Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/408hIdCs27_IlRMDawZOnNnmHo8.roa
File: 408hIdCs27_IlRMDawZOnNnmHo8.roa (raw, json)
Hash identifier: uLPC+nNZGzKVVqHOJRVq5e7FX5xGqQ/5FjoCACHMXrQ=
Subject key identifier: E3:4F:21:21:D0:AC:DB:BF:C8:95:13:03:6B:06:4E:9C:D9:E6:1E:8F
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0191D5AE1B00BB5A8B4682AD0FAF531538A3
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/408hIdCs27_IlRMDawZOnNnmHo8.roa
Signing time: Mon 09 Sep 2024 07:27:22 +0000
ROA not before: Mon 09 Sep 2024 07:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142561
IP address blocks: 80.246.224.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 09:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d5:ae:1b:00:bb:5a:8b:46:82:ad:0f:af:53:15:38:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Sep 9 07:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e34f2121d0acdbbfc89513036b064e9cd9e61e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:c4:65:75:81:5a:fa:51:58:64:ab:59:3a:
08:ca:8e:51:87:67:80:26:07:c2:01:79:c7:06:04:
91:d1:3f:61:15:47:ab:eb:e4:2b:bc:a0:48:d1:68:
20:90:b2:c0:42:29:28:03:38:dd:99:f1:7c:a0:d2:
8e:aa:70:2b:be:b6:5a:de:a7:0f:4e:86:a6:74:45:
87:a2:e1:71:cb:85:32:a3:86:b4:67:1c:3e:f4:5f:
78:c4:52:3e:57:08:f8:b1:12:33:bb:bc:77:34:eb:
11:2f:f5:ac:6d:e2:4c:a9:9c:60:c6:87:91:78:06:
ab:5d:9f:29:e9:85:ab:b3:ea:f8:3f:5c:4b:9e:11:
f5:eb:d0:d3:73:d8:7f:fc:00:dc:71:6a:ed:3e:5d:
d4:a3:ac:ce:88:1b:96:41:eb:bf:73:90:fc:ff:6e:
e0:ce:3a:1b:b6:aa:1d:b4:d5:0f:9f:48:ef:9a:5e:
96:60:37:bf:3a:d2:ac:fe:e1:af:6f:13:da:0b:19:
92:1f:95:e8:8b:54:c9:d1:e1:c8:37:a7:ff:7c:82:
dc:d8:fe:6d:5a:3c:36:2e:57:ef:82:e2:5f:3c:0c:
2d:b6:2d:42:7f:c4:66:0a:db:a1:b3:85:0b:73:e9:
92:6b:f4:90:de:c5:5a:a4:50:e4:33:16:ee:4a:e3:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:21:21:D0:AC:DB:BF:C8:95:13:03:6B:06:4E:9C:D9:E6:1E:8F
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/408hIdCs27_IlRMDawZOnNnmHo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.224.0/24
80.246.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9e:6e:74:5b:36:fe:66:3e:56:d9:44:f2:f6:10:5a:1a:26:
62:8b:d5:24:c3:36:8b:37:ad:55:86:2f:d6:3e:9e:7b:b4:90:
b2:be:49:c1:55:e2:6c:1d:a9:ff:fb:f9:11:c0:db:ff:87:d7:
e0:ee:0e:ee:b0:72:69:9b:a7:be:d4:eb:dd:c6:4c:0c:06:75:
9d:cc:cd:76:a9:d6:7b:b2:04:6b:4f:fa:ff:c5:45:e2:c3:f0:
f9:2c:fa:d1:8e:35:7c:a4:19:3c:e8:9f:82:2f:a0:a9:71:6b:
6a:8b:56:0a:2e:b0:30:81:e2:04:22:e5:6b:8a:63:d0:d8:02:
22:72:9b:5c:d6:9f:ef:b0:1e:ec:a7:9c:6a:52:75:c8:60:08:
ae:7a:83:ef:b4:5f:be:c9:da:e1:ef:89:61:e1:1f:99:8d:c3:
c9:e2:8b:91:dd:80:22:73:04:5b:9d:a9:e5:5b:62:5d:dd:19:
e6:fb:f9:4c:10:04:37:b7:0e:47:6b:bb:7c:37:f3:14:1b:9a:
9e:94:8b:31:fa:41:78:3c:dc:b2:ee:31:0d:e0:b4:e6:c6:b9:
e5:7c:3d:87:46:57:ab:f6:36:a0:fc:5b:95:0e:72:c1:1a:17:
ce:71:75:fd:23:c9:d7:f4:50:ca:eb:38:d5:9d:a7:18:10:50:
79:f4:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 13:24:22 2024 by rpki-client on console-fra.rpki-client.org