Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ypdDIH0SxahgD1lF8JcwAsH36Do.roa
File: ypdDIH0SxahgD1lF8JcwAsH36Do.roa (raw, json)
Hash identifier: VS36XOWtj1QeW2Sys0d5uje7Ipj7VpWlZuweWGYU+TA=
Subject key identifier: CA:97:43:20:7D:12:C5:A8:60:0F:59:45:F0:97:30:02:C1:F7:E8:3A
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018D3F2B31E7A941759D4E41C848D1612228
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ypdDIH0SxahgD1lF8JcwAsH36Do.roa
Signing time: Thu 25 Jan 2024 05:50:11 +0000
ROA not before: Thu 25 Jan 2024 05:50:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 77.246.222.0/24 maxlen: 24
88.80.134.0/23 maxlen: 24
88.80.137.0/24 maxlen: 24
88.80.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 12:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:2b:31:e7:a9:41:75:9d:4e:41:c8:48:d1:61:22:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 25 05:50:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca9743207d12c5a8600f5945f0973002c1f7e83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:fa:06:ef:85:3e:c4:27:02:0c:ec:cc:07:
b7:57:9f:96:e8:ef:e7:81:e7:a1:db:c7:7d:7b:cb:
8e:cc:46:16:c6:89:ce:54:9c:69:7a:76:6a:06:2b:
e1:84:62:43:a0:c7:e2:67:95:12:d8:0e:e2:80:9a:
f8:60:6b:f6:16:a6:f8:88:70:e6:20:52:1d:90:6b:
1a:f9:3b:56:a6:8f:63:49:3e:78:46:56:45:cd:84:
a8:59:0c:5e:9e:3d:c1:5e:74:71:e0:1d:47:19:e8:
e3:e2:f5:6e:a1:99:0c:62:61:68:56:fa:52:4a:81:
08:b8:21:d5:42:69:0f:2b:d2:c4:a2:fd:09:b5:2e:
92:5f:e1:21:69:53:5e:69:aa:9a:6d:a4:b2:54:b8:
9c:c0:79:86:67:7d:49:17:f3:6f:16:b0:a0:f3:7f:
87:eb:06:0b:36:37:2a:f8:ba:a2:eb:d2:bc:be:fa:
62:46:66:1a:ac:3a:05:82:88:4c:2a:2d:92:98:d0:
86:55:8a:4d:15:9b:96:b9:5e:f2:23:cf:d8:3c:47:
cb:13:79:f9:ef:d5:e1:af:d4:e6:3d:e4:1e:3f:22:
7a:51:7f:dd:f1:ae:b3:a5:23:72:7e:8a:d7:12:08:
71:75:7b:04:16:88:db:9a:8e:87:11:a7:3f:76:c9:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:97:43:20:7D:12:C5:A8:60:0F:59:45:F0:97:30:02:C1:F7:E8:3A
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ypdDIH0SxahgD1lF8JcwAsH36Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.222.0/24
88.80.134.0/23
88.80.137.0-88.80.138.255
Signature Algorithm: sha256WithRSAEncryption
78:2a:18:5a:83:3a:92:06:35:14:2f:cc:d5:c2:31:11:7f:09:
a1:d7:3e:cd:7e:1e:c4:cc:a7:7e:a5:b5:f5:0b:e9:c7:84:28:
99:85:dc:b7:b8:4b:80:98:a3:18:ca:ef:03:25:26:8d:cc:24:
6b:f3:9f:20:d2:fa:1b:c9:2e:a7:24:11:80:9c:86:88:10:41:
d1:06:90:23:27:95:b5:a5:fe:3b:c5:24:28:ef:74:1b:14:a7:
3e:cf:23:95:82:2f:66:b5:ff:f1:2e:83:af:31:44:b9:7d:c8:
3d:c8:45:f8:a5:78:9e:88:f0:11:2d:4f:92:2a:ae:d3:63:7e:
a1:ce:3f:87:4c:bb:58:1a:da:44:90:4d:7f:53:18:27:41:0a:
3f:88:53:34:93:39:17:f2:84:a0:f0:d9:72:f1:10:36:22:40:
8b:53:19:bb:bf:58:d8:b6:ca:c0:f7:59:63:57:4f:4a:bb:f0:
9e:16:bf:a4:ee:da:46:29:41:b6:1f:1a:25:81:4f:58:a2:f9:
6f:24:11:d1:40:86:5f:dd:6e:bd:31:62:2a:02:d1:8a:a3:69:
63:53:3d:d5:80:93:95:86:1a:05:99:0e:74:d1:f5:c4:44:18:
15:a7:0f:90:38:bd:ed:1a:cb:d7:51:74:fa:73:79:3e:2e:be:
92:85:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org