Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/5LFncs_TMx0q0MaWeS7hwx0bElQ.roa
File: 5LFncs_TMx0q0MaWeS7hwx0bElQ.roa (raw, json)
Hash identifier: ABNfhOFM9ZtWgYaSactucLFIxzs/v2Z/ja1b50oC0T4=
Subject key identifier: E4:B1:67:72:CF:D3:33:1D:2A:D0:C6:96:79:2E:E1:C3:1D:1B:12:54
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018E0FA95CF1ED283C1E6E70F5BAA705EC91
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/5LFncs_TMx0q0MaWeS7hwx0bElQ.roa
Signing time: Tue 05 Mar 2024 17:29:01 +0000
ROA not before: Tue 05 Mar 2024 17:29:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.246.229.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Mar 2024 15:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:a9:5c:f1:ed:28:3c:1e:6e:70:f5:ba:a7:05:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Mar 5 17:29:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4b16772cfd3331d2ad0c696792ee1c31d1b1254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:0a:dc:74:1a:78:37:ff:3e:21:ae:49:4d:
74:8f:e1:01:59:35:ea:be:e1:20:bb:9c:a0:14:f6:
60:a7:c6:0a:93:41:78:58:4f:86:88:1b:9e:af:cb:
11:21:82:09:9b:fe:f0:30:fb:fb:c1:9a:4c:00:a8:
02:de:ca:53:80:64:92:45:4a:7f:63:2b:f6:d7:5f:
8a:f3:48:2a:f7:fd:dd:b8:9f:33:66:3f:bf:f4:2d:
88:22:cd:6f:e7:09:49:28:af:f4:3b:28:9b:8b:7e:
9e:ac:f1:29:de:df:dc:24:88:99:fa:be:af:93:01:
54:93:ba:11:72:21:c4:2c:fe:16:3c:73:32:6b:0d:
77:d4:54:13:9a:9e:5c:c0:da:1a:1a:f1:44:77:44:
db:d9:1c:6a:17:49:69:92:0b:ba:6c:0e:d5:e3:4c:
15:18:03:71:3d:fc:be:81:2d:37:7f:14:01:85:19:
d5:f7:26:13:61:b0:5a:74:62:98:ac:d4:b2:0e:74:
55:f3:64:84:49:32:ed:19:f5:a8:db:5f:20:af:00:
7b:6a:55:18:7f:2d:c1:03:50:bc:8f:f9:9e:42:01:
dc:a0:a1:4e:d2:40:9d:45:84:77:2c:68:60:b5:5f:
9a:f2:09:73:3e:91:9e:69:3d:34:ca:05:e6:27:89:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B1:67:72:CF:D3:33:1D:2A:D0:C6:96:79:2E:E1:C3:1D:1B:12:54
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/5LFncs_TMx0q0MaWeS7hwx0bElQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.229.0-80.246.230.255
Signature Algorithm: sha256WithRSAEncryption
87:4a:a4:e2:76:e2:5c:a8:18:a7:21:df:b3:c0:bc:eb:fb:b7:
33:71:68:ad:89:06:7e:b3:55:5c:e3:92:b2:ae:9a:73:3c:9e:
2b:1e:d8:5d:2d:56:35:b6:fc:01:76:58:4b:a0:00:38:08:06:
ae:6e:bc:44:9f:c5:0f:14:d1:e9:a7:7a:ae:98:02:70:4e:c8:
cc:b9:90:ae:6f:d7:68:a0:b6:db:ff:29:9e:36:e1:0e:01:a0:
ae:a0:4e:9e:e6:7d:fc:21:6c:6b:23:66:58:f0:65:1d:5c:15:
6d:00:74:5b:e6:27:b6:94:44:39:e8:f4:88:45:07:93:9b:ac:
58:c4:2e:bc:65:a1:7e:ce:4e:39:9a:bf:53:c0:54:0b:b0:41:
ad:9d:38:f6:8c:46:40:6d:b1:04:66:68:8b:c1:07:f7:6f:67:
75:22:d8:24:7c:fa:4c:19:74:bc:f3:36:64:7e:11:62:1e:b5:
97:6f:2a:95:6d:54:c1:a1:3b:e7:7f:7b:5c:f1:c3:e9:6d:f9:
ab:26:0e:79:79:11:4e:e3:1e:8b:fc:3a:a1:02:ae:27:33:5c:
bc:a7:0c:06:84:06:b6:52:6b:5e:22:20:b6:29:f5:b2:1f:9d:
c8:7b:3c:0f:3f:44:a1:7f:83:6a:f4:eb:53:4f:e0:cd:7c:36:
6c:f9:47:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:31 2024 by rpki-client on console-ams.rpki-client.org