Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/en0ov-GybQ_HOl05kGMkFMAP4EY.roa
File: en0ov-GybQ_HOl05kGMkFMAP4EY.roa (raw, json)
Hash identifier: BMDeOBQc3uYquoKmFDyxRnd6bpra+YcAmNiF/dXzw6s=
Subject key identifier: 7A:7D:28:BF:E1:B2:6D:0F:C7:3A:5D:39:90:63:24:14:C0:0F:E0:46
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0192CCE02ECC7D56B302F47ECE0E876BE847
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/en0ov-GybQ_HOl05kGMkFMAP4EY.roa
Signing time: Sun 27 Oct 2024 07:28:16 +0000
ROA not before: Sun 27 Oct 2024 07:28:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.80.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 11:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cc:e0:2e:cc:7d:56:b3:02:f4:7e:ce:0e:87:6b:e8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Oct 27 07:28:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a7d28bfe1b26d0fc73a5d3990632414c00fe046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:84:5a:5c:87:22:dc:dc:62:08:b8:d2:76:
3c:07:ff:1d:57:c5:27:95:26:ac:9e:25:79:dd:6a:
a5:13:1e:73:bc:a4:bf:0e:0e:e2:c1:7f:95:23:0f:
a1:c0:65:49:67:50:ca:53:64:4d:de:b4:28:af:4b:
19:1b:61:b9:d0:6e:b0:0c:f7:77:d5:0a:ee:63:96:
da:98:a3:d3:da:a2:48:f7:6a:6d:aa:a4:2a:8d:25:
1e:8f:32:e2:94:6b:81:4b:40:43:c5:5e:05:aa:f3:
f7:5b:c3:b1:a3:95:71:09:68:5c:9f:91:32:bb:53:
07:93:fd:c2:eb:10:a4:98:d4:38:49:a3:22:5e:77:
b9:df:44:6f:2f:58:be:9c:76:35:ff:e9:c7:06:1e:
2b:68:b8:22:58:13:12:79:fc:8d:cb:cb:9e:a6:24:
06:ba:5e:77:e2:62:99:7c:20:21:df:90:af:c8:7c:
4d:41:5a:ef:58:14:b5:67:dc:21:c5:21:af:6a:21:
6e:19:7b:3b:12:6f:98:0f:66:41:89:d2:7c:16:fd:
c1:49:99:60:3a:3d:d3:4e:1e:51:59:74:6f:2d:e2:
33:81:3c:c0:40:ec:0b:2e:99:4d:df:68:e8:7e:18:
07:ef:7f:9b:c7:2c:dd:1b:a4:dc:15:05:4c:13:fd:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:28:BF:E1:B2:6D:0F:C7:3A:5D:39:90:63:24:14:C0:0F:E0:46
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/en0ov-GybQ_HOl05kGMkFMAP4EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.139.0/24
Signature Algorithm: sha256WithRSAEncryption
35:78:1e:cc:a6:7e:20:fa:1e:e6:09:2c:2d:be:1e:cb:7f:bd:
7a:7e:31:86:7e:51:56:f4:f6:52:9f:c6:9d:e9:40:c7:fc:3a:
9c:29:66:1b:c2:42:b9:d0:91:13:b3:a0:2d:79:c3:cd:44:69:
f0:a8:4e:99:69:2b:89:0a:e2:e3:59:04:a0:81:f1:28:5d:2b:
c8:0f:0a:42:1f:af:88:82:08:c9:1a:97:fe:be:15:5d:c0:55:
63:9e:a0:b8:73:5f:9c:e9:6e:32:e6:eb:4a:ac:0c:ab:64:1d:
ad:af:e1:d3:7b:b9:b9:86:97:59:7f:97:9d:46:c8:e8:ce:dc:
f4:ea:e2:7f:15:f2:4b:5c:bb:a8:d1:b9:8c:56:22:39:ce:61:
1f:cb:c0:f2:47:4f:cb:70:47:ce:e8:ae:9a:05:76:0d:bb:e8:
06:42:26:0d:fe:48:c5:fa:0a:9f:79:12:e8:3e:b2:59:2b:b9:
d7:c1:31:00:18:2a:6f:9c:38:1e:a4:10:89:d0:50:29:58:05:
1d:99:af:6f:a4:29:ea:55:0b:f4:82:1a:65:c7:72:7a:39:f9:
4d:9b:33:2a:78:74:76:c2:fe:e5:06:ed:46:ce:3d:1b:f8:81:
82:72:a2:e5:e5:f2:99:5d:52:8c:e3:37:ac:09:91:58:cb:db:
af:f6:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 14:33:54 2024 by rpki-client on console-ams.rpki-client.org