Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8E0w091JeKRgkqWgomypEMIwnIY.roa
File: 8E0w091JeKRgkqWgomypEMIwnIY.roa (raw, json)
Hash identifier: 4neRH8c65SoHHC7xiZ/oSFB5opTw80P9dEGvTojkcY8=
Subject key identifier: F0:4D:30:D3:DD:49:78:A4:60:92:A5:A0:A2:6C:A9:10:C2:30:9C:86
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0192AAE4D76966EEBD7EF5FAA59D2AA7E579
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8E0w091JeKRgkqWgomypEMIwnIY.roa
Signing time: Sun 20 Oct 2024 17:06:16 +0000
ROA not before: Sun 20 Oct 2024 17:06:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.246.229.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 15:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:aa:e4:d7:69:66:ee:bd:7e:f5:fa:a5:9d:2a:a7:e5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 20 17:06:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f04d30d3dd4978a46092a5a0a26ca910c2309c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:9a:cb:78:6a:6f:b8:15:87:48:1e:8d:d8:
90:37:0f:ee:98:b7:70:42:c9:8d:f5:eb:76:22:e5:
39:fd:18:9f:40:b5:bd:65:e7:31:dc:9b:fa:9c:df:
c0:ac:02:02:ec:4a:a2:35:06:1b:ee:0a:11:13:28:
bb:80:20:e1:8c:07:b2:d2:cd:9c:e4:8a:2d:2d:24:
a2:a8:a2:69:e7:26:8f:54:32:7f:36:19:95:19:da:
aa:36:2d:8f:f7:5d:d3:3c:82:96:8f:1f:44:8c:86:
c6:26:f4:88:03:01:43:42:fe:d3:17:a4:3e:08:a8:
c5:80:94:31:da:b7:c4:44:e4:c2:04:d1:99:77:37:
f5:c6:4f:a7:df:1e:83:d6:20:b9:82:f3:70:98:5b:
ab:9c:25:be:86:b3:c1:35:f7:aa:58:be:05:8f:7d:
12:26:17:46:98:18:c6:91:5b:90:91:88:4e:5e:2b:
5b:ed:23:bd:cf:8b:54:bd:fe:a6:c5:17:20:b7:58:
0e:23:79:16:fc:51:89:22:5c:c7:83:b5:c3:59:40:
71:4f:86:18:18:48:25:a5:d6:39:b7:fb:d4:23:dc:
16:63:a9:e0:08:db:be:4e:54:af:3d:15:65:dd:32:
52:50:39:2e:d0:1a:5a:c3:3a:46:db:b3:f6:82:54:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4D:30:D3:DD:49:78:A4:60:92:A5:A0:A2:6C:A9:10:C2:30:9C:86
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8E0w091JeKRgkqWgomypEMIwnIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.229.0-80.246.230.255
Signature Algorithm: sha256WithRSAEncryption
6e:59:e1:a9:07:66:dd:ad:d2:8a:2b:58:36:56:ce:11:16:5f:
5e:2a:9b:9c:da:15:05:46:1f:7c:d7:8b:6b:86:72:33:1f:9d:
4c:4b:45:75:45:8f:c3:d0:f9:4c:80:be:eb:1b:63:9d:f5:48:
30:af:42:93:4a:c0:7f:53:dc:5a:9f:b0:50:e4:55:8e:bd:08:
5e:6a:ab:b4:e0:03:34:c1:52:e8:07:c7:5a:ec:a8:b6:f0:c9:
c5:1b:f1:64:1a:56:00:49:f5:b7:8b:7a:16:fe:2e:72:64:38:
ba:17:67:ae:b2:1f:bb:a7:b0:8f:da:cb:25:bf:d0:f8:1d:64:
3f:f2:ff:ce:1a:ba:e1:bb:d4:7c:78:77:e1:26:77:bc:eb:44:
92:5c:46:d4:ae:74:33:67:bf:c9:ce:1a:39:3c:45:40:f7:90:
48:f3:fc:89:1f:44:34:a6:04:d9:11:43:50:28:1a:7f:05:55:
85:7e:99:46:fd:ad:23:79:5b:7c:ee:00:06:c1:30:fc:51:64:
3c:66:6a:2e:f3:2f:7f:ae:73:00:dd:e3:15:9d:90:12:80:4b:
36:2a:9d:7a:9e:43:1d:6f:a2:19:19:5a:92:7e:b2:b6:2e:0d:
fd:57:77:0b:f2:8e:ce:1b:46:b0:b1:15:72:2b:54:f8:87:d9:
78:21:fa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 18:01:05 2024 by rpki-client on console-fra.rpki-client.org