Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zkWfyRuPOAEY-oA9nYXbJGKkYGo.roa
File: zkWfyRuPOAEY-oA9nYXbJGKkYGo.roa (raw, json)
Hash identifier: /koye7IuhIkgcPNf9yy4xwiP6IlqwqcE4rq4e8v1xzA=
Subject key identifier: CE:45:9F:C9:1B:8F:38:01:18:FA:80:3D:9D:85:DB:24:62:A4:60:6A
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018EAAFD59EF60C98AE6D863D5293EB8D658
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zkWfyRuPOAEY-oA9nYXbJGKkYGo.roa
Signing time: Thu 04 Apr 2024 21:21:54 +0000
ROA not before: Thu 04 Apr 2024 21:21:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 88.80.134.0/24 maxlen: 24
88.80.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 17:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:aa:fd:59:ef:60:c9:8a:e6:d8:63:d5:29:3e:b8:d6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Apr 4 21:21:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce459fc91b8f380118fa803d9d85db2462a4606a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:87:53:de:0b:70:a5:8c:37:ad:f8:8f:62:
2d:14:3e:c7:50:77:fe:10:f9:e7:e3:9c:34:99:45:
eb:14:48:0f:d5:f1:18:65:35:75:09:41:2a:79:37:
62:65:7c:f2:74:81:fd:80:64:43:11:3b:77:c7:2a:
fb:43:f8:05:02:8c:1d:52:9c:d9:49:94:d1:80:f0:
dc:76:1a:63:6e:6e:3c:5a:43:06:ee:fc:c2:ba:c0:
6d:f1:65:33:e2:10:ea:1b:87:d9:c4:07:08:36:49:
83:8c:b8:08:a5:70:3f:b3:49:fd:15:19:f1:11:8a:
f7:e3:6e:89:c9:d0:7f:94:fb:ee:91:dc:54:80:04:
ba:61:22:64:f2:1d:10:82:0e:6d:64:af:07:47:95:
f1:6e:c3:12:ca:3b:56:81:a8:b3:12:e1:ae:ac:98:
88:6e:41:b8:71:c9:20:1f:82:c1:b2:d4:d7:dc:77:
bf:c0:00:15:63:7b:27:ec:ef:58:fe:8a:a6:45:43:
ac:aa:11:61:c1:a3:ac:91:9a:5d:ee:ca:1a:f4:5f:
93:27:7d:05:8f:e8:dd:d6:d4:91:1f:01:3a:85:79:
5d:0c:ba:3b:a1:0a:9e:e0:ba:11:10:f9:c3:81:e9:
2c:8b:ec:74:e0:3c:d0:49:2a:86:89:2f:db:27:b9:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:45:9F:C9:1B:8F:38:01:18:FA:80:3D:9D:85:DB:24:62:A4:60:6A
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zkWfyRuPOAEY-oA9nYXbJGKkYGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.134.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:11:fa:f6:8d:01:60:fd:a7:18:d0:a6:f8:07:b0:ee:6f:bf:
6b:a3:ec:71:ca:3b:b1:35:61:9a:5d:72:a2:47:26:02:ad:72:
5d:c8:e1:b6:33:9c:5b:f2:26:7a:44:e0:04:dd:94:e3:46:7c:
90:c2:9a:79:36:e2:28:f6:02:c8:7a:67:9a:b3:e0:35:15:ea:
c4:6e:f8:0b:4b:f1:55:15:bc:fb:0d:22:04:00:05:7c:3d:a2:
b0:18:53:13:b0:f7:51:be:60:08:ea:33:2c:88:23:6b:be:f6:
6e:31:d5:85:ab:af:2a:66:81:85:d8:f7:08:1b:be:4b:5c:d9:
03:e5:cb:ba:22:8b:6d:94:1c:d7:23:90:3c:1b:d1:e5:e5:cd:
55:3e:bf:b8:b7:54:d7:10:c1:96:9f:32:ee:02:dd:d0:d9:9f:
ae:0a:a4:d7:64:9d:d5:e5:29:9a:60:26:16:47:8c:14:ca:91:
41:11:b2:9d:c6:8c:fd:54:f5:c5:01:a2:2b:f1:66:95:9d:c8:
ec:a4:e9:58:73:7a:97:5b:f1:f5:44:76:a5:00:b4:01:d7:09:
78:a8:38:ac:30:ed:d6:84:fc:b1:07:0f:29:0b:39:ed:30:45:
07:e0:f4:87:81:a1:26:5e:c4:49:77:27:8a:18:9e:4a:05:df:
db:c4:3a:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6q/VnvYMmK5thj1Sk+uNZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwNDA0MjEyMTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTQ1OWZjOTFiOGYzODAxMThmYTgwM2Q5ZDg1ZGIyNDYyYTQ2MDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSKHU94LcKWMN634j2ItFD7HUHf+
EPnn45w0mUXrFEgP1fEYZTV1CUEqeTdiZXzydIH9gGRDETt3xyr7Q/gFAowdUpzZ
SZTRgPDcdhpjbm48WkMG7vzCusBt8WUz4hDqG4fZxAcINkmDjLgIpXA/s0n9FRnx
EYr3426JydB/lPvukdxUgAS6YSJk8h0Qgg5tZK8HR5XxbsMSyjtWgaizEuGurJiI
bkG4cckgH4LBstTX3He/wAAVY3sn7O9Y/oqmRUOsqhFhwaOskZpd7soa9F+TJ30F
j+jd1tSRHwE6hXldDLo7oQqe4LoREPnDgeksi+x04DzQSSqGiS/bJ7lVJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM5Fn8kbjzgBGPqAPZ2F2yRipGBqMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvemtXZnlSdVBPQUVZLW9BOW5ZWGJKR0trWUdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWFCGMA0G
CSqGSIb3DQEBCwUAA4IBAQCjEfr2jQFg/acY0Kb4B7Dub79ro+xxyjuxNWGaXXKi
RyYCrXJdyOG2M5xb8iZ6ROAE3ZTjRnyQwpp5NuIo9gLIemeas+A1FerEbvgLS/FV
Fbz7DSIEAAV8PaKwGFMTsPdRvmAI6jMsiCNrvvZuMdWFq68qZoGF2PcIG75LXNkD
5cu6IottlBzXI5A8G9Hl5c1VPr+4t1TXEMGWnzLuAt3Q2Z+uCqTXZJ3V5SmaYCYW
R4wUypFBEbKdxoz9VPXFAaIr8WaVncjspOlYc3qXW/H1RHalALQB1wl4qDisMO3W
hPyxBw8pCzntMEUH4PSHgaEmXsRJdyeKGJ5KBd/bxDql
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:21 2024 by rpki-client on console-ams.rpki-client.org