Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/c3od1G6XKofUo2vBgAfvvZHOLkI.roa
File: c3od1G6XKofUo2vBgAfvvZHOLkI.roa (raw, json)
Hash identifier: LxVDjR7b+9boiaaYU5vFqEvI3Kopfp0ClZF+8V4S4+0=
Subject key identifier: 73:7A:1D:D4:6E:97:2A:87:D4:A3:6B:C1:80:07:EF:BD:91:CE:2E:42
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01856C813D643A2394CC452E1C625969F074
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/c3od1G6XKofUo2vBgAfvvZHOLkI.roa
Signing time: Sun 01 Jan 2023 08:44:47 +0000
ROA not before: Sun 01 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 80.246.225.0/24 maxlen: 24
80.246.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 08:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3d:64:3a:23:94:cc:45:2e:1c:62:59:69:f0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=737a1dd46e972a87d4a36bc18007efbd91ce2e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:ae:ab:24:e6:7a:47:14:43:92:e5:bb:a0:
18:d0:41:57:69:b2:c5:ad:f2:e8:64:07:e1:90:83:
5a:b9:18:24:43:88:9b:68:9c:75:0d:4e:32:81:12:
16:9b:f9:18:ff:74:af:7f:ad:6e:e2:d0:09:ce:5e:
25:53:91:76:cf:54:fc:38:0f:64:48:e1:e0:ec:99:
26:82:5b:a6:bd:0a:16:e3:95:9d:84:9c:3f:64:8c:
87:18:ac:ad:26:89:f4:cc:47:d4:16:3e:2b:f7:e8:
b5:0c:78:96:38:30:51:7d:8c:63:c1:ec:e4:58:3b:
69:5f:6a:2d:b6:80:2f:51:9c:4b:f1:4b:44:61:b6:
12:fb:86:4e:a9:80:9c:a6:43:7c:32:0b:ec:c4:50:
65:28:de:94:f2:a8:fb:ec:13:d5:d3:6a:19:3f:3a:
0e:7c:92:93:f4:9c:bf:09:17:b0:23:1f:9e:25:f5:
6a:32:2e:33:be:23:6c:08:32:90:63:bb:2e:cc:f4:
37:94:bf:b9:77:e9:b8:ae:23:49:cb:eb:8e:72:13:
95:f9:2b:8a:19:5f:9d:99:fb:3e:7b:67:74:cd:c6:
1f:97:0f:d5:1c:72:84:88:41:fb:ae:55:40:0d:5b:
73:d5:5b:27:21:76:46:1f:a0:0c:71:16:11:f2:71:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7A:1D:D4:6E:97:2A:87:D4:A3:6B:C1:80:07:EF:BD:91:CE:2E:42
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/c3od1G6XKofUo2vBgAfvvZHOLkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.225.0/24
80.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7f:9c:40:f4:72:ea:59:14:6f:52:f3:76:07:94:30:58:cd:
c6:25:77:2c:d4:b9:f2:7e:c1:53:66:3d:13:5f:a8:ef:b0:3b:
da:92:59:67:fa:a7:93:58:31:26:c6:e6:c6:12:00:76:72:7b:
b2:a9:a1:fa:2f:cb:2f:49:94:5a:51:99:19:8f:0e:86:c3:4b:
95:ae:be:fe:fa:ec:0c:8b:47:4d:04:f9:49:67:9b:a5:5a:43:
ba:30:b7:89:28:5c:bd:7e:69:ab:fe:dc:d7:9e:f8:7b:af:f3:
4d:d9:95:b3:66:ce:ae:71:b9:a2:7f:a1:41:06:0f:40:6a:85:
b9:3e:05:10:99:c3:b5:4c:c5:46:05:13:54:fd:66:c1:1c:34:
e4:c5:e8:45:30:b7:86:c3:aa:d6:4c:fc:06:ff:27:61:01:d0:
90:00:8b:b9:a5:18:72:e2:a1:63:3e:16:b4:b0:89:4a:c1:2a:
e0:ad:ec:51:43:e4:7a:f3:ef:8d:10:63:d8:27:68:24:86:9c:
9d:cd:e8:f8:ac:9c:ec:55:8c:c0:ad:71:e6:10:79:02:e7:ca:
46:18:e1:da:41:4e:8f:2c:ad:81:c4:a7:43:ba:88:fb:48:8d:
32:40:b3:e7:47:23:7d:e8:40:14:43:ae:d4:d1:25:98:af:37:
e5:8a:03:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsgT1kOiOUzEUuHGJZafB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjMwMTAxMDg0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzdhMWRkNDZlOTcyYTg3ZDRhMzZiYzE4MDA3ZWZiZDkxY2UyZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizuuqyTmekcUQ5Llu6AY0EFXabLF
rfLoZAfhkINauRgkQ4ibaJx1DU4ygRIWm/kY/3Svf61u4tAJzl4lU5F2z1T8OA9k
SOHg7JkmglumvQoW45WdhJw/ZIyHGKytJon0zEfUFj4r9+i1DHiWODBRfYxjwezk
WDtpX2ottoAvUZxL8UtEYbYS+4ZOqYCcpkN8MgvsxFBlKN6U8qj77BPV02oZPzoO
fJKT9Jy/CRewIx+eJfVqMi4zviNsCDKQY7suzPQ3lL+5d+m4riNJy+uOchOV+SuK
GV+dmfs+e2d0zcYflw/VHHKEiEH7rlVADVtz1VsnIXZGH6AMcRYR8nF6FwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHN6HdRulyqH1KNrwYAH772Rzi5CMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvYzNvZDFHNlhLb2ZVbzJ2QmdBZnZ2WkhPTGtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPbhAwQA
UPbnMA0GCSqGSIb3DQEBCwUAA4IBAQBaf5xA9HLqWRRvUvN2B5QwWM3GJXcs1Lny
fsFTZj0TX6jvsDvaklln+qeTWDEmxubGEgB2cnuyqaH6L8svSZRaUZkZjw6Gw0uV
rr7++uwMi0dNBPlJZ5ulWkO6MLeJKFy9fmmr/tzXnvh7r/NN2ZWzZs6ucbmif6FB
Bg9AaoW5PgUQmcO1TMVGBRNU/WbBHDTkxehFMLeGw6rWTPwG/ydhAdCQAIu5pRhy
4qFjPha0sIlKwSrgrexRQ+R68++NEGPYJ2gkhpydzej4rJzsVYzArXHmEHkC58pG
GOHaQU6PLK2BxKdDuoj7SI0yQLPnRyN96EAUQ67U0SWYrzfligPb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org