Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8rPSnJcU51nwE5J-lPcAhq0_60M.roa
File: 8rPSnJcU51nwE5J-lPcAhq0_60M.roa (raw, json)
Hash identifier: N9h/4sktb7Be98PExzYhaymIUABJxToBmsSDMmwoTWY=
Subject key identifier: F2:B3:D2:9C:97:14:E7:59:F0:13:92:7E:94:F7:00:86:AD:3F:EB:43
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01856C81405230C3A54B81CA6970D03AE2E9
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8rPSnJcU51nwE5J-lPcAhq0_60M.roa
Signing time: Sun 01 Jan 2023 08:44:48 +0000
ROA not before: Sun 01 Jan 2023 08:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 80.246.233.0/24 maxlen: 24
80.246.232.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
80.246.235.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:40:52:30:c3:a5:4b:81:ca:69:70:d0:3a:e2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 08:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2b3d29c9714e759f013927e94f70086ad3feb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:8c:7d:bb:41:a6:77:db:07:3e:78:25:e9:
45:c6:e6:81:12:81:6b:7d:e3:6b:bb:18:95:be:38:
a1:bd:c9:92:a4:1d:0c:f3:9e:a1:cb:1f:3c:a0:33:
bc:1f:29:d6:3a:21:4e:c4:66:9a:9b:c0:b2:b4:ba:
77:ba:7b:74:25:b1:3f:c6:18:da:60:db:ab:10:fb:
43:8f:64:2b:25:21:80:97:61:3c:fb:29:36:86:61:
03:0b:38:84:ff:ef:04:af:ec:94:a4:46:b0:73:08:
38:5d:0e:32:9e:65:83:28:3f:aa:16:1b:90:a4:1a:
ee:54:15:ca:a6:06:65:83:9d:d9:1e:1f:d4:a0:cf:
6c:05:f4:af:99:f3:49:15:95:dc:19:05:1e:e2:f1:
27:c4:77:18:96:b2:91:3a:85:f6:7d:0a:45:4a:8d:
66:1a:35:7e:29:9e:fe:bc:18:37:74:c8:e2:f7:1d:
e2:f7:ec:6e:12:42:e6:69:96:3f:32:98:4d:04:84:
e9:03:56:ef:fb:a2:44:62:86:37:97:24:38:5c:e0:
d2:4d:da:5f:87:0a:a5:a4:bd:2d:20:2b:e3:08:c7:
59:9d:b4:66:d0:af:2f:cf:57:d3:9c:66:1a:56:48:
2c:b3:e8:dc:91:c6:6c:de:60:b9:f4:05:03:fd:56:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B3:D2:9C:97:14:E7:59:F0:13:92:7E:94:F7:00:86:AD:3F:EB:43
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8rPSnJcU51nwE5J-lPcAhq0_60M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0-80.246.236.255
Signature Algorithm: sha256WithRSAEncryption
56:9e:6f:44:08:a6:9f:36:23:61:ae:9f:93:cf:0d:75:8c:9e:
8a:4a:9e:6d:55:bd:0c:08:bb:55:4c:38:ff:54:11:b4:45:94:
f4:53:97:36:7c:88:79:07:42:d5:22:a6:fb:46:72:8d:06:54:
92:f8:1f:c1:1f:52:d7:d5:d9:25:d8:6c:96:a4:40:c7:66:e7:
1d:11:e9:51:c2:c1:e0:f3:bc:2d:8d:12:6c:51:17:ba:da:cc:
52:03:20:f0:c5:b7:72:c0:9a:bd:0f:e2:f8:a4:91:b9:94:b7:
7f:c8:cf:6f:c6:a7:b9:ef:a4:b1:8c:d3:3a:c9:e8:09:8a:ec:
7c:1e:66:97:88:f1:64:a5:d1:39:64:b6:a5:62:8d:de:3c:c0:
7b:e2:94:28:ce:e3:aa:89:be:cc:f1:02:88:f0:59:51:38:f8:
78:8a:be:e8:fa:11:7d:89:76:a4:42:f3:93:93:86:bd:b3:ea:
24:d7:3c:08:99:b9:ee:18:9b:25:31:2d:c7:81:27:b2:21:69:
32:6e:67:6e:7f:b2:ba:25:c1:22:61:9a:ae:25:c2:e3:14:cb:
70:1b:43:1c:12:c1:07:fd:99:fb:3e:4f:1f:2e:8a:c9:91:4a:
5e:0b:9e:0e:6f:42:35:72:85:2d:e0:ad:e5:a8:c3:7e:cb:cf:
eb:82:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-ams.rpki-client.org