Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/yF3h5S1iWCbENoga3SGuWnrYlik.roa
File: yF3h5S1iWCbENoga3SGuWnrYlik.roa (raw, json)
Hash identifier: M/514K4k0uIFe1XOiLEBzJKtgtW7O8pFF3fs382aSfY=
Subject key identifier: C8:5D:E1:E5:2D:62:58:26:C4:36:88:1A:DD:21:AE:5A:7A:D8:96:29
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019088278AEBD0422A4F4DAFD432BA72FCC3
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/yF3h5S1iWCbENoga3SGuWnrYlik.roa
Signing time: Sat 06 Jul 2024 13:06:51 +0000
ROA not before: Sat 06 Jul 2024 13:06:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.80.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 06:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:88:27:8a:eb:d0:42:2a:4f:4d:af:d4:32:ba:72:fc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jul 6 13:06:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c85de1e52d625826c436881add21ae5a7ad89629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:3d:1d:cf:17:a5:ea:3d:28:bf:eb:a4:52:
b8:c3:99:9d:1f:c8:3d:b4:69:bd:73:4b:df:92:b8:
12:cd:ca:7e:d4:fc:92:5d:26:a8:7e:4c:5f:ce:c5:
9c:9e:ee:1f:a4:66:e6:0e:23:75:74:91:a1:3d:38:
08:aa:3c:c5:a9:cd:99:59:97:c5:6b:6b:a4:74:eb:
d9:40:86:1c:20:93:06:f7:da:c4:4b:61:90:b3:10:
de:62:af:20:a1:e1:3e:3e:2d:71:7a:96:7b:65:b9:
29:0c:c4:bb:5c:fa:f7:e4:e2:8a:0e:b7:e8:20:fb:
a3:15:90:f1:db:8c:1b:75:51:2d:10:50:75:74:cb:
d8:d1:33:a6:7f:88:60:f5:bd:93:d5:48:fa:49:4e:
ea:c7:6e:6e:75:4a:f1:4a:34:c0:93:dc:20:d8:6e:
ad:1d:61:2c:9e:8a:1d:4f:81:1c:e2:88:7b:2b:c2:
a2:9a:79:09:49:6c:f6:2d:d9:ce:dc:23:6a:88:b7:
cf:5b:62:c5:f4:d2:55:ab:35:b2:08:19:a0:08:b6:
45:33:51:7a:61:41:0d:ab:2c:21:20:5b:67:2a:83:
01:44:44:7f:52:c0:56:13:d2:a7:8d:e6:30:15:cc:
4d:d8:56:27:e8:59:b4:aa:05:fe:5e:47:0d:5e:5b:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:E1:E5:2D:62:58:26:C4:36:88:1A:DD:21:AE:5A:7A:D8:96:29
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/yF3h5S1iWCbENoga3SGuWnrYlik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.135.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d6:78:6d:83:a8:f4:ea:2b:43:d3:c7:b2:ba:fd:fa:bd:2e:
61:01:06:c2:1c:5d:b9:bb:0a:5f:8b:93:6b:fe:1e:84:f9:c4:
7c:52:5c:d9:15:58:99:35:86:45:53:fa:2d:aa:d7:eb:7c:1d:
59:c1:e2:5f:4a:10:91:e8:b8:5a:0b:04:4c:4c:ea:0b:3f:3e:
13:a6:67:c4:69:b8:05:4d:8a:29:56:15:c5:b6:1f:ed:93:4b:
84:fb:45:5c:97:35:26:53:64:f8:09:14:ef:d4:f9:2e:6f:c7:
a0:dd:f4:50:f5:c3:99:45:2b:a9:f9:86:b7:ac:b1:6e:61:59:
bd:de:11:d8:be:39:46:74:9c:34:98:9f:ee:ab:e2:c9:1e:8b:
b5:be:6f:1b:15:c9:8f:44:fc:38:07:84:a8:0a:4e:7e:41:cc:
fd:8c:f5:98:d1:a4:95:49:be:54:b4:ee:b4:a1:58:f3:d2:63:
02:be:15:59:fa:46:b9:c8:db:11:1b:3f:78:db:8a:d5:2e:eb:
f3:55:57:64:b5:da:79:34:89:02:a5:a2:a8:f7:0e:16:7b:36:
c1:6c:6e:fc:0f:ee:93:6a:58:f9:49:70:ae:f4:82:61:8b:4a:
9c:26:20:a7:61:9f:4c:44:7f:64:e0:a1:5e:4f:47:a4:d5:d5:
a0:e6:e9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 07:51:05 2024 by rpki-client on console-ams.rpki-client.org