Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/GpmWdmYRmO4wsw-c1GGssl9b2ag.roa
File: GpmWdmYRmO4wsw-c1GGssl9b2ag.roa (raw, json)
Hash identifier: jf1a+KTRQaC4wDPHjF3hFDxNpAJ0WuFfO32MUoi3QuE=
Subject key identifier: 1A:99:96:76:66:11:98:EE:30:B3:0F:9C:D4:61:AC:B2:5F:5B:D9:A8
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018826207AB34AD1C47C4A93BB75BEF0E854
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/GpmWdmYRmO4wsw-c1GGssl9b2ag.roa
Signing time: Tue 16 May 2023 19:54:02 +0000
ROA not before: Tue 16 May 2023 19:54:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.246.232.0/24 maxlen: 24
80.246.233.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 19:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:26:20:7a:b3:4a:d1:c4:7c:4a:93:bb:75:be:f0:e8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: May 16 19:54:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a999676661198ee30b30f9cd461acb25f5bd9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:84:bb:61:f5:4d:d0:c5:7c:ed:1e:06:e6:
e0:89:9e:94:44:0a:6e:44:f1:2d:4b:ac:98:52:88:
f4:9d:bf:cd:4f:ca:8d:d7:41:c7:18:2e:10:de:8b:
be:ad:1c:c6:bc:df:cd:fd:52:17:3e:55:2c:4f:b3:
df:a3:ac:06:24:9d:b3:35:42:95:9c:d9:13:1c:1e:
14:42:f5:08:17:5f:b4:87:03:1d:a7:e4:69:19:71:
75:dd:85:dc:ba:50:a2:fd:48:9b:d5:74:e8:47:64:
df:56:e6:6c:fd:b0:93:dd:11:be:88:d5:d4:5b:4e:
8b:bd:dd:85:54:52:c6:40:c7:ed:da:3d:18:2c:ae:
1e:b3:88:37:77:7d:9f:fc:20:bc:31:3a:c8:ca:6e:
29:d1:19:46:22:a9:5e:d4:4e:2f:f8:ff:9b:9d:db:
23:e9:66:88:f3:44:1b:80:59:12:43:49:4b:70:80:
0d:4b:2f:cf:2a:ce:9e:46:30:a7:70:2a:73:3d:a9:
a7:8c:e5:77:d2:7c:c6:0f:8a:83:93:dd:96:3c:8e:
17:45:e0:af:c4:a1:52:2c:73:95:b6:a9:b1:84:75:
03:b3:1b:5a:7f:2e:b1:41:6b:62:c9:0d:75:f8:ff:
4f:77:75:a3:1d:6b:51:74:e6:86:fc:b6:8e:bb:2e:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:99:96:76:66:11:98:EE:30:B3:0F:9C:D4:61:AC:B2:5F:5B:D9:A8
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/GpmWdmYRmO4wsw-c1GGssl9b2ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0-80.246.234.255
80.246.236.0/24
Signature Algorithm: sha256WithRSAEncryption
68:02:84:a5:cf:34:17:ed:0d:d6:c0:eb:04:9c:42:ce:e0:ef:
c8:e3:01:91:0e:45:a7:4a:79:54:87:a0:ac:b1:2e:9f:cc:e2:
76:39:12:c3:9d:aa:9a:4b:4c:e6:74:77:90:ac:cb:31:c0:6e:
9c:e0:cc:91:0c:a6:b8:3b:e9:44:e8:4d:36:0a:b7:b4:57:27:
ee:64:f5:61:39:12:76:0c:33:ad:89:1a:3c:37:30:e9:e1:30:
29:2c:56:17:4f:7f:ec:f0:b6:4f:20:1f:95:4a:76:79:b3:a3:
cb:a0:c4:f0:3c:c0:da:75:21:92:79:da:ee:02:6a:f9:49:18:
e8:21:b7:a5:27:33:e7:be:6f:5d:f1:a3:24:60:3e:73:ef:ac:
ec:f4:ab:af:91:a9:54:b5:c5:57:3f:95:20:34:2f:87:80:66:
37:7e:0c:ac:32:12:fd:e5:c8:ca:45:fa:52:39:0e:5c:95:88:
55:f8:81:14:90:57:d8:64:2f:3d:64:0d:52:7f:96:ea:de:e7:
09:2b:2d:34:12:a5:ea:ea:16:cc:5d:c2:71:da:de:34:76:ac:
a8:11:1d:65:28:82:a2:14:0e:ab:95:c9:72:1a:6e:91:e1:07:
91:6b:46:5e:95:18:5b:9c:14:f0:ce:8c:3a:32:55:2c:1b:ec:
fc:b9:d1:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:31 2024 by rpki-client on console-ams.rpki-client.org