Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/Rvp6AnkuCYKoV4wHGTydGAvOhb8.roa
File: Rvp6AnkuCYKoV4wHGTydGAvOhb8.roa (raw, json)
Hash identifier: w6mzcW01R2Zsqn1AjY6J8OUckK34wrhAglVr1xx48Yw=
Subject key identifier: 46:FA:7A:02:79:2E:09:82:A8:57:8C:07:19:3C:9D:18:0B:CE:85:BF
Certificate issuer: /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial: 0188BD819D116B06EAA7FAA4EDD8A47C94CA
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/Rvp6AnkuCYKoV4wHGTydGAvOhb8.roa
Signing time: Thu 15 Jun 2023 05:22:48 +0000
ROA not before: Thu 15 Jun 2023 05:22:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21104
IP address blocks: 80.86.226.0/24 maxlen: 24
80.86.225.0/24 maxlen: 24
80.86.224.0/24 maxlen: 24
80.86.224.0/20 maxlen: 20
80.86.230.0/23 maxlen: 24
80.86.228.0/24 maxlen: 24
80.86.227.0/24 maxlen: 24
80.86.233.0/24 maxlen: 24
80.86.232.0/24 maxlen: 24
80.86.237.0/24 maxlen: 24
80.86.236.0/24 maxlen: 24
80.86.236.0/23 maxlen: 23
80.86.235.0/24 maxlen: 24
80.86.234.0/24 maxlen: 24
80.86.239.0/24 maxlen: 24
2a03:3d00::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:81:9d:11:6b:06:ea:a7:fa:a4:ed:d8:a4:7c:94:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Validity
Not Before: Jun 15 05:22:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46fa7a02792e0982a8578c07193c9d180bce85bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:27:7a:45:3a:45:89:0d:a7:55:77:c4:88:34:
3b:2f:06:c7:dc:a5:fb:07:1d:4c:42:9d:89:8a:d2:
75:10:58:fb:de:83:82:bd:f8:01:70:2b:49:5a:a9:
34:61:d8:b5:37:63:47:00:8d:0c:1e:4a:bd:94:e8:
c5:ec:88:4a:a4:e0:83:71:50:e8:91:54:7a:00:01:
82:17:a5:75:f9:ce:89:9c:c9:12:05:29:a6:f9:3f:
c5:7e:b9:21:97:a1:01:76:d0:a6:94:8c:d1:73:77:
1e:56:c5:0d:67:74:66:a2:7e:29:4b:a7:ab:cc:a9:
d9:a4:ab:ae:3a:da:88:f5:ad:79:b9:49:9a:af:98:
7e:22:72:6c:d2:3a:37:ec:89:aa:d6:39:3b:c1:5f:
f6:10:77:0d:ee:73:9e:d7:42:a6:5e:50:2a:37:40:
13:b5:83:e1:69:fd:16:bd:fa:f7:55:d5:46:af:27:
d5:64:03:db:ca:e7:d7:d9:7d:d4:28:fd:0d:4a:db:
84:e7:c0:ae:06:02:fa:3a:a5:28:c2:79:18:5f:5d:
65:97:db:78:1c:77:8c:05:1f:22:e9:96:70:63:b2:
1e:a1:9e:0a:20:3c:c4:33:5a:42:ac:31:9d:31:3e:
b5:f8:c5:c2:a8:ee:aa:7e:fe:09:e1:04:9f:6f:2d:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FA:7A:02:79:2E:09:82:A8:57:8C:07:19:3C:9D:18:0B:CE:85:BF
X509v3 Authority Key Identifier:
keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/Rvp6AnkuCYKoV4wHGTydGAvOhb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.224.0/20
IPv6:
2a03:3d00::/32
Signature Algorithm: sha256WithRSAEncryption
c7:db:77:56:72:05:62:29:67:ff:fb:1c:8e:6c:40:40:a0:57:
f8:a1:6c:a8:40:ed:50:a2:73:1f:6e:f8:32:c9:2b:b2:21:4d:
e4:f0:12:c5:67:0d:b6:93:f6:a2:0b:26:41:1a:5d:e7:90:aa:
16:96:30:7c:ff:3b:f0:1c:d6:16:d9:6a:0e:57:f2:7c:5b:12:
b3:04:5d:e0:e9:5f:e5:79:9e:d1:52:a6:f0:40:fe:2b:64:0f:
ca:aa:ea:83:87:a0:ea:d3:65:c7:0f:93:3e:50:9c:ca:f9:e3:
f6:b4:3c:55:8e:b6:0c:be:c3:7c:86:ff:60:fb:f7:b1:7b:94:
f7:a6:e5:85:ea:b6:8b:5b:3b:10:8c:bc:85:fb:8d:28:9e:49:
49:1c:0d:94:27:70:7f:a3:ab:35:e2:21:cc:97:7f:5f:b4:f4:
d6:6a:8e:dd:57:e1:5d:96:46:4d:2b:02:36:93:94:a0:47:9b:
6d:39:09:76:45:a1:2c:5b:00:cb:d3:c3:3e:71:f5:d2:61:69:
59:da:b7:c6:cd:57:7f:ee:51:c4:d5:6e:2f:72:e2:3e:2b:42:
89:41:b0:31:4d:27:77:3c:e2:1e:50:47:c6:00:e4:58:3e:83:
2e:09:fc:31:0d:e8:ca:34:a3:4f:94:a5:fb:1e:cb:0a:09:17:
4a:6d:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:05 2024 by rpki-client on console-ams.rpki-client.org