Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/cb8c-YkznOdLaxtvM8SBvEvJdUg.roa
File: cb8c-YkznOdLaxtvM8SBvEvJdUg.roa (raw, json)
Hash identifier: n6VzpjXcjf5AFR4A8ZNpVIQfdQQew0Ylo1QBF/H4ta4=
Subject key identifier: 71:BF:1C:F9:89:33:9C:E7:4B:6B:1B:6F:33:C4:81:BC:4B:C9:75:48
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018CC56E0F5B6536B1635CA20C636D8F8F98
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/cb8c-YkznOdLaxtvM8SBvEvJdUg.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198510
IP address blocks: 80.246.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 07:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0f:5b:65:36:b1:63:5c:a2:0c:63:6d:8f:8f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71bf1cf989339ce74b6b1b6f33c481bc4bc97548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:7e:c3:57:d9:7b:58:be:ff:54:ee:fa:d3:
20:ed:c7:ee:cb:dc:ea:bd:97:4e:d1:4f:84:c2:cf:
4a:bb:91:07:56:38:fe:66:03:18:90:cf:6a:c4:32:
40:4b:61:eb:23:9f:bf:c3:4f:7e:5c:1a:d0:48:62:
5e:be:05:33:43:b0:b6:3c:af:61:70:41:17:0f:7a:
6d:4e:2a:fb:03:64:3a:b9:1d:ce:49:58:f3:ac:70:
3b:ba:19:29:bc:61:d7:57:43:dd:64:45:ad:e6:af:
ca:90:9c:26:cf:05:08:40:4b:c2:16:15:bc:65:12:
73:38:39:77:ea:5e:ba:16:ce:68:e0:ec:22:a4:c5:
10:48:5a:f8:1f:1b:71:c9:cf:1f:61:43:ce:96:6f:
b2:98:05:c2:04:9b:d6:f0:84:10:65:1c:85:84:90:
98:e1:3c:84:e5:b3:fa:4a:77:b4:0e:54:57:6d:44:
86:3e:aa:e7:ec:95:75:1a:24:1d:8b:60:7f:3a:61:
68:23:94:1b:77:57:de:69:fc:aa:36:ba:53:cb:39:
78:fe:53:41:ef:80:75:58:b5:99:a7:a7:f7:3c:01:
44:43:74:23:ac:af:b1:b4:05:8f:41:9d:96:7a:7a:
e4:43:76:a5:e1:23:5e:77:df:01:41:d3:43:a6:d9:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BF:1C:F9:89:33:9C:E7:4B:6B:1B:6F:33:C4:81:BC:4B:C9:75:48
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/cb8c-YkznOdLaxtvM8SBvEvJdUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.224.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e2:15:f4:e4:cc:da:3f:67:f3:0f:ef:67:f7:38:69:b8:d9:
12:47:f4:a9:c3:3f:11:da:4d:4d:55:32:3c:cf:33:2e:04:f6:
49:d0:51:1a:2d:e3:e8:f6:3f:84:56:9f:ba:97:20:a4:fa:ed:
27:bb:c0:b6:86:83:47:ce:77:60:d6:e0:56:55:cb:2e:3d:af:
57:23:42:35:15:20:03:10:31:08:3c:ef:95:95:a3:fb:ae:a4:
1c:eb:5e:5b:e0:e9:93:35:f3:6e:82:e0:1f:01:ee:d4:9d:59:
03:d3:f0:eb:8a:1c:84:a3:f5:ad:16:fd:af:24:19:47:49:62:
48:25:0c:f1:52:90:9f:0c:e7:90:c9:91:e0:2e:e8:82:61:aa:
7a:93:83:9d:67:0a:3d:29:2c:03:21:7f:c0:1d:eb:6c:76:a2:
bf:ec:1f:bf:fe:d6:02:17:6f:3a:6d:6e:fc:3d:cf:13:d4:ea:
c0:13:a4:bb:2c:84:34:24:bf:25:5f:3b:b2:88:31:f1:fa:19:
2d:a8:16:4c:71:71:11:44:48:81:ad:a8:b6:71:9f:c8:d2:16:
8e:04:5b:d9:66:f3:28:da:d8:6c:d3:09:43:ab:73:d3:55:6c:
d4:9a:42:4f:cd:d3:20:40:63:07:35:79:2a:95:89:e9:11:42:
3e:35:51:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org