Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/wA-cSIb_PeJNN7CqQfaFCDQalS0.roa
File: wA-cSIb_PeJNN7CqQfaFCDQalS0.roa (raw, json)
Hash identifier: SdTd97+FBBMHqZo+zUHQ+hSlXOeGLsYkkmyiUWwXSNY=
Subject key identifier: C0:0F:9C:48:86:FF:3D:E2:4D:37:B0:AA:41:F6:85:08:34:1A:95:2D
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0185735F14324DA34D1898092EDF87EB4975
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/wA-cSIb_PeJNN7CqQfaFCDQalS0.roa
Signing time: Mon 02 Jan 2023 16:44:48 +0000
ROA not before: Mon 02 Jan 2023 16:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47226
IP address blocks: 88.80.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5f:14:32:4d:a3:4d:18:98:09:2e:df:87:eb:49:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 2 16:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c00f9c4886ff3de24d37b0aa41f68508341a952d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:ad:a8:60:22:87:0e:56:15:a4:06:59:65:
18:f4:f2:25:6b:8d:18:88:d7:ed:4d:e4:56:64:6a:
ed:4e:ea:c1:c4:7a:ec:c2:68:4e:c8:fc:12:a1:4f:
89:b9:33:33:3b:1a:6f:cd:57:44:d1:82:9d:c1:89:
1f:85:c9:db:4c:fc:6c:7d:5a:14:19:da:ed:a0:38:
7e:c1:c1:2b:e5:cf:6a:ba:48:6a:ac:93:01:40:df:
34:e5:e0:b0:78:f3:fa:e6:eb:aa:d0:ea:2d:b4:00:
83:24:a9:09:f2:32:9d:e3:9c:e1:bb:d6:c3:a8:ad:
bb:a8:68:82:1a:de:23:3e:da:78:46:69:be:f8:cf:
82:04:2b:50:0f:03:f3:eb:23:1e:5e:99:72:15:fd:
f7:9f:b8:3c:fd:79:47:29:52:e4:df:51:34:c4:70:
5d:cf:e9:ec:5b:f0:69:6e:32:57:39:5b:8c:86:54:
69:e7:ad:bf:48:89:f1:b6:53:37:c6:44:e6:17:6c:
35:8d:61:2b:d6:c0:43:61:24:63:be:d4:b3:7c:a4:
b3:de:d1:af:e6:42:89:f6:c1:ec:6f:86:27:27:11:
31:99:f9:56:2a:57:b5:c5:b5:c4:0f:ec:05:36:69:
38:80:d2:7f:c6:46:c5:e9:87:6e:91:b0:ef:d4:b6:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:9C:48:86:FF:3D:E2:4D:37:B0:AA:41:F6:85:08:34:1A:95:2D
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/wA-cSIb_PeJNN7CqQfaFCDQalS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.128.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0f:a3:03:83:d0:14:61:c8:58:97:44:8c:da:1e:36:1c:32:
0d:a1:63:c5:81:95:b8:ce:dc:dc:04:70:29:1e:0b:85:ab:89:
fe:d5:55:f0:e0:a1:e0:f5:6b:1e:a2:1b:dc:6f:89:fb:83:11:
56:6d:40:cc:52:47:71:01:4b:14:91:48:ed:e0:a9:0b:9c:c1:
c9:d6:5a:fa:36:8c:67:11:b5:4b:d3:04:7a:98:7c:cc:17:f7:
18:88:04:6a:ba:cf:a7:98:e2:09:bb:50:e5:44:87:af:31:1b:
04:84:5e:02:b6:e6:08:9e:13:68:65:6b:2f:4f:c4:65:c2:5b:
e0:23:3e:0c:d1:d7:ef:fa:04:9e:1a:81:4f:3e:e6:f1:40:38:
ff:f0:26:56:1c:a1:ec:68:4c:37:81:87:e5:7d:7d:2b:42:0f:
2a:29:70:53:40:40:29:e1:d1:59:af:57:70:38:c6:08:40:57:
96:aa:05:b7:98:a5:14:52:61:b0:32:25:33:ec:03:74:40:f8:
f6:a1:b5:ac:82:17:a3:f0:f5:70:fc:5f:2d:b0:f9:a1:cd:5d:
ff:5e:af:79:a1:bf:22:9a:03:77:0d:9a:c7:f2:6b:d5:2d:9e:
7e:56:46:d8:b3:48:22:e8:41:8c:4d:20:69:6c:9f:67:b5:d7:
a2:78:0d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org