Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/inMT60HHnn7hZAPB8mDbf2icays.roa
File: inMT60HHnn7hZAPB8mDbf2icays.roa (raw, json)
Hash identifier: L3m+jpazhFtBV/vHCbccQ5QzMzEldVBovzcwkLTkdUo=
Subject key identifier: 8A:73:13:EB:41:C7:9E:7E:E1:64:03:C1:F2:60:DB:7F:68:9C:6B:2B
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018FE9AC815FBA315ACF2A86AF60BE3DD6A8
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/inMT60HHnn7hZAPB8mDbf2icays.roa
Signing time: Wed 05 Jun 2024 18:32:27 +0000
ROA not before: Wed 05 Jun 2024 18:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 88.80.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 10:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e9:ac:81:5f:ba:31:5a:cf:2a:86:af:60:be:3d:d6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 5 18:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a7313eb41c79e7ee16403c1f260db7f689c6b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:99:64:86:1b:8a:e4:2a:f2:56:3c:35:b6:
d4:1b:1e:1b:9a:bb:33:62:91:ae:8f:c2:1a:c0:11:
16:3a:79:73:33:61:90:51:09:75:92:35:0c:33:37:
35:92:a0:38:52:24:ce:7e:5d:5e:c9:a2:bb:43:c8:
6f:54:14:71:95:b5:19:ae:32:2d:91:5f:8d:c6:b3:
02:b9:c7:86:3e:0b:75:ec:fc:03:a1:5b:70:b3:aa:
41:dd:c2:f0:3e:83:c4:47:ef:c1:69:6f:cf:f5:5d:
51:db:3e:44:f9:d9:63:4b:be:85:69:38:77:ee:11:
57:13:56:6e:84:06:a3:f2:4e:0a:78:02:6d:2b:7b:
c8:3a:50:39:e4:4c:65:1a:7b:68:80:e1:e4:8a:f3:
e7:bb:3f:35:bc:16:c2:fd:3e:20:e8:0b:b8:c2:3b:
1b:b6:84:e9:89:6c:f6:49:82:33:9a:22:2e:19:97:
6d:16:19:33:08:f4:a8:f3:89:1c:b5:49:a1:a0:b3:
c9:9e:87:04:88:da:f7:ab:2e:d9:da:e6:69:6b:26:
53:d6:c8:1e:ac:af:c3:2e:9a:c8:2c:9d:56:e7:91:
d1:f7:82:cd:79:b8:f1:f5:c2:34:77:42:ab:60:c2:
39:64:a8:b4:07:2c:70:e4:a1:d0:95:55:33:e8:bc:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:73:13:EB:41:C7:9E:7E:E1:64:03:C1:F2:60:DB:7F:68:9C:6B:2B
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/inMT60HHnn7hZAPB8mDbf2icays.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.134.0/24
Signature Algorithm: sha256WithRSAEncryption
34:56:d3:a7:19:5b:d2:8d:c8:c0:fc:81:45:e0:46:ee:87:fc:
29:cd:88:c6:f6:9a:52:ba:45:ed:c0:03:d0:2c:d7:75:dd:9e:
41:ca:43:87:eb:fa:11:f4:2f:f6:e4:6c:9c:a9:e2:06:9f:4b:
6e:b2:71:96:7b:24:58:e4:ab:30:9c:2f:9c:bd:74:6d:0c:ac:
39:b7:88:80:59:58:82:a4:38:6f:5a:a3:92:93:bc:85:06:f2:
03:be:c3:13:93:3a:d9:bf:7e:13:b3:ad:e0:87:a9:eb:b3:90:
a9:cd:91:22:76:09:ba:61:52:0a:ae:b1:67:24:b0:86:a7:75:
48:fb:da:7d:d0:d7:18:22:56:d0:8a:d7:bd:78:7b:8b:f0:59:
5b:cc:e7:e1:7b:1b:1d:d6:21:78:fa:9e:cf:26:6f:99:a8:81:
88:20:a8:b6:ef:3a:9b:d1:c3:29:88:a0:e2:84:07:4c:04:18:
d0:a4:d6:66:43:3d:7b:31:24:cd:53:76:88:7d:5c:32:f2:ea:
9e:6e:8e:65:43:7b:2f:9c:af:8e:80:f2:ba:93:dd:fc:b3:97:
84:f3:de:71:77:ef:33:a1:83:07:1d:d8:1e:7e:e8:fd:64:41:
40:ad:54:05:c0:a4:36:08:9b:09:6c:9a:b9:9f:2e:18:ca:32:
81:f2:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:56:00 2024 by rpki-client on console-ams.rpki-client.org