Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/_m3CnN1pxSnRqssjn8Qy12WhdF0.roa
File: _m3CnN1pxSnRqssjn8Qy12WhdF0.roa (raw, json)
Hash identifier: RI5tEKxxBwE5H1NnNGmk0/8HH7Sd+8P2USQqi+PbAq8=
Subject key identifier: FE:6D:C2:9C:DD:69:C5:29:D1:AA:CB:23:9F:C4:32:D7:65:A1:74:5D
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018D0BD9D1CCB5D205A10423F46627C64788
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/_m3CnN1pxSnRqssjn8Qy12WhdF0.roa
Signing time: Mon 15 Jan 2024 06:40:40 +0000
ROA not before: Mon 15 Jan 2024 06:40:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.80.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 06:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0b:d9:d1:cc:b5:d2:05:a1:04:23:f4:66:27:c6:47:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 15 06:40:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe6dc29cdd69c529d1aacb239fc432d765a1745d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:2a:3e:94:58:f1:93:52:4a:dd:a0:4b:26:
25:4a:fb:d2:75:22:18:ae:dc:15:b5:43:f0:e8:a5:
28:31:aa:f7:b5:0e:ce:05:2e:ea:0c:bf:f6:91:a8:
fe:32:58:b4:17:a9:c8:05:84:b6:6c:93:28:ad:8d:
63:fa:d1:c1:ba:4d:89:48:b9:f4:72:eb:04:8a:1d:
4e:9c:0f:f7:60:94:c5:28:6c:4e:75:c1:dc:7f:d3:
5b:34:3e:74:07:bf:2f:0c:fa:2c:7a:79:17:e7:46:
97:94:01:db:e9:b0:bc:7a:27:50:e5:75:92:a1:01:
31:ca:f2:65:46:84:68:4e:fe:cc:dc:75:20:a2:37:
19:4a:22:6e:cb:84:9c:5e:1a:ab:a0:e7:a4:6f:e2:
6e:9e:87:1f:d5:e1:b4:91:06:bf:bc:4c:15:b8:02:
1a:e2:47:9e:b3:2e:9b:aa:a4:50:13:95:5c:0c:f0:
b8:64:59:33:e9:b8:d5:d1:e4:82:58:5b:b3:ab:7b:
0c:0a:ac:60:e2:51:2e:26:40:15:53:2a:1d:41:7e:
1c:a4:eb:ed:af:29:af:2b:66:36:36:a1:68:da:8b:
37:c2:40:a4:6e:40:c3:29:3a:96:e0:af:46:19:b7:
f4:26:65:10:bb:7c:1e:d3:25:34:05:4c:90:72:f7:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:C2:9C:DD:69:C5:29:D1:AA:CB:23:9F:C4:32:D7:65:A1:74:5D
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/_m3CnN1pxSnRqssjn8Qy12WhdF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.136.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5c:5b:b6:49:67:84:59:19:eb:2c:22:f1:ac:69:1d:03:a3:
0f:90:b6:72:37:41:bc:49:4c:e8:f9:db:68:26:6c:fb:50:b2:
91:4c:3e:d6:1c:dd:7e:fe:e2:bd:f1:bb:86:d5:c1:53:c8:96:
45:0d:db:45:fa:73:27:57:19:e6:12:f6:31:3e:f2:44:e2:2f:
d1:cb:c0:42:b2:49:c8:14:6e:62:58:c3:44:45:13:8a:2b:72:
11:4d:fe:a4:d5:13:3c:17:30:7a:ec:2a:51:5f:30:11:bf:af:
a2:31:74:82:08:95:18:f0:87:70:3d:b4:f8:c5:85:b4:1f:0a:
86:da:8d:99:b0:ab:ef:8b:9e:cb:a8:eb:1b:26:fc:c0:d2:9d:
0a:b6:33:52:45:50:4e:be:92:a6:6e:73:57:4b:03:26:ee:94:
7c:ed:1c:c3:d7:f3:3d:ce:6b:5c:98:d9:f6:47:8d:c1:69:95:
18:cf:6a:0f:1f:20:42:a4:65:89:66:a0:60:80:cb:2a:46:63:
ab:82:5e:c8:04:2a:86:22:fd:f8:e0:57:03:f7:24:4a:68:73:
68:ee:69:41:74:c2:59:97:1a:f9:ef:d9:77:34:63:88:c5:35:
9e:7e:4b:bf:c9:98:55:ef:24:a8:cc:59:8e:17:80:6b:43:3a:
30:71:8d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 09:55:53 2024 by rpki-client on console-ams.rpki-client.org