Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zL3_4FNbZ2aCxy9rplylMDH5VEo.roa
File: zL3_4FNbZ2aCxy9rplylMDH5VEo.roa (raw, json)
Hash identifier: rLyaU0N8kfTZyCD1YVa8Vr7Mn9LJ6zrEcxca7CvP4Ss=
Subject key identifier: CC:BD:FF:E0:53:5B:67:66:82:C7:2F:6B:A6:5C:A5:30:31:F9:54:4A
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018CC8DF951DFAE1E87ABB7C920ACA640100
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zL3_4FNbZ2aCxy9rplylMDH5VEo.roa
Signing time: Tue 02 Jan 2024 06:32:24 +0000
ROA not before: Tue 02 Jan 2024 06:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 88.80.134.0/23 maxlen: 24
88.80.137.0/24 maxlen: 24
88.80.139.0/24 maxlen: 24
88.80.138.0/24 maxlen: 24
77.246.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 05:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:95:1d:fa:e1:e8:7a:bb:7c:92:0a:ca:64:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 2 06:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccbdffe0535b676682c72f6ba65ca53031f9544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:d6:50:53:52:ce:09:bb:1b:7d:cc:f1:23:
81:0f:98:b5:d7:83:b2:5d:95:a7:1b:00:93:58:98:
21:68:b6:c3:7a:a2:cf:13:11:7e:6d:ab:26:03:8e:
a7:bc:a8:53:da:28:c1:05:c8:74:76:14:da:d1:01:
59:3f:70:28:79:74:c6:98:15:22:b5:84:56:33:ad:
90:ce:15:6e:c6:d0:05:5a:e4:d3:49:c1:e5:97:66:
d5:60:9d:85:d2:e7:93:f5:62:20:cb:9a:d2:19:5e:
5a:5c:1d:8a:2d:34:12:c7:89:81:9f:f6:ee:e1:e9:
76:11:eb:aa:05:7a:27:9f:8b:c8:00:01:09:74:79:
33:07:b3:31:90:b1:40:37:f0:26:cb:03:7e:c6:81:
18:24:73:24:92:24:6d:a4:87:39:36:39:34:6f:95:
64:67:7b:c3:1f:9a:38:0a:33:00:27:03:7e:0a:55:
62:90:7a:06:a3:93:63:43:2f:47:ab:97:3e:eb:8d:
ff:d2:94:18:54:84:d6:95:fb:a3:11:45:26:83:f4:
97:fd:98:29:a7:cb:52:37:62:62:81:1f:c7:b7:cc:
45:8f:ec:22:96:c6:fd:80:13:f0:ab:62:18:4b:54:
88:1a:f2:8c:04:25:10:ce:3b:e9:70:56:c0:72:74:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BD:FF:E0:53:5B:67:66:82:C7:2F:6B:A6:5C:A5:30:31:F9:54:4A
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zL3_4FNbZ2aCxy9rplylMDH5VEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.222.0/24
88.80.134.0/23
88.80.137.0-88.80.139.255
Signature Algorithm: sha256WithRSAEncryption
42:33:52:bf:75:87:f4:67:e3:3f:d9:1d:a7:7c:9f:fa:c1:2a:
63:09:28:2d:ef:3a:b4:48:91:2c:a9:d9:4e:6c:a8:95:4c:0e:
b2:91:ea:5e:65:97:d2:0d:60:bb:f4:e9:77:da:39:f9:1b:ec:
1b:ee:be:7c:71:0a:86:5a:cf:f8:ba:5b:da:12:0a:90:66:ed:
78:e8:35:e8:83:5d:69:bb:6b:7f:69:5e:a9:f6:9d:65:20:57:
11:e8:5f:21:44:2e:18:4e:ed:c7:27:69:a9:0f:7f:25:df:3c:
0f:18:72:6b:05:d9:60:7f:8d:22:c3:6b:f4:86:e1:f0:3e:78:
14:f0:9a:e7:9a:a2:a3:dc:f6:d7:f0:fe:64:a3:67:c4:58:d6:
46:27:ea:40:1c:4c:21:1f:12:0c:0c:ab:c1:4c:fc:30:5c:56:
17:d6:19:21:04:78:63:58:51:dd:20:01:2c:d9:4e:4a:13:4d:
48:bd:74:8d:67:20:71:c4:71:f5:05:b1:94:b2:87:7e:c7:1b:
07:73:4d:95:9d:80:45:8b:7e:ce:4e:ad:72:22:d9:19:f5:1b:
7a:3f:c3:23:57:ba:56:c6:f5:b3:67:69:8c:31:4a:91:22:fa:
46:9f:16:fd:d6:07:4a:d3:ab:b2:58:a9:da:41:3d:cf:d3:f6:
56:28:36:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org