Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/hO12Aq2tR7fGGf0sI-OlEzIMMuQ.roa
File: hO12Aq2tR7fGGf0sI-OlEzIMMuQ.roa (raw, json)
Hash identifier: kKYmMFEzsK7tPL46/3DCUOddXs5YQLWjZd/I7BTx/4A=
Subject key identifier: 84:ED:76:02:AD:AD:47:B7:C6:19:FD:2C:23:E3:A5:13:32:0C:32:E4
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018DC6C5108D1D3D4D446513A3C58505973E
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/hO12Aq2tR7fGGf0sI-OlEzIMMuQ.roa
Signing time: Tue 20 Feb 2024 13:47:00 +0000
ROA not before: Tue 20 Feb 2024 13:47:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206980
IP address blocks: 88.80.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 10:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:c5:10:8d:1d:3d:4d:44:65:13:a3:c5:85:05:97:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 20 13:47:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84ed7602adad47b7c619fd2c23e3a513320c32e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:10:2e:76:3e:32:8c:70:e2:4f:a3:fd:1d:
76:32:ee:8e:7d:6e:7a:f5:e8:63:47:ff:85:57:5c:
ea:40:02:d7:34:c3:17:7a:5e:89:7d:8b:58:5a:3b:
03:9d:7c:fb:20:87:e0:28:9e:65:16:54:e7:03:35:
ec:19:32:4e:ac:85:60:ec:44:66:99:f0:7b:a7:ae:
47:6a:fd:ac:22:a8:88:d7:87:a5:08:b5:96:6e:3f:
e4:9b:bf:87:15:a8:43:bc:f6:df:15:0d:24:30:4a:
0c:23:56:a9:c3:ce:2a:54:40:51:fb:6d:aa:e0:d0:
ec:1c:27:f7:d1:67:86:a7:5e:e6:c4:3e:0e:4c:8e:
92:90:28:33:38:af:02:91:24:e8:05:28:20:be:69:
a6:47:d4:37:8b:af:c0:b1:9d:c4:3d:1d:7e:32:fd:
c7:db:23:1a:34:14:67:74:20:2c:cd:3d:ea:de:18:
a6:4e:0c:c7:32:09:f2:24:cf:da:74:c2:f4:bd:6a:
d5:68:df:fc:23:2e:ee:f5:b9:9d:72:28:76:ef:4e:
b9:0b:83:d9:72:e0:8a:92:65:70:5d:d2:61:d1:a1:
fb:1d:1a:65:4f:6e:bd:fb:0f:0e:c0:63:aa:a8:30:
90:5b:30:ed:8f:ad:d4:c4:a7:fe:65:75:7c:fd:70:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:ED:76:02:AD:AD:47:B7:C6:19:FD:2C:23:E3:A5:13:32:0C:32:E4
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/hO12Aq2tR7fGGf0sI-OlEzIMMuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
27:22:bd:77:8d:3b:b4:8e:9f:1c:70:f8:3e:a2:5c:c9:1b:6b:
e6:f6:c9:fe:45:f5:f9:a3:26:c5:85:e1:a6:75:e4:66:1b:ad:
29:9a:42:27:45:b6:f8:2d:97:da:55:86:e6:23:72:88:06:9a:
92:39:9f:e6:61:0c:c4:83:dd:14:1f:76:45:ed:05:1b:33:de:
8d:63:f0:bc:ba:66:55:eb:45:f4:b9:af:7a:e9:0a:44:d1:0b:
39:a1:2f:66:2f:28:72:56:73:a0:f8:c3:fb:a8:94:e9:1e:d5:
07:ac:aa:e0:23:0d:19:2d:7d:26:11:c2:09:36:bd:cd:b1:db:
c7:88:7b:d2:32:0e:f2:99:ec:e3:71:48:2f:2b:a7:e1:8e:84:
ac:0f:d6:a1:8e:36:05:ef:db:60:2a:43:f5:ce:dc:11:1f:b7:
8c:91:c7:e0:18:a5:5a:1b:24:37:7f:e9:8b:77:a1:a9:f1:01:
14:d8:1d:70:3c:ae:b5:e3:47:75:a3:5d:4e:a7:15:32:88:10:
a7:89:b8:94:50:ab:e7:cf:eb:be:d5:b9:15:0e:0f:7e:64:51:
71:12:2e:18:c7:91:f2:2c:01:c4:fc:b4:6c:f9:42:da:0a:f8:
82:1e:68:08:e6:af:ed:ee:27:a5:3c:61:a5:f5:9d:a4:8d:98:
e5:b3:41:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 13:17:26 2024 by rpki-client on console-fra.rpki-client.org