Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/4GWexDlkz2doIgvI__puaHdjYFw.roa
File: 4GWexDlkz2doIgvI__puaHdjYFw.roa (raw, json)
Hash identifier: 1Pz8P6ekUEQGLC4ViTlgD3o0onffjvGM5CBIQ5zylls=
Subject key identifier: E0:65:9E:C4:39:64:CF:67:68:22:0B:C8:FF:FA:6E:68:77:63:60:5C
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0185E57D5247FD767EBFFF913D8476C2924D
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/4GWexDlkz2doIgvI__puaHdjYFw.roa
Signing time: Tue 24 Jan 2023 20:34:33 +0000
ROA not before: Tue 24 Jan 2023 20:34:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 80.246.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:7d:52:47:fd:76:7e:bf:ff:91:3d:84:76:c2:92:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 24 20:34:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0659ec43964cf6768220bc8fffa6e687763605c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:7a:63:52:7d:a7:2d:89:d4:ca:ba:4d:52:
34:7e:a7:f4:fb:a0:70:8f:46:53:93:45:18:82:51:
84:c8:f0:86:9d:6c:3c:30:62:1b:da:a1:f7:96:07:
b8:5a:2c:1a:c6:6a:49:dd:fa:52:69:0b:f6:4e:2f:
c1:cd:d3:5c:c5:76:5b:8f:71:ee:05:42:bc:02:59:
21:6f:8c:99:4d:92:37:23:8b:d7:6a:07:4d:96:0e:
de:b9:fb:6a:f4:18:0a:41:28:cf:54:92:56:dd:6e:
5e:03:4a:b9:e3:4f:46:f9:d3:ed:84:38:52:5b:fb:
fe:d4:55:29:e7:fc:5b:a9:44:b8:b1:aa:07:3c:08:
9a:ed:60:a6:4b:dc:75:8a:18:07:2d:94:46:18:0a:
45:15:48:c6:18:8a:45:1c:e5:20:1d:a3:03:82:9b:
b8:a5:c9:91:02:ff:fa:e5:93:02:d3:47:3c:ab:30:
32:f8:54:f1:82:35:2b:6d:6f:7d:05:b0:9d:af:95:
c4:ce:a8:52:c7:c3:91:9e:37:dd:e4:a3:58:1b:0c:
e0:30:a7:e1:d3:9a:89:93:63:03:21:b4:76:30:f2:
40:bd:57:f0:d7:f4:d3:51:dd:7f:ed:c9:c4:86:90:
fb:c3:60:10:f4:94:3f:f5:0a:ff:fa:d5:50:4b:1a:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:65:9E:C4:39:64:CF:67:68:22:0B:C8:FF:FA:6E:68:77:63:60:5C
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/4GWexDlkz2doIgvI__puaHdjYFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:96:28:b1:12:e3:20:6d:69:65:ab:43:66:ea:74:8c:6e:e4:
af:0c:85:c1:f6:0f:cd:95:8e:0c:2e:88:9b:5a:78:c5:a5:5c:
72:1a:17:ff:9f:e9:86:6a:e1:11:d0:a6:6f:78:2e:4c:8c:4d:
f2:27:4b:66:81:3d:48:02:d6:1a:87:8d:62:92:b3:9c:0e:13:
6c:72:a0:63:ae:99:cb:9c:64:58:16:18:f1:22:10:b8:85:01:
23:85:bb:02:73:f9:1c:1d:aa:08:b0:1d:83:b8:b9:25:60:2b:
8c:97:8a:d8:47:08:13:d4:f1:41:69:41:e2:42:4a:c3:5e:46:
a1:ec:cf:1f:e8:c7:3a:a7:9a:87:3f:ce:0d:90:b5:97:eb:f7:
6a:f6:4b:0e:34:ef:b3:ac:93:f1:d1:d9:04:8c:5a:72:ef:79:
ba:16:ac:d9:2d:9f:8e:0d:90:34:ba:f0:70:ea:0b:38:60:ae:
3d:a2:9d:f7:a7:b1:f2:f0:5f:74:bd:74:ce:8f:a8:68:6d:ef:
0c:91:13:d4:7d:7c:eb:f0:1b:79:bf:7e:c7:b8:dd:0f:54:f4:
cf:f4:91:31:0a:08:d8:e5:ee:65:fa:7f:7d:3b:9d:2d:e8:c7:
e8:59:ed:ca:1b:b7:e5:9d:42:7e:5d:77:08:f0:06:40:66:b3:
40:63:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 08:19:37 2023 by rpki-client on console-ams.rpki-client.org