Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/KSnGlQq_HUkCMU1EcjK2q-FADVo.roa
File: KSnGlQq_HUkCMU1EcjK2q-FADVo.roa (raw, json)
Hash identifier: Ui0MzFqFbA89j6shRvaxAtVxG2ojmoHyaz5ad1fvfY0=
Subject key identifier: 29:29:C6:95:0A:BF:1D:49:02:31:4D:44:72:32:B6:AB:E1:40:0D:5A
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018833FF3AA6EBF152FDC2B6E85B63A648E2
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/KSnGlQq_HUkCMU1EcjK2q-FADVo.roa
Signing time: Fri 19 May 2023 12:32:24 +0000
ROA not before: Fri 19 May 2023 12:32:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 80.246.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:ff:3a:a6:eb:f1:52:fd:c2:b6:e8:5b:63:a6:48:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: May 19 12:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2929c6950abf1d4902314d447232b6abe1400d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:23:db:f2:62:c9:c7:86:7b:9d:20:19:af:
91:e9:86:64:68:f4:80:1e:d8:12:85:d6:8c:90:d1:
23:24:94:6a:26:da:2e:29:5b:07:f4:98:cf:70:29:
f9:15:ea:c6:74:5f:17:b1:13:c8:a4:a7:08:e7:3c:
0e:85:88:3c:08:a6:84:30:9e:0e:ce:63:26:f7:56:
e8:ff:da:2f:53:ab:72:23:50:74:74:08:33:92:df:
c5:e4:8a:68:0a:40:37:06:6f:db:b4:fb:00:a9:17:
ee:47:38:2c:e6:8d:f0:d9:ab:ef:55:8f:2e:f4:4a:
24:6a:92:75:9c:e4:a1:3f:20:6f:f6:f9:8f:41:4b:
24:5d:ff:77:39:25:a0:94:27:02:1a:5b:1f:40:e0:
d6:32:02:d8:13:70:f0:86:88:b0:03:b6:31:8b:9d:
47:42:b4:ac:b1:9c:4e:77:3f:e8:23:87:2c:c9:be:
60:c8:84:36:f9:9b:32:70:97:1f:13:84:10:38:7f:
50:b2:d5:d7:40:c3:34:e7:83:7e:ce:3a:04:89:1e:
57:cf:0b:02:2a:4c:f2:1c:33:a3:4d:fe:7f:7f:4d:
32:ac:a6:3e:6f:2c:05:da:42:c6:25:10:34:f3:18:
91:57:7c:75:fa:ee:e0:9f:33:3f:0b:35:38:8e:3e:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:C6:95:0A:BF:1D:49:02:31:4D:44:72:32:B6:AB:E1:40:0D:5A
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/KSnGlQq_HUkCMU1EcjK2q-FADVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a3:cd:0f:c9:57:d0:e5:24:eb:da:cc:9c:41:7e:db:4e:1e:
8f:05:c9:7f:e7:ee:96:00:81:eb:66:c2:35:fe:88:8d:70:a9:
07:4d:09:1f:f8:d5:ad:84:f7:4c:da:a5:02:ab:66:d1:77:21:
f5:6f:1b:72:3d:4c:84:e8:38:4b:a5:8b:6c:59:75:96:44:cd:
f8:64:b8:98:5d:e3:75:49:13:f0:34:5b:2c:28:c0:85:59:92:
ef:7b:41:a1:6a:70:29:c1:07:4e:2d:18:cb:53:85:14:3f:4b:
a1:5e:7e:c0:50:58:6d:00:3c:14:b1:d5:39:f3:6f:67:b9:7e:
67:75:bb:a0:76:79:b8:e5:2b:99:af:76:1f:09:7f:16:d3:b7:
4a:1a:e2:38:53:04:9d:7a:46:94:da:56:eb:a7:98:fe:2d:6a:
8c:b8:54:49:15:fc:22:43:81:83:84:04:d5:36:9d:0c:fa:15:
46:0c:51:67:43:b8:05:19:1d:17:0b:a8:b1:9b:8d:f4:c2:37:
cf:b2:ed:f9:5a:3a:c6:89:29:f4:59:77:ec:ee:93:b7:96:ab:
96:75:70:e7:b8:e1:17:00:5b:ee:6c:dc:1f:23:e5:54:25:89:
e8:c8:2c:71:74:1c:7a:42:7d:3a:90:a0:d1:81:54:cd:5c:37:
be:fa:45:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgz/zqm6/FS/cK26FtjpkjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjMwNTE5MTIzMjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTI5YzY5NTBhYmYxZDQ5MDIzMTRkNDQ3MjMyYjZhYmUxNDAwZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnecj2/JiyceGe50gGa+R6YZkaPSA
HtgShdaMkNEjJJRqJtouKVsH9JjPcCn5FerGdF8XsRPIpKcI5zwOhYg8CKaEMJ4O
zmMm91bo/9ovU6tyI1B0dAgzkt/F5IpoCkA3Bm/btPsAqRfuRzgs5o3w2avvVY8u
9EokapJ1nOShPyBv9vmPQUskXf93OSWglCcCGlsfQODWMgLYE3DwhoiwA7Yxi51H
QrSssZxOdz/oI4csyb5gyIQ2+ZsycJcfE4QQOH9QstXXQMM054N+zjoEiR5XzwsC
KkzyHDOjTf5/f00yrKY+bywF2kLGJRA08xiRV3x1+u7gnzM/CzU4jj5PyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCkpxpUKvx1JAjFNRHIytqvhQA1aMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvS1NuR2xRcV9IVWtDTVUxRWNqSzJxLUZBRFZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPboMA0G
CSqGSIb3DQEBCwUAA4IBAQBHo80PyVfQ5STr2sycQX7bTh6PBcl/5+6WAIHrZsI1
/oiNcKkHTQkf+NWthPdM2qUCq2bRdyH1bxtyPUyE6DhLpYtsWXWWRM34ZLiYXeN1
SRPwNFssKMCFWZLve0GhanApwQdOLRjLU4UUP0uhXn7AUFhtADwUsdU5829nuX5n
dbugdnm45SuZr3YfCX8W07dKGuI4UwSdekaU2lbrp5j+LWqMuFRJFfwiQ4GDhATV
Np0M+hVGDFFnQ7gFGR0XC6ixm430wjfPsu35WjrGiSn0WXfs7pO3lquWdXDnuOEX
AFvubNwfI+VUJYnoyCxxdBx6Qn06kKDRgVTNXDe++kWU
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-ams.rpki-client.org