Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8SY6t65JtPDt2pC_2QyozgfwtJo.roa
File: 8SY6t65JtPDt2pC_2QyozgfwtJo.roa (raw, json)
Hash identifier: 08Dj20do5S+PBtJkGZ3gArSValZK4/XhKsCbgW1CYzY=
Subject key identifier: F1:26:3A:B7:AE:49:B4:F0:ED:DA:90:BF:D9:0C:A8:CE:07:F0:B4:9A
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018CC56E0E1094660FBA4E2DDA0C603AD560
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8SY6t65JtPDt2pC_2QyozgfwtJo.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.246.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jan 2024 17:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0e:10:94:66:0f:ba:4e:2d:da:0c:60:3a:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1263ab7ae49b4f0edda90bfd90ca8ce07f0b49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:6a:d2:3e:37:fe:62:7c:81:88:30:9c:e2:
89:8e:54:13:87:f8:09:e5:55:de:da:18:29:ce:a6:
7e:57:7b:34:8e:56:5b:01:d6:be:fa:65:7f:c8:af:
b8:4b:26:55:69:f4:87:81:f2:6c:e1:88:f7:57:d4:
d2:3b:a1:28:2f:f8:e0:12:fd:f8:81:ae:3f:66:7a:
d7:a1:29:50:5a:65:72:6e:d8:64:38:47:80:21:1c:
3f:96:bb:42:88:3c:ff:7e:1c:48:27:b0:6e:58:77:
f3:e0:40:9a:1f:6d:aa:42:b5:65:10:c8:aa:4f:04:
b3:f3:65:ab:4b:a7:99:72:d4:ef:6b:0d:f1:be:3e:
57:f0:dd:36:d0:0b:b1:94:a9:16:8c:0d:a0:9d:6b:
21:d4:03:9d:57:e9:1d:d4:7e:09:8d:c1:b8:e7:3b:
be:2e:af:fb:ae:c8:a9:98:e3:34:d3:c8:3e:33:11:
43:ba:cd:2e:7a:35:d9:8c:75:35:94:27:69:5d:2a:
1b:71:eb:01:bd:92:d2:c1:5c:2a:86:9c:30:ff:34:
7e:02:e9:ef:88:e2:cb:2b:b3:d7:99:e0:83:75:d6:
6b:9e:c6:45:6f:d4:2a:05:c2:f4:5b:49:cd:ed:53:
1b:44:5e:6f:cd:fc:98:ff:8c:da:2b:7f:0f:95:76:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:26:3A:B7:AE:49:B4:F0:ED:DA:90:BF:D9:0C:A8:CE:07:F0:B4:9A
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8SY6t65JtPDt2pC_2QyozgfwtJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
17:de:48:f5:3a:6f:01:ac:a8:69:4e:7a:13:13:59:24:ee:cb:
84:d1:6c:dc:df:c3:c4:bd:7b:e1:a5:92:0d:3b:3d:ed:a0:32:
2c:43:bb:18:da:e5:74:1b:5e:7b:11:a6:e4:a3:86:a5:96:58:
3e:7c:52:dc:4c:bb:69:29:88:5a:29:e1:6b:14:8a:d3:5a:b4:
d2:3d:c5:c0:94:b4:dd:8f:16:67:70:ea:3d:b6:6e:b9:37:b8:
f7:fb:d8:84:23:a2:ec:4d:59:a9:59:e9:af:c7:86:1f:d5:3e:
2d:9e:db:a3:51:99:2d:4e:28:18:1b:fb:b0:c1:b0:cd:72:df:
7a:2a:6b:20:c1:81:57:98:8e:ba:80:41:57:5b:b5:dd:83:94:
cd:50:09:a4:b7:2e:c7:74:8f:ab:af:ac:bf:60:37:1b:4b:04:
e1:6a:a2:3b:75:21:38:31:a8:cd:c8:b2:6c:8d:65:dc:99:04:
54:4c:31:03:be:f2:9f:38:91:1e:c6:2b:b1:39:b5:94:85:86:
a5:e2:a5:06:5e:2d:12:d1:1b:32:4a:9f:b6:f9:b5:83:a3:fe:
2b:50:0a:3c:2f:ac:53:bf:24:b8:36:b9:af:b7:6b:a1:29:82:
dc:71:2b:11:2c:05:df:17:5d:aa:19:f4:64:0c:74:0d:c4:c6:
ac:ee:84:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbg4QlGYPuk4t2gxgOtVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjQwMTAxMTQyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTI2M2FiN2FlNDliNGYwZWRkYTkwYmZkOTBjYThjZTA3ZjBiNDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B9q0j43/mJ8gYgwnOKJjlQTh/gJ
5VXe2hgpzqZ+V3s0jlZbAda++mV/yK+4SyZVafSHgfJs4Yj3V9TSO6EoL/jgEv34
ga4/ZnrXoSlQWmVybthkOEeAIRw/lrtCiDz/fhxIJ7BuWHfz4ECaH22qQrVlEMiq
TwSz82WrS6eZctTvaw3xvj5X8N020AuxlKkWjA2gnWsh1AOdV+kd1H4JjcG45zu+
Lq/7rsipmOM008g+MxFDus0uejXZjHU1lCdpXSobcesBvZLSwVwqhpww/zR+Aunv
iOLLK7PXmeCDddZrnsZFb9QqBcL0W0nN7VMbRF5vzfyY/4zaK38PlXbnAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPEmOreuSbTw7dqQv9kMqM4H8LSaMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvOFNZNnQ2NUp0UER0MnBDXzJReW96Z2Z3dEpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUPboMA0G
CSqGSIb3DQEBCwUAA4IBAQAX3kj1Om8BrKhpTnoTE1kk7suE0Wzc38PEvXvhpZIN
Oz3toDIsQ7sY2uV0G157Eabko4alllg+fFLcTLtpKYhaKeFrFIrTWrTSPcXAlLTd
jxZncOo9tm65N7j3+9iEI6LsTVmpWemvx4Yf1T4tntujUZktTigYG/uwwbDNct96
KmsgwYFXmI66gEFXW7Xdg5TNUAmkty7HdI+rr6y/YDcbSwThaqI7dSE4MajNyLJs
jWXcmQRUTDEDvvKfOJEexiuxObWUhYal4qUGXi0S0RsySp+2+bWDo/4rUAo8L6xT
vyS4Nrmvt2uhKYLccSsRLAXfF12qGfRkDHQNxMas7oRy
-----END CERTIFICATE-----
Generated at Sat Jan 13 20:21:54 2024 by rpki-client on console-fra.rpki-client.org