Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/fAzCbC40QcWuakkq6mKkIoA9Y8w.roa
File: fAzCbC40QcWuakkq6mKkIoA9Y8w.roa (raw, json)
Hash identifier: o7p3rAe/TktfZNd5p+aEk2MCx40Ki1eALVoThC+KElo=
Subject key identifier: 7C:0C:C2:6C:2E:34:41:C5:AE:6A:49:2A:EA:62:A4:22:80:3D:63:CC
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018FB3B82C9CDE113FC5409A6CE6C854236B
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/fAzCbC40QcWuakkq6mKkIoA9Y8w.roa
Signing time: Sun 26 May 2024 07:05:42 +0000
ROA not before: Sun 26 May 2024 07:05:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.80.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 02:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:b8:2c:9c:de:11:3f:c5:40:9a:6c:e6:c8:54:23:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: May 26 07:05:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c0cc26c2e3441c5ae6a492aea62a422803d63cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:4a:50:97:77:38:bf:ee:e1:b3:81:9b:12:
0d:ef:85:4a:fe:4c:67:39:87:69:f9:19:a5:bd:31:
67:b9:97:42:00:59:67:ad:c6:08:30:f7:66:b4:36:
1c:89:7f:01:5c:d3:de:45:4f:1a:45:e5:84:a6:e3:
2e:cc:2f:e6:e6:2a:4c:cd:79:94:ec:fb:c9:ec:09:
b6:b3:f5:1f:38:24:c5:a9:a4:4e:7b:21:c1:0e:52:
fc:04:af:9f:b5:c9:f8:90:b6:e5:cc:f9:15:e6:85:
23:8c:51:2f:a8:83:4a:ab:1f:b3:bc:0d:cf:89:72:
4d:d4:95:41:53:9b:f6:a1:f2:55:30:6e:60:d1:ce:
45:7a:26:94:78:ed:02:3d:85:eb:6f:00:f2:4a:c2:
3d:24:60:6d:c0:fe:b4:bc:3e:bc:56:bf:ee:fd:f8:
fb:ff:a0:e7:69:54:c3:cc:d3:b6:48:e1:f5:71:53:
56:f8:9d:42:73:76:76:71:81:eb:9e:ee:e5:78:ff:
11:d3:1c:77:05:a0:9a:7e:4e:90:98:9b:33:e6:6b:
fc:b8:e5:11:00:d6:93:62:5f:8b:ed:ac:c5:e1:e2:
74:02:8e:31:b1:14:8b:62:b5:9e:c1:9a:a1:64:72:
d5:16:d5:ef:67:24:20:af:c0:c3:76:b9:6c:5a:e5:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0C:C2:6C:2E:34:41:C5:AE:6A:49:2A:EA:62:A4:22:80:3D:63:CC
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/fAzCbC40QcWuakkq6mKkIoA9Y8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:45:85:9a:4b:3c:cb:50:22:be:fe:bb:c5:47:fb:04:f6:50:
0b:72:81:7b:1a:bd:1c:8d:d9:76:f6:a9:b1:53:bf:0c:02:5f:
48:de:b4:3f:ee:7f:de:8a:59:fe:50:66:84:01:1c:12:fe:89:
10:77:01:4f:43:0b:58:e4:99:88:4d:4e:53:39:d0:93:1c:85:
7b:09:cc:6a:85:c4:ed:9f:44:b8:4c:43:79:2e:3e:35:bd:a0:
f2:14:95:a6:14:27:86:93:9c:bc:31:de:56:b8:25:0f:60:71:
c4:91:fc:27:9e:1d:aa:42:7f:0b:c7:91:7c:25:c3:5a:a0:4e:
38:a0:5d:39:a7:e3:4e:a3:74:7e:b7:59:0f:b1:67:61:48:7d:
b0:1d:5f:6a:b3:1b:bc:58:7f:32:66:63:5b:7d:fe:47:7d:7a:
f2:4d:44:a4:fe:1f:3f:5b:84:25:cd:2c:2a:2c:08:42:83:51:
3b:e1:9d:87:a1:c0:94:11:1a:73:5b:57:67:41:79:8d:d2:e2:
f0:4e:77:c1:d7:1f:21:77:13:17:d7:e9:56:b5:62:4e:4a:cb:
41:ff:14:70:13:4c:b4:b5:6b:50:9d:81:c7:d6:e0:08:88:ee:
5e:52:ec:0a:a9:8c:70:d0:5c:13:55:c4:7f:06:0b:82:43:1c:
11:20:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org