Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/5bkaCnEnBw4ukUjnlRsl4o01zuw.roa
File: 5bkaCnEnBw4ukUjnlRsl4o01zuw.roa (raw, json)
Hash identifier: KIT68M1p/a+jeih9rP8b3w5IfMF1l50/y3Xge+Kio00=
Subject key identifier: E5:B9:1A:0A:71:27:07:0E:2E:91:48:E7:95:1B:25:E2:8D:35:CE:EC
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018DD15BC402548862FDD3091339D7143A88
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/5bkaCnEnBw4ukUjnlRsl4o01zuw.roa
Signing time: Thu 22 Feb 2024 15:07:48 +0000
ROA not before: Thu 22 Feb 2024 15:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 80.246.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 15:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:5b:c4:02:54:88:62:fd:d3:09:13:39:d7:14:3a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Feb 22 15:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5b91a0a7127070e2e9148e7951b25e28d35ceec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:14:52:06:0f:ee:1e:8d:34:27:01:7b:43:
28:94:a6:95:6c:33:aa:c1:7f:af:98:e5:77:df:45:
08:f5:3d:f2:62:d8:90:c1:32:ce:98:c0:7a:2b:ec:
7b:71:69:0d:ec:d8:d3:f2:d1:0a:53:9e:2f:a7:3a:
07:a1:e2:bb:f3:39:62:69:a0:eb:0b:6f:4d:48:78:
d9:0a:eb:95:12:7a:26:91:6e:c6:9d:a4:a9:5b:be:
05:33:cd:ab:6b:e2:73:31:da:39:fc:86:64:eb:e2:
af:fb:9b:93:e0:14:3b:31:5a:27:d9:b5:3b:85:1b:
a3:fb:97:0b:d1:5a:82:9d:81:e1:f0:2f:b6:3e:11:
a2:a2:23:87:1a:ea:33:8c:ec:7e:45:c8:22:7d:e2:
e0:b3:05:51:3f:2c:2d:09:a9:93:3d:48:5f:b0:6d:
e0:60:87:ae:59:26:58:8d:17:5a:fc:12:bc:bf:15:
9d:7f:ff:a7:6f:14:b6:a8:01:5c:b3:a4:b8:59:1e:
24:70:c9:19:0e:11:3e:c4:47:08:b3:49:0a:cf:94:
9e:d0:4f:40:f8:1d:d5:10:65:98:3c:53:95:a0:40:
32:ba:6a:d4:a3:bc:f2:49:8b:8c:e4:97:0f:22:cc:
28:09:ee:de:6d:30:e2:33:d1:13:20:0a:25:c2:b7:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B9:1A:0A:71:27:07:0E:2E:91:48:E7:95:1B:25:E2:8D:35:CE:EC
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/5bkaCnEnBw4ukUjnlRsl4o01zuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.227.0/24
Signature Algorithm: sha256WithRSAEncryption
44:59:bf:30:ef:13:21:fc:1d:85:04:84:e0:1e:13:c0:5c:b6:
64:3d:06:2f:af:a1:c6:20:ca:b3:89:3c:37:da:71:18:1b:fe:
33:53:6e:b0:bc:f8:79:9c:dd:79:87:98:00:69:a9:77:ec:ea:
4b:f6:91:23:70:ce:43:ca:94:76:0e:ce:df:95:ed:d4:2c:45:
1f:94:fc:c3:7d:17:9f:ea:13:3b:72:c5:8d:d0:51:a8:29:90:
ab:a5:13:6e:cb:4f:26:6e:cb:36:50:87:63:91:03:72:ce:0a:
7e:02:96:9c:cd:2b:ed:70:c0:82:db:6e:74:f1:51:ff:32:51:
5e:4e:1d:67:8b:31:67:17:8f:cb:0e:75:43:c7:63:3a:96:42:
13:8e:d7:cd:2d:40:66:8c:da:fb:f8:96:85:c9:81:97:aa:47:
e4:53:32:90:13:12:06:2c:52:f5:18:7f:f7:ce:73:ac:8b:e9:
a0:40:f4:e4:8d:97:fe:4d:fb:cf:27:bb:e3:e7:e4:d0:6a:8a:
8f:2e:c5:7e:74:ee:62:07:58:ce:cf:4d:94:19:be:cf:ec:53:
1c:2e:d3:69:e6:17:c0:12:40:b5:6e:f0:93:d2:b6:05:2d:db:
40:a9:28:d6:e7:18:5f:f7:a0:2f:ab:39:5a:ee:30:f8:2c:69:
aa:62:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 18:51:31 2024 by rpki-client on console-ams.rpki-client.org