:49:DD:43:2F:F4:A1:F3:0E:88:C0:14:02:D4:53
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01904EBC7EE54A7C9565E542509B0BE87892
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/QtdVJrs7Sd1DL_Sh8w6IwBQC1FM.roa
Signing time: Tue 25 Jun 2024 09:31:34 +0000
ROA not before: Tue 25 Jun 2024 09:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.80.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 15:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:bc:7e:e5:4a:7c:95:65:e5:42:50:9b:0b:e8:78:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 25 09:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42d75526bb3b49dd432ff4a1f30e88c01402d453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:b7:35:8f:53:f1:ff:07:b0:18:bf:8d:ba:
1e:a8:c7:fc:40:1e:fa:df:ec:37:bd:85:8c:fd:98:
0c:3b:4b:ac:8e:4a:2c:d6:6a:be:c8:8f:84:9c:6b:
e2:b0:f2:80:cc:e5:6c:2d:ef:74:34:df:86:ab:98:
e0:6e:2a:77:c9:1e:bc:2f:ff:b4:51:15:8b:e9:c1:
b5:56:5b:2e:ee:b1:ee:36:a4:e4:88:07:b3:23:09:
50:41:be:2b:23:32:e6:1a:f1:c5:37:54:15:a9:0a:
38:c1:74:6b:2b:17:5c:05:33:c7:10:a3:81:18:67:
17:ff:a9:0b:be:71:65:11:10:18:b6:2b:8b:60:0f:
45:a1:13:b4:6f:c0:89:b5:90:fd:fe:22:10:0b:89:
c5:02:b5:79:02:f0:38:ea:a1:51:e7:99:a5:cd:95:
18:68:7b:e9:57:99:86:4b:88:0f:3f:45:33:70:eb:
ef:0c:86:83:b0:cf:4a:e9:30:70:03:fb:fc:29:36:
fb:ac:be:49:5a:c1:2f:06:18:33:2d:53:dd:93:aa:
57:1f:93:8a:f5:94:e8:75:a5:52:b1:36:86:43:b4:
19:90:2b:e6:8f:1f:87:ce:d1:62:99:fc:13:92:aa:
a9:07:b8:78:78:12:ff:96:6c:a3:5f:43:e5:c9:ba:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:55:26:BB:3B:49:DD:43:2F:F4:A1:F3:0E:88:C0:14:02:D4:53
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/QtdVJrs7Sd1DL_Sh8w6IwBQC1FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:80:df:fd:c5:7e:61:67:61:12:7a:f0:53:66:19:9a:53:66:
f0:28:71:80:aa:73:6c:81:28:6a:dc:1d:34:fd:8a:00:d6:53:
2b:08:94:64:29:eb:5f:d4:d5:c9:a3:c7:4e:f9:5d:20:c7:75:
c6:78:bd:3b:e2:0a:51:a0:bb:63:72:5a:1a:7e:17:c7:a6:00:
8b:41:6c:7a:9d:e3:db:c8:72:00:e7:17:77:91:c9:63:99:73:
e7:71:1f:bf:97:1e:f5:25:50:1c:20:10:02:47:56:a3:50:e2:
7d:e2:95:a2:df:ab:ac:ad:d9:a6:1c:20:8d:b6:24:cf:6b:4e:
23:30:b8:b3:c7:5f:66:83:7c:ef:ad:ca:a6:37:c0:a5:50:4f:
4f:d3:10:19:28:d8:a7:35:af:0f:67:05:b1:40:1c:86:99:a0:
7c:bc:7e:29:1a:43:25:82:39:16:b3:ed:2e:7e:9d:7a:50:46:
b6:5b:a9:65:4c:d7:db:63:e8:13:67:09:5f:4d:29:a4:60:04:
c5:60:2b:0a:83:c4:5e:46:d9:32:2c:1d:e8:5e:15:2d:78:c2:
88:9d:df:b2:df:7f:8f:c6:28:d7:9d:28:3f:cc:94:2e:df:d6:
91:4c:c1:a8:37:10:05:92:17:a8:d5:3c:80:e8:3d:e3:11:a0:
11:c3:54:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 20:25:53 2024 by rpki-client on console-ams.rpki-client.org