Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8k7GUhi9i1TF45bhivf1Vs0GbSs.roa
File: 8k7GUhi9i1TF45bhivf1Vs0GbSs.roa (raw, json)
Hash identifier: iHDrl2faCrPKzjsF5mJPpTTmNOI7sbiJ0OWRWprGOC0=
Subject key identifier: F2:4E:C6:52:18:BD:8B:54:C5:E3:96:E1:8A:F7:F5:56:CD:06:6D:2B
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018B1B5D398379A0C41AC57841090A027133
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8k7GUhi9i1TF45bhivf1Vs0GbSs.roa
Signing time: Tue 10 Oct 2023 20:52:56 +0000
ROA not before: Tue 10 Oct 2023 20:52:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198510
IP address blocks: 80.246.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:5d:39:83:79:a0:c4:1a:c5:78:41:09:0a:02:71:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 10 20:52:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f24ec65218bd8b54c5e396e18af7f556cd066d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:28:ce:a3:e5:a4:ae:58:c9:96:9d:35:bb:
bc:3c:d1:93:39:67:0d:23:7f:81:ca:75:f1:de:0a:
ca:f8:f8:16:9c:4b:54:c2:c0:98:b4:d0:d9:10:6c:
fd:56:a0:f7:0b:24:a8:ae:ef:1c:6c:c2:a5:77:ca:
1d:4a:99:dd:8d:5b:07:8a:e7:ff:70:55:64:9c:09:
1f:ae:9f:86:61:0d:f3:b9:38:0c:51:ff:ec:90:fd:
7f:d0:1e:92:d5:aa:bb:f4:23:a7:44:5f:30:12:fd:
69:3c:ae:df:07:27:a6:34:20:f6:b1:68:6c:ff:ba:
10:dc:88:bc:ba:53:00:8d:69:5f:5b:ac:f3:c9:84:
cc:4b:e2:12:6c:0c:a6:28:5d:73:73:b6:4d:22:58:
4b:91:33:0d:7d:4b:af:fe:9b:9f:a2:ef:e9:43:76:
82:b4:e0:e7:e1:f4:fe:c5:14:26:85:d8:46:cc:fb:
3a:c3:e8:bb:08:7e:aa:5a:da:4e:d8:ae:b3:82:a6:
85:e1:9f:85:ba:2c:77:dc:2c:50:75:cb:5b:dd:16:
aa:70:45:4c:e4:dc:7c:03:1d:bd:2e:69:24:cc:11:
00:99:87:5e:2c:56:23:37:bf:bc:ec:7f:59:31:d2:
c5:ab:f2:9e:f2:25:2c:41:50:27:e3:29:01:c0:7d:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4E:C6:52:18:BD:8B:54:C5:E3:96:E1:8A:F7:F5:56:CD:06:6D:2B
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8k7GUhi9i1TF45bhivf1Vs0GbSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:de:72:5e:dc:36:31:1e:54:50:d9:86:50:e9:37:6f:13:83:
32:33:59:da:ab:50:13:8c:e9:6c:73:fc:c9:70:e6:0f:74:d3:
aa:a6:4a:91:9b:00:58:d2:85:01:98:56:0e:7f:8c:fa:89:b9:
a3:b8:6d:63:54:19:66:99:9e:2b:c1:7a:eb:a4:25:7a:ca:07:
a9:b0:0c:53:54:4d:33:79:17:13:ee:95:d2:3a:b0:e3:17:34:
df:75:26:ae:f3:b4:00:4b:51:fe:ae:12:05:87:2f:a2:3c:a5:
01:e8:0b:fc:0d:0f:80:7a:6f:05:70:68:8a:38:cb:fd:3d:03:
b0:14:f1:8e:07:9d:c9:f4:25:ab:c6:70:42:2e:df:bf:2f:07:
e5:52:2f:77:79:67:10:df:df:e3:5f:ac:89:1d:59:b8:0a:da:
bb:71:81:1d:82:61:1b:00:ac:e7:a9:42:c6:5f:a3:69:75:64:
d0:ff:f8:38:90:05:52:5a:fb:fa:ea:e2:69:07:4a:e9:66:1b:
3c:4c:69:df:1b:33:53:30:bc:65:29:d6:9c:7d:7e:73:d4:a1:
c5:7b:ae:33:61:10:64:f8:d1:7a:bd:03:9b:a9:01:6f:8d:16:
b1:27:ac:c8:50:48:23:18:89:9f:db:86:d0:5e:3f:8c:3e:98:
99:8b:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org