Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Jbd55V-NBUVGoUY3MrJ9vZmooDk.roa
File: Jbd55V-NBUVGoUY3MrJ9vZmooDk.roa (raw, json)
Hash identifier: cOLwWqCLm9pDJ5aN/CygJzLqaDv6zGkh27Z3vyiYlvI=
Subject key identifier: 25:B7:79:E5:5F:8D:05:45:46:A1:46:37:32:B2:7D:BD:99:A8:A0:39
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0191836C1033EC78A539A3A0275050EDABE3
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Jbd55V-NBUVGoUY3MrJ9vZmooDk.roa
Signing time: Sat 24 Aug 2024 08:06:22 +0000
ROA not before: Sat 24 Aug 2024 08:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.246.230.0/24 maxlen: 24
80.246.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 09:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:83:6c:10:33:ec:78:a5:39:a3:a0:27:50:50:ed:ab:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Aug 24 08:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25b779e55f8d054546a1463732b27dbd99a8a039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:ed:a7:04:42:c3:b0:79:7a:3f:28:ac:e2:
f3:96:bf:c9:bf:6b:00:55:f4:20:1e:a1:b5:8a:82:
17:dd:32:ff:f8:bb:44:9f:c3:da:2b:df:a0:43:63:
1c:ea:44:39:45:3c:ea:a8:71:f7:59:b8:4f:16:7f:
15:78:6d:8a:37:d9:14:7f:dd:8a:65:fd:76:0f:6a:
bb:fd:74:38:ac:52:d7:fe:66:54:66:2d:b6:90:91:
87:dc:5c:5c:98:81:83:77:ad:e0:f7:f1:54:f6:f7:
e5:35:cf:c7:b8:91:dc:96:76:6f:5d:f6:8b:15:a7:
05:28:dd:07:6b:5b:e8:86:61:a9:cc:84:41:1e:34:
f5:67:62:af:0f:2b:95:22:55:2a:c9:b1:84:08:77:
9a:c8:99:7f:cc:a3:84:c6:38:cc:2e:c6:90:7e:19:
87:92:e4:99:4b:5e:c0:37:67:d9:e0:10:3d:e3:9a:
55:cf:1f:b4:4b:21:54:50:e4:12:aa:36:85:65:a3:
5b:98:d3:98:42:17:95:77:e4:a6:b1:33:7f:a8:a7:
e3:9d:cc:88:3a:67:01:ab:57:23:5f:e5:4d:39:53:
53:77:23:50:1b:07:d4:b7:f5:2d:7e:9e:bc:04:3e:
c2:b3:18:87:19:c9:8b:3c:a3:88:7e:2c:39:b7:7c:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B7:79:E5:5F:8D:05:45:46:A1:46:37:32:B2:7D:BD:99:A8:A0:39
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Jbd55V-NBUVGoUY3MrJ9vZmooDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
80.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
42:4d:9c:2a:25:48:2c:7c:25:48:35:b7:dd:d0:3b:a2:b4:88:
60:b8:80:6d:12:4d:69:c9:95:6c:dc:4f:9e:0e:4c:21:c5:74:
eb:6e:88:2f:ec:4f:9a:c1:72:8b:c5:90:d8:f0:f5:f3:cd:4e:
50:d9:21:db:ae:d7:85:0f:15:70:d9:d5:52:1f:36:ed:0d:b3:
30:f4:86:11:f1:d0:49:6b:43:72:32:98:e4:34:19:44:2a:5e:
f0:45:23:d3:08:25:c9:10:57:d1:cd:23:09:9e:78:28:e5:e4:
05:19:7a:42:a7:c4:7a:f0:61:19:86:49:e5:e0:ed:ec:d5:d5:
9b:a4:3a:7c:94:16:98:e4:ae:0b:93:b8:72:6d:95:a0:96:5e:
54:44:87:a0:3b:f3:6f:0e:b7:c9:fd:84:aa:73:05:12:fb:6e:
84:51:49:b3:68:3f:50:81:e8:44:4a:da:a2:e4:7c:7e:ef:37:
7d:68:d3:53:4c:18:dc:fd:d7:e4:3c:e3:a8:2e:d1:6e:5d:5b:
fe:24:c9:37:67:bc:22:77:68:6b:38:0c:09:91:40:d5:e2:65:
3c:0a:3d:dc:20:5b:05:44:a4:89:03:f7:a8:e3:3f:1d:36:41:
bb:e2:67:9c:c9:bf:fd:0b:aa:cd:bc:9e:91:f3:fe:d8:5b:c7:
84:5f:e6:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGDbBAz7HilOaOgJ1BQ7avjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjQwODI0MDgwNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWI3NzllNTVmOGQwNTQ1NDZhMTQ2MzczMmIyN2RiZDk5YThhMDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7ftpwRCw7B5ej8orOLzlr/Jv2sA
VfQgHqG1ioIX3TL/+LtEn8PaK9+gQ2Mc6kQ5RTzqqHH3WbhPFn8VeG2KN9kUf92K
Zf12D2q7/XQ4rFLX/mZUZi22kJGH3FxcmIGDd63g9/FU9vflNc/HuJHclnZvXfaL
FacFKN0Ha1vohmGpzIRBHjT1Z2KvDyuVIlUqybGECHeayJl/zKOExjjMLsaQfhmH
kuSZS17AN2fZ4BA945pVzx+0SyFUUOQSqjaFZaNbmNOYQheVd+SmsTN/qKfjncyI
OmcBq1cjX+VNOVNTdyNQGwfUt/Utfp68BD7CsxiHGcmLPKOIfiw5t3yrnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCW3eeVfjQVFRqFGNzKyfb2ZqKA5MB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvSmJkNTVWLU5CVVZHb1VZM01ySjl2Wm1vb0RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPbmAwQD
UPboMA0GCSqGSIb3DQEBCwUAA4IBAQBCTZwqJUgsfCVINbfd0DuitIhguIBtEk1p
yZVs3E+eDkwhxXTrbogv7E+awXKLxZDY8PXzzU5Q2SHbrteFDxVw2dVSHzbtDbMw
9IYR8dBJa0NyMpjkNBlEKl7wRSPTCCXJEFfRzSMJnngo5eQFGXpCp8R68GEZhknl
4O3s1dWbpDp8lBaY5K4Lk7hybZWgll5URIegO/NvDrfJ/YSqcwUS+26EUUmzaD9Q
gehEStqi5Hx+7zd9aNNTTBjc/dfkPOOoLtFuXVv+JMk3Z7wid2hrOAwJkUDV4mU8
Cj3cIFsFRKSJA/eo4z8dNkG74mecyb/9C6rNvJ6R8/7YW8eEX+Yd
-----END CERTIFICATE-----
Generated at Mon Sep 16 14:52:52 2024 by rpki-client on console-ams.rpki-client.org