Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/IPvinSNKsORRLLRPEVh_HnrMPmg.roa
File: IPvinSNKsORRLLRPEVh_HnrMPmg.roa (raw, json)
Hash identifier: ChksXzLvJHEzM1avOlr+7csGLDi1gY4l7t6cUkDymrg=
Subject key identifier: 20:FB:E2:9D:23:4A:B0:E4:51:2C:B4:4F:11:58:7F:1E:7A:CC:3E:68
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018EAA80D752EBC8AF5B06D569974B984A3E
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/IPvinSNKsORRLLRPEVh_HnrMPmg.roa
Signing time: Thu 04 Apr 2024 19:05:54 +0000
ROA not before: Thu 04 Apr 2024 19:05:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.246.229.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 18:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:aa:80:d7:52:eb:c8:af:5b:06:d5:69:97:4b:98:4a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Apr 4 19:05:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20fbe29d234ab0e4512cb44f11587f1e7acc3e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:09:74:f6:76:e5:98:71:45:0d:b5:f5:bd:
dc:b8:86:fd:6a:ac:da:a8:72:3a:38:dc:87:88:87:
2e:8f:02:bf:5c:2f:d0:f5:7b:c4:2c:16:2c:24:c6:
b0:0f:90:4b:60:da:de:42:ed:bf:95:38:84:3f:4a:
6a:6a:02:f0:af:5a:f0:ae:3f:7d:93:ee:90:c6:fd:
ff:48:ed:4d:98:c3:91:6b:af:a7:0c:d3:77:67:09:
75:6b:49:80:da:90:de:4a:6a:b7:0e:24:ea:64:f4:
c1:88:2b:1b:26:7c:d9:f2:9b:43:46:bc:4b:19:0a:
9c:d7:20:43:ce:c3:b1:0e:43:ff:a9:af:37:7d:28:
37:aa:21:00:73:7b:0b:32:88:a1:92:38:20:78:8d:
8a:bb:50:8a:d3:74:02:d7:dd:e9:03:fa:fd:84:61:
ff:04:1e:9c:90:00:8f:f2:d5:69:ed:3c:e3:81:2c:
01:0e:c3:6f:0d:b7:0c:2c:2e:68:ac:5c:60:41:fc:
3e:5e:6c:76:78:05:ba:32:69:fb:8e:b5:ac:69:9b:
62:2e:cd:8b:88:5e:b4:a1:3e:2f:ca:73:84:66:ed:
0a:b8:c0:fd:70:3b:b9:2a:1d:9f:cf:fd:b1:bf:b0:
ea:85:df:61:17:a1:74:03:c8:fd:10:0f:ec:cf:3f:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FB:E2:9D:23:4A:B0:E4:51:2C:B4:4F:11:58:7F:1E:7A:CC:3E:68
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/IPvinSNKsORRLLRPEVh_HnrMPmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.229.0-80.246.230.255
Signature Algorithm: sha256WithRSAEncryption
30:fe:8c:f1:7b:66:05:ff:f2:e7:4b:7f:8e:e0:40:30:d2:57:
d8:57:30:49:55:a5:80:19:d5:64:a4:f9:72:a5:e6:a4:90:10:
bc:53:68:a1:06:77:4e:90:f2:cc:43:66:dd:3c:7f:b2:ff:95:
83:c6:07:9e:50:33:8f:d5:7c:47:e0:bb:e5:54:ea:b2:e8:4f:
da:df:24:49:5c:25:51:02:38:ed:28:a7:2a:9e:c3:59:76:1f:
c2:5b:1c:5a:e5:ac:71:aa:22:95:c9:ec:a0:d3:4f:51:7d:8e:
be:43:8d:9c:43:82:97:66:01:f6:61:50:50:fe:ff:1b:41:fb:
1e:b3:57:9a:d4:08:ff:55:f4:f2:c0:1f:77:2c:e1:e5:6c:14:
31:8e:28:d4:44:f1:8f:91:24:ff:1f:e0:9e:d1:02:65:28:4d:
88:11:8e:6e:99:ec:cc:15:8b:05:ea:d3:ff:e5:18:90:36:a9:
13:d7:bc:e3:1e:a2:c7:b4:b3:c2:c5:3f:f8:e0:30:45:8d:ed:
60:6a:71:0e:37:d8:59:25:8b:30:05:52:47:b7:2d:a2:79:53:
24:88:df:67:fe:0d:bf:63:4c:4c:e1:d0:92:eb:b1:4f:3d:c7:
d3:09:b1:72:40:88:be:49:63:ac:3b:86:86:67:1f:b8:81:c4:
61:da:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 20:32:45 2024 by rpki-client on console-fra.rpki-client.org