Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/V8XWp_1Ut-ayURABSVOsg44oJBQ.roa
File: V8XWp_1Ut-ayURABSVOsg44oJBQ.roa (raw, json)
Hash identifier: YPbC6mF247cEtwauubaMGD+9ylwgyGW2omQCoF32Mr4=
Subject key identifier: 57:C5:D6:A7:FD:54:B7:E6:B2:51:10:01:49:53:AC:83:8E:28:24:14
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 018F7CEEF3BF3FCED4433C88F5CFBE52BCD8
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/V8XWp_1Ut-ayURABSVOsg44oJBQ.roa
Signing time: Wed 15 May 2024 15:46:25 +0000
ROA not before: Wed 15 May 2024 15:46:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57630
IP address blocks: 80.88.126.0/24 maxlen: 24
81.8.142.0/24 maxlen: 24
81.8.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 07:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:ee:f3:bf:3f:ce:d4:43:3c:88:f5:cf:be:52:bc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: May 15 15:46:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57c5d6a7fd54b7e6b25110014953ac838e282414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:2c:ae:5d:00:87:62:d9:8b:50:5d:10:de:
b8:de:d8:2b:e4:30:7f:a0:c2:eb:0c:9b:33:21:ba:
23:2a:fc:82:a6:1b:40:36:17:4d:2f:97:e4:b3:ed:
3a:c3:a2:92:2d:f8:a8:04:a8:d2:73:2d:f1:18:6a:
35:0f:f9:2b:30:00:62:ca:d8:fe:bb:dd:f0:77:0a:
7f:97:1c:63:be:5c:b4:d7:c6:66:26:92:42:66:5c:
94:df:c0:8f:6f:74:85:ba:73:09:e4:28:21:2b:c1:
11:17:a2:2e:42:5c:12:9e:c8:d7:4f:44:b1:5d:00:
01:43:81:cc:24:8b:4e:40:82:fb:d8:04:92:72:a5:
57:dc:fb:3e:79:d7:12:55:dd:60:e7:1d:72:7d:7e:
fb:df:5e:71:c1:1c:12:1e:bf:19:dc:6c:c1:95:85:
3c:3e:0d:33:91:5a:c4:5e:bd:85:6b:e1:c8:2d:fe:
5e:46:32:1e:b2:b0:8b:23:47:e3:66:7c:7f:5e:07:
36:20:7d:6e:0b:f4:28:c0:a5:56:df:64:d5:31:ef:
ed:b2:3e:96:31:5e:72:6d:ba:8c:49:60:8d:b2:b6:
3c:1e:45:ff:4c:44:60:2b:9a:3d:36:42:37:c1:f6:
e2:57:aa:19:e6:18:ae:30:de:f0:9f:f7:49:d2:8f:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C5:D6:A7:FD:54:B7:E6:B2:51:10:01:49:53:AC:83:8E:28:24:14
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/V8XWp_1Ut-ayURABSVOsg44oJBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.126.0/24
81.8.142.0/23
Signature Algorithm: sha256WithRSAEncryption
14:33:8e:13:09:70:81:c1:6d:f0:47:c1:4e:b7:bc:d1:f8:66:
1b:41:65:a9:75:2f:35:a0:d8:b7:87:b5:c7:d2:17:c2:bd:dd:
53:02:02:c4:81:d3:e5:2b:96:a3:85:00:f7:43:37:d8:2d:a6:
58:4f:33:20:c1:19:ae:ee:4a:cd:af:1e:db:58:7a:e7:0e:2c:
4e:8f:63:1b:a4:eb:db:85:c4:6e:c2:fe:49:65:f5:4b:ac:68:
e5:89:54:02:1f:63:89:b4:5f:98:47:82:4c:a5:6a:1b:3e:bd:
ba:6a:58:84:bc:32:dc:8c:a5:51:74:bb:3c:fd:ea:1b:32:f3:
c9:f7:de:a1:94:20:f2:45:8c:bf:15:d9:9a:c9:0a:65:9d:d7:
19:10:b8:e9:38:06:4c:93:51:fc:03:b2:39:a1:7c:14:c9:4a:
18:46:a5:ea:c1:3f:2b:2d:c7:0b:8f:e8:3e:a2:3b:d6:dd:ad:
90:8a:49:46:d9:d7:7e:06:4a:ba:3c:39:ec:55:2e:37:40:a6:
ea:1c:80:63:1b:fb:03:04:e1:4a:e1:ae:32:b4:5a:e8:54:b0:
1d:bd:95:93:16:28:aa:2f:7d:86:d9:6d:08:d3:5b:9a:8f:6d:
87:43:58:7c:2b:cf:e9:a9:58:db:bc:40:30:ec:86:02:24:35:
e3:00:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:22 2025 by rpki-client