Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Tj5jdcQxealuznX1XpkOYJJGyqE.roa
File: Tj5jdcQxealuznX1XpkOYJJGyqE.roa (raw, json)
Hash identifier: uRy8VX8J45WK1wg3ePh/rIPEGrTRoyTaJSqeOg1lj/I=
Subject key identifier: 4E:3E:63:75:C4:31:79:A9:6E:CE:75:F5:5E:99:0E:60:92:46:CA:A1
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018F4C4E15638FE642CE4672944A27093830
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Tj5jdcQxealuznX1XpkOYJJGyqE.roa
Signing time: Mon 06 May 2024 05:08:56 +0000
ROA not before: Mon 06 May 2024 05:08:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 88.80.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 15:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:4e:15:63:8f:e6:42:ce:46:72:94:4a:27:09:38:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: May 6 05:08:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e3e6375c43179a96ece75f55e990e609246caa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:86:ae:aa:70:4f:6c:be:12:06:6d:bc:e0:
37:26:ec:a6:df:13:7d:c2:25:97:e7:1f:6e:2c:bd:
a2:90:ca:17:2c:5d:e3:78:8c:bc:cb:21:5b:2d:9d:
d2:eb:b7:76:2f:d8:03:11:64:2b:47:7a:fd:f6:f4:
0e:36:a8:c5:76:91:75:78:15:58:28:2f:85:49:1e:
30:3a:8c:13:f5:97:37:a7:f7:18:64:97:c6:22:79:
d6:c7:7c:16:f0:3d:07:3f:4c:d7:a7:96:66:a4:8e:
14:04:fd:e5:38:b1:f5:85:b3:73:d7:e5:e1:69:e9:
80:83:a3:34:ba:b7:cc:5d:94:8e:bc:ab:60:62:3d:
92:67:df:0a:1a:ab:77:2e:5f:1c:e4:13:de:6c:43:
20:14:e3:bd:ff:17:c7:0f:72:58:8a:f1:38:72:f1:
b2:6b:9b:8e:60:36:39:d0:8c:4e:ea:9a:70:e0:5c:
a6:fa:24:ea:cf:1f:03:3a:f3:b5:7f:26:31:50:5d:
f2:6d:2f:c4:98:79:2d:08:e1:0c:5c:1c:44:fb:a5:
87:99:82:7e:7f:5b:cf:cb:ac:bf:3d:43:c4:12:d4:
d8:7f:95:3e:b5:27:b0:62:84:0b:b6:de:37:5b:2f:
f6:36:f4:77:07:02:7d:ae:30:63:a2:25:fb:9a:74:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3E:63:75:C4:31:79:A9:6E:CE:75:F5:5E:99:0E:60:92:46:CA:A1
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Tj5jdcQxealuznX1XpkOYJJGyqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.135.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1c:6c:da:e1:67:5e:26:69:bf:4c:63:74:29:98:0b:d6:ba:
84:85:ca:0e:11:35:22:b9:4d:fc:21:aa:65:d5:4f:71:8c:80:
18:0f:fe:09:0a:6d:d1:02:64:cf:1e:fa:f8:03:5a:3e:30:de:
54:4e:55:96:83:ea:7b:80:15:98:e7:62:77:37:c3:8b:06:79:
d0:e6:9d:8f:90:aa:89:5a:e2:a5:a6:2d:ca:94:92:95:09:2c:
dc:dd:2e:ee:16:aa:3a:e3:4b:70:cd:41:5b:0a:dc:8e:cd:ed:
44:19:ee:e9:d6:fb:58:cb:79:9a:69:b6:0f:96:ac:d6:87:e5:
8d:33:84:be:e5:00:2c:da:72:de:09:8b:3d:63:22:a5:6e:ef:
89:fe:f7:e6:b3:06:69:a0:93:6b:6e:11:8d:4e:cc:40:6b:f0:
51:3c:2d:5d:c8:c3:28:7a:d2:45:70:6c:f5:db:4a:1f:ee:3e:
80:66:dd:a9:cc:5a:6b:72:bd:d5:13:e4:55:91:6a:5b:9d:fc:
1f:65:4f:b6:3e:2f:11:c9:bc:a0:17:e1:8e:db:7c:f8:4e:85:
9f:c9:9b:f8:e5:05:ad:dc:ec:b9:9f:d4:43:50:5c:40:f8:16:
64:35:0e:4f:cb:bf:14:04:d0:a9:c1:3f:7c:c9:4d:92:25:e4:
09:5e:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 20:25:53 2024 by rpki-client on console-ams.rpki-client.org