Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/wZII0x5cc5J90t-1M2eJsWNOn9o.roa
File: wZII0x5cc5J90t-1M2eJsWNOn9o.roa (raw, json)
Hash identifier: 6sS3C++hMQlBmgN2vJdJwpFbQR+OR/o/NXkOCkYey/4=
Subject key identifier: C1:92:08:D3:1E:5C:73:92:7D:D2:DF:B5:33:67:89:B1:63:4E:9F:DA
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0194DCE5F8C192F40829D0768622F152FD5B
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/wZII0x5cc5J90t-1M2eJsWNOn9o.roa
Signing time: Thu 06 Feb 2025 20:14:06 +0000
ROA not before: Thu 06 Feb 2025 20:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.80.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 08:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:e5:f8:c1:92:f4:08:29:d0:76:86:22:f1:52:fd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 6 20:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c19208d31e5c73927dd2dfb5336789b1634e9fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:80:48:22:70:b0:a4:41:24:ef:9a:50:6e:
ca:08:a9:d2:4f:73:a3:aa:6a:b9:64:99:70:7b:ee:
37:6a:66:95:ce:5b:9f:57:8f:aa:e0:e9:24:b9:52:
3d:db:9e:8e:88:52:93:b3:01:35:53:26:2e:8a:dc:
0d:6d:8e:04:1a:e6:84:97:b0:d1:cb:21:65:22:30:
d8:d9:90:0b:1e:a2:dd:b6:74:e1:4f:fe:0d:4a:ab:
19:bd:4c:48:7d:6e:f4:4c:f8:49:81:14:28:8d:f1:
8e:a8:9c:b2:1d:59:a3:51:d6:0e:25:77:0e:15:6d:
f1:03:93:26:62:4e:1d:c3:ef:26:4b:6b:07:49:49:
30:d6:22:d7:ea:bf:7d:1b:6d:6f:c9:f6:c5:1f:3f:
13:17:8b:d9:5c:63:d2:e7:d6:7e:e9:68:27:1e:26:
9e:3e:4c:1f:15:92:fa:36:59:76:e1:61:c9:8a:1d:
c7:0f:80:6e:a6:49:9b:3b:ac:c3:dc:b0:33:6c:6b:
c4:27:e3:d3:76:7f:67:15:dd:33:3c:dd:59:e0:f9:
ca:77:d2:87:86:76:69:f2:3c:ce:fd:29:c1:f6:c4:
9b:9f:d3:55:f5:87:e1:d2:60:30:2b:9c:13:b1:51:
0e:1a:cb:32:c9:36:1a:66:0b:38:f1:f4:33:33:ea:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:92:08:D3:1E:5C:73:92:7D:D2:DF:B5:33:67:89:B1:63:4E:9F:DA
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/wZII0x5cc5J90t-1M2eJsWNOn9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b8:fc:e6:be:17:07:b9:f1:2f:2c:79:1c:21:25:df:47:80:
ef:20:5b:e9:be:e6:70:98:f5:3d:99:b0:04:43:c6:18:93:0d:
b1:88:2c:98:df:e2:87:7b:55:2e:2a:f6:c6:53:eb:8a:40:c1:
16:25:81:93:75:67:e3:1e:d4:d0:cb:dd:2c:74:f2:8a:df:99:
cc:11:b7:57:47:35:16:e6:c3:87:77:20:81:a7:c4:06:8b:c1:
ed:2e:9b:69:77:a2:95:93:2c:db:46:c9:d7:15:ed:4b:da:ab:
39:32:91:67:fc:03:96:27:43:9f:32:aa:ab:4a:7e:c1:c7:fb:
ea:3d:17:87:4f:79:3d:81:3a:6f:17:46:f2:70:6f:ef:5c:98:
15:f5:cf:fd:37:96:7b:74:ab:83:8b:e5:91:a6:ff:31:98:d1:
d1:01:d3:af:ed:04:fc:75:69:49:90:3a:b2:31:b3:31:f7:13:
a2:29:d9:2d:97:34:71:3a:ec:2a:4e:ce:5f:ae:a0:bc:ef:f3:
54:34:0e:4b:ca:f1:08:6b:cf:8c:2f:6a:86:b1:20:5d:b0:b1:
3b:ba:fa:3f:6a:0e:32:e9:1d:8a:05:18:d0:b3:bb:fc:e0:90:
5a:13:1c:8e:4c:0f:c9:4d:b9:2e:90:ad:1e:ac:38:e4:1e:c9:
a7:7c:71:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:49 2025 by rpki-client