Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/JRM2i-hhWWGr_M1K-CFOhQODdAU.roa
File: JRM2i-hhWWGr_M1K-CFOhQODdAU.roa (raw, json)
Hash identifier: dCCvlC98lCmw0JVb+HG1ubaW3VPehwBY0qk+NG1fYeA=
Subject key identifier: 25:13:36:8B:E8:61:59:61:AB:FC:CD:4A:F8:21:4E:85:03:83:74:05
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0188DFAE87046046C00DF9F9F290E71014AF
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/JRM2i-hhWWGr_M1K-CFOhQODdAU.roa
Signing time: Wed 21 Jun 2023 20:38:56 +0000
ROA not before: Wed 21 Jun 2023 20:38:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 80.246.233.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 08:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:ae:87:04:60:46:c0:0d:f9:f9:f2:90:e7:10:14:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jun 21 20:38:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2513368be8615961abfccd4af8214e8503837405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:f1:0a:09:04:1d:aa:31:1e:25:5b:2e:63:
06:60:c3:27:14:81:de:12:2e:c9:5e:a4:77:ec:a2:
d3:bb:c1:91:90:af:40:68:68:83:17:8f:f2:b9:82:
76:e3:f4:e4:b2:e9:db:ce:c9:af:fa:07:11:de:41:
20:36:15:67:3e:d3:77:bf:a7:c9:1a:f0:f0:32:53:
c0:db:64:24:82:92:c7:70:96:37:af:11:75:e7:e9:
8a:1a:08:6f:d1:f0:e5:1c:d3:34:17:5b:5d:0c:e8:
8c:95:a3:fa:b0:ad:c2:a6:d1:c6:97:b4:2d:63:6c:
95:3f:c9:77:4a:71:8f:df:de:de:06:49:2f:d6:2e:
d3:f8:5b:16:a1:2c:81:eb:05:1c:a8:02:60:72:88:
09:4e:59:f0:52:07:57:b6:3a:a2:f9:1e:02:b5:6f:
bc:a6:08:c1:6a:1a:ec:f1:20:ca:42:97:07:2b:8d:
2b:e0:ed:3e:fe:05:09:d4:ea:15:91:75:3d:39:89:
c3:95:a0:c0:39:5a:3c:ad:60:a3:2e:fe:7b:09:ab:
a6:b8:41:1d:16:ce:c9:3b:41:53:a8:e3:78:52:11:
04:c0:33:d2:af:d4:2d:57:ac:5d:32:01:03:89:b7:
58:d2:24:94:cf:ea:1d:6d:b1:78:a2:62:0a:b3:6f:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:13:36:8B:E8:61:59:61:AB:FC:CD:4A:F8:21:4E:85:03:83:74:05
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/JRM2i-hhWWGr_M1K-CFOhQODdAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.233.0-80.246.234.255
Signature Algorithm: sha256WithRSAEncryption
5f:a1:91:b8:10:c7:d3:86:06:61:a4:ac:40:1a:58:93:c3:cb:
fa:98:b8:47:84:3d:af:2a:1c:b7:6f:26:2e:48:b8:b6:7b:1b:
0e:9e:f3:d2:7c:1d:50:0e:97:bc:96:a8:14:9d:7e:ee:8e:69:
2c:d3:7b:6e:90:e3:53:1d:18:22:07:41:0b:79:2e:f6:14:f4:
a1:cb:e3:f6:1d:54:2c:87:f3:55:09:a2:98:ff:69:9d:97:b9:
7e:61:e8:16:2f:d8:2d:5c:3a:34:96:c1:4a:0f:e8:75:f8:e5:
3a:2c:3f:df:27:87:ca:b8:b1:ae:52:ef:a5:a3:59:c7:00:23:
7d:35:d9:b1:79:8f:71:3c:5b:d1:d6:d9:30:5e:f4:32:6b:cd:
23:3d:6f:78:51:ad:32:3b:33:f9:15:45:67:9a:10:95:0a:c8:
4c:bb:7e:68:3c:3c:af:33:b0:94:c7:a9:6a:3a:19:be:64:05:
f3:fa:da:73:a2:2a:a1:fb:f0:a6:e9:6d:c1:67:4b:33:57:e6:
cd:78:20:8f:c6:a9:ec:4c:61:f1:71:e9:15:95:2d:7d:db:27:
a0:18:0c:c1:58:55:21:9d:e5:1a:78:6c:82:f8:0f:53:0e:a4:
f7:a6:51:23:de:6b:cb:0c:18:19:4a:d1:f7:62:a3:04:28:cc:
83:10:63:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:31 2024 by rpki-client on console-ams.rpki-client.org