Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VrfKhffMAf4Uvkpb8ofkfZeUFEw.roa
File: VrfKhffMAf4Uvkpb8ofkfZeUFEw.roa (raw, json)
Hash identifier: zqmGRjYelZvEgqgfx0ULu1HC84g9WGPNJ1jU5jROgUk=
Subject key identifier: 56:B7:CA:85:F7:CC:01:FE:14:BE:4A:5B:F2:87:E4:7D:97:94:14:4C
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0194B722ED886B1CBF33D143F2D400C499B9
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VrfKhffMAf4Uvkpb8ofkfZeUFEw.roa
Signing time: Thu 30 Jan 2025 12:15:07 +0000
ROA not before: Thu 30 Jan 2025 12:15:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 88.80.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:22:ed:88:6b:1c:bf:33:d1:43:f2:d4:00:c4:99:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 30 12:15:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56b7ca85f7cc01fe14be4a5bf287e47d9794144c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:82:d2:ad:15:7b:8c:d3:40:9d:04:a7:c0:
6c:e9:03:d0:22:97:40:72:04:17:03:a5:c4:fb:43:
4b:e3:db:8d:bd:39:ba:f7:04:26:f4:3f:1f:aa:85:
13:ed:6b:10:dd:03:fc:fa:23:93:ed:04:fc:43:5e:
ec:b1:b5:73:7f:fe:4b:c9:0a:32:06:e9:d9:85:01:
55:bf:bd:1f:9e:18:5f:c4:5a:cf:5f:a8:e5:57:24:
2d:f8:82:f2:fe:e7:af:cf:0a:b9:80:06:ef:63:5e:
be:d0:29:d4:b4:11:35:bf:ab:89:5d:1f:ce:1f:10:
4f:22:8f:8d:07:f9:69:ea:07:b8:73:4a:b5:f3:ab:
27:c4:ff:f4:50:39:58:43:0c:f0:45:1d:05:b1:a1:
57:af:56:7b:fe:7f:83:9b:8e:26:d8:a4:ec:b7:1c:
cd:91:5f:19:5a:d6:06:e6:8c:70:9f:f9:6e:20:18:
04:9e:4a:3e:2a:ee:c8:7a:8d:2d:12:23:f2:e4:1a:
2b:bf:86:dc:47:f2:b9:c5:1a:de:9e:d3:67:52:e2:
8c:e3:5a:cc:dd:d1:50:46:14:ad:55:b2:d2:c1:d4:
c6:ce:fb:3e:bb:05:6e:4b:2f:40:e9:ea:89:d8:9b:
b8:b0:fe:8a:6a:6b:3d:ae:19:35:7c:88:12:bf:a4:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:CA:85:F7:CC:01:FE:14:BE:4A:5B:F2:87:E4:7D:97:94:14:4C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VrfKhffMAf4Uvkpb8ofkfZeUFEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d9:9a:9f:81:ca:4d:0f:af:5d:ac:f5:7e:1a:92:38:67:f9:
f3:f2:63:ea:ca:92:ee:c2:24:be:88:b9:5e:58:8a:39:4c:48:
89:ee:16:2d:63:6c:29:1f:04:de:d5:46:6a:91:ec:8b:d5:31:
0b:7f:b5:da:a7:fc:11:1d:6e:f6:4d:07:e8:67:55:95:f4:cf:
9f:fb:df:37:1b:11:1a:f3:db:5f:be:c6:57:0e:f6:d8:fb:03:
9c:97:a8:e5:e7:a0:5f:b2:8e:23:3e:90:ca:5e:5d:ba:ff:3e:
d0:25:2c:1a:14:5f:ef:71:10:86:7c:e6:fb:aa:30:7b:94:f5:
59:ff:06:06:1a:18:39:f7:76:6e:40:e7:70:5a:bb:74:65:2f:
b7:89:c4:bf:5e:7c:80:08:fd:3c:1d:82:38:11:52:be:14:8e:
71:65:8a:66:52:07:fb:e1:9b:59:e6:46:3d:89:5b:da:f0:83:
f0:4c:bb:f7:b0:19:4f:82:16:c9:b4:91:52:fe:94:8b:d4:26:
65:7f:15:9f:4e:ee:f8:a7:66:c3:6c:30:ca:9c:06:e5:1b:7d:
0e:45:54:f8:d3:5e:c4:0a:55:46:43:f0:88:59:27:fb:92:90:
bb:f7:e5:01:29:ed:5d:6c:2a:ae:e3:e5:c1:54:f9:23:4b:6e:
68:4c:e5:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZS3Iu2Iaxy/M9FD8tQAxJm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjUwMTMwMTIxNTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmI3Y2E4NWY3Y2MwMWZlMTRiZTRhNWJmMjg3ZTQ3ZDk3OTQxNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+2C0q0Ve4zTQJ0Ep8Bs6QPQIpdA
cgQXA6XE+0NL49uNvTm69wQm9D8fqoUT7WsQ3QP8+iOT7QT8Q17ssbVzf/5LyQoy
BunZhQFVv70fnhhfxFrPX6jlVyQt+ILy/uevzwq5gAbvY16+0CnUtBE1v6uJXR/O
HxBPIo+NB/lp6ge4c0q186snxP/0UDlYQwzwRR0FsaFXr1Z7/n+Dm44m2KTstxzN
kV8ZWtYG5oxwn/luIBgEnko+Ku7Ieo0tEiPy5Borv4bcR/K5xRrentNnUuKM41rM
3dFQRhStVbLSwdTGzvs+uwVuSy9A6eqJ2Ju4sP6Kams9rhk1fIgSv6Sc0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFa3yoX3zAH+FL5KW/KH5H2XlBRMMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvVnJmS2hmZk1BZjRVdmtwYjhvZmtmWmVVRkV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCNMA0G
CSqGSIb3DQEBCwUAA4IBAQAc2ZqfgcpND69drPV+GpI4Z/nz8mPqypLuwiS+iLle
WIo5TEiJ7hYtY2wpHwTe1UZqkeyL1TELf7Xap/wRHW72TQfoZ1WV9M+f+983GxEa
89tfvsZXDvbY+wOcl6jl56Bfso4jPpDKXl26/z7QJSwaFF/vcRCGfOb7qjB7lPVZ
/wYGGhg593ZuQOdwWrt0ZS+3icS/XnyACP08HYI4EVK+FI5xZYpmUgf74ZtZ5kY9
iVva8IPwTLv3sBlPghbJtJFS/pSL1CZlfxWfTu74p2bDbDDKnAblG30ORVT4017E
ClVGQ/CIWSf7kpC79+UBKe1dbCqu4+XBVPkjS25oTOUM
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:34:39 2025 by rpki-client