Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/EVhS-11z7j133CnJrqnF6rRpnrM.roa
File: EVhS-11z7j133CnJrqnF6rRpnrM.roa (raw, json)
Hash identifier: gyR6fo/sB+xHZzJr+Ke0vOu5FDLtVuiPItoOt/KeXxg=
Subject key identifier: 11:58:52:FB:5D:73:EE:3D:77:DC:29:C9:AE:A9:C5:EA:B4:69:9E:B3
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0186E5057BA9D87E2E5E50AF286EB5F7EC74
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/EVhS-11z7j133CnJrqnF6rRpnrM.roa
Signing time: Wed 15 Mar 2023 11:26:27 +0000
ROA not before: Wed 15 Mar 2023 11:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 80.246.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:05:7b:a9:d8:7e:2e:5e:50:af:28:6e:b5:f7:ec:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Mar 15 11:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=115852fb5d73ee3d77dc29c9aea9c5eab4699eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0b:61:b4:46:81:a2:ea:7d:bf:cb:79:a0:85:
a7:cb:b3:06:99:bd:1b:2c:6a:79:0f:c9:f7:39:d2:
c4:f1:71:35:90:a8:e2:50:a0:1f:32:1f:b1:2d:58:
c3:d2:fa:74:a1:4a:84:e1:a5:8c:17:f0:e7:71:5b:
4c:f9:4c:f6:89:4b:d2:a1:cd:b5:e3:8a:f0:61:58:
1d:df:f7:a2:a4:3b:12:16:87:93:7c:61:d9:17:0e:
fb:4c:aa:b7:5f:db:2e:40:3c:eb:47:26:33:1b:0c:
e4:f7:4e:c2:19:86:0e:8a:47:05:d8:e5:de:eb:35:
ce:dc:3d:3c:c9:82:b9:7a:81:4e:3d:b3:99:35:ce:
70:5e:3a:5b:7d:44:ad:c6:98:41:9f:64:67:a1:fc:
50:4f:c4:47:d1:e8:74:b4:95:b7:1e:ef:e8:7f:e3:
38:e9:8b:87:c1:46:af:20:dc:62:4b:35:0d:f5:32:
43:2f:bb:b7:b1:19:6b:ab:35:2c:22:e4:78:9a:c7:
6d:10:8b:0c:5b:e5:8a:a7:6b:de:5c:59:93:5c:5e:
4c:70:8f:3b:8a:b2:56:88:0a:cb:e9:21:14:50:15:
85:f8:98:64:1b:cb:be:b9:75:9a:db:9a:34:22:11:
fb:67:53:0b:81:1d:e8:dc:d3:91:f4:35:6a:57:f1:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:52:FB:5D:73:EE:3D:77:DC:29:C9:AE:A9:C5:EA:B4:69:9E:B3
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/EVhS-11z7j133CnJrqnF6rRpnrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.228.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1c:84:72:ab:3f:72:21:82:56:b9:91:ab:d9:0a:11:f0:fe:
d1:f3:4d:d6:2e:95:27:52:bc:2e:da:29:2d:8c:9c:23:c9:19:
b9:28:d4:42:93:3f:40:00:df:d8:fa:f5:9c:54:ca:b1:fb:38:
fd:b7:2c:f1:b5:0d:e4:9e:6e:d8:69:a1:38:de:e7:23:91:93:
f0:54:42:86:a8:c0:5e:36:aa:36:e2:ef:e7:1b:83:6f:9d:6a:
7e:29:40:bd:25:f1:2c:1a:55:8b:a5:bb:99:b9:68:d4:e5:09:
2c:b1:39:32:74:75:cf:12:9e:d9:e5:99:b2:6f:fe:8b:4f:07:
9d:3c:a0:35:e5:26:d7:3d:4f:a4:c0:ac:50:43:d9:4f:9d:e3:
61:1e:c2:1c:e6:d6:97:74:79:89:90:52:35:b5:e2:7d:fc:19:
24:43:5e:f5:c2:17:d6:60:52:b5:d9:b4:39:83:c1:a2:35:c0:
65:d7:14:2e:10:0e:38:c9:e3:db:e5:1e:79:80:8b:2e:56:47:
cf:93:72:15:27:02:33:d8:5a:9c:49:86:50:58:b7:4e:32:a7:
a9:97:74:ad:ff:a1:f5:0f:9d:31:ec:a2:e9:08:ad:b5:d4:cc:
58:67:a1:54:d6:b6:f0:28:c3:da:7a:4f:7a:61:9f:30:61:51:
be:bc:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org