Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/OMqdzuMDr4grEsA2Erb7XdGpzQ8.roa
File: OMqdzuMDr4grEsA2Erb7XdGpzQ8.roa (raw, json)
Hash identifier: EfUHa6EkaU8ezREIUn3Mj5cyLO31Ey/+uCtli99/u3s=
Subject key identifier: 38:CA:9D:CE:E3:03:AF:88:2B:12:C0:36:12:B6:FB:5D:D1:A9:CD:0F
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01882625475020EC94AAFD4F63088346C003
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/OMqdzuMDr4grEsA2Erb7XdGpzQ8.roa
Signing time: Tue 16 May 2023 19:59:17 +0000
ROA not before: Tue 16 May 2023 19:59:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.246.232.0/24 maxlen: 24
80.246.233.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
80.246.237.0/24 maxlen: 24
80.246.238.0/24 maxlen: 24
80.246.239.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:26:25:47:50:20:ec:94:aa:fd:4f:63:08:83:46:c0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: May 16 19:59:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38ca9dcee303af882b12c03612b6fb5dd1a9cd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:36:17:09:8a:a6:f9:4e:99:7a:f9:20:f8:
d4:c8:b0:4d:4d:8d:7a:79:4b:c0:24:20:44:2d:6d:
f8:52:53:e1:83:af:0c:06:7f:69:29:60:4b:59:ea:
4b:45:e7:38:93:bb:0b:45:04:0c:52:5a:91:da:79:
21:d0:c2:a6:96:e8:46:0c:95:6b:60:81:2a:d1:6b:
41:8a:60:02:26:a8:a2:bf:24:fe:bd:06:68:00:b6:
ff:8c:ca:b8:37:b4:32:91:54:1b:ac:99:d0:05:98:
a2:64:c4:75:2f:db:a4:e4:89:12:51:66:de:b0:3f:
ad:c8:f4:5a:55:51:af:0c:6a:30:00:de:83:ef:d0:
5a:a2:ec:9d:e3:93:dd:59:50:ea:b3:4b:5e:14:b2:
a8:d3:b5:ea:3c:6c:b5:5f:92:58:46:d3:21:3d:86:
db:e9:d9:fb:62:fb:13:60:31:f8:de:ca:6d:cb:e1:
ac:18:f2:2e:71:61:7b:88:3f:1c:f3:56:82:5e:81:
75:a3:1e:92:01:26:4e:a0:58:ec:77:9f:be:fe:e4:
bb:40:ad:98:ea:c5:79:f7:6e:30:77:58:b9:d8:51:
6d:e4:83:cc:60:08:62:02:a9:ff:f6:92:c8:7d:7b:
4a:f8:2f:66:46:07:50:c6:68:58:48:c9:a7:fb:95:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CA:9D:CE:E3:03:AF:88:2B:12:C0:36:12:B6:FB:5D:D1:A9:CD:0F
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/OMqdzuMDr4grEsA2Erb7XdGpzQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0-80.246.234.255
80.246.236.0/22
Signature Algorithm: sha256WithRSAEncryption
49:a7:cf:4e:37:36:66:e1:65:7f:ca:63:76:2f:f2:4c:de:5e:
e7:17:74:21:dd:b3:99:17:25:2f:83:c8:46:a2:e2:b0:d5:a3:
73:fd:2c:3d:6b:e3:68:20:93:9d:11:61:f8:a4:e2:c8:43:bb:
3f:7c:9d:4a:07:3a:84:5a:58:fd:bf:a4:0a:c6:32:6a:52:c6:
e3:a0:6c:54:28:e4:8d:4a:f5:d1:78:27:55:a3:c2:39:89:8b:
54:65:5f:dc:51:96:cd:9d:8a:38:6f:db:0c:db:4d:b9:b2:02:
54:4a:fe:4a:87:70:3f:1d:69:ed:c3:1f:4f:bf:71:94:ff:cd:
d9:19:1f:a7:30:43:e0:3b:be:b3:c7:32:4a:5c:82:cc:c8:63:
3e:d6:10:4f:ea:9c:3f:44:70:1e:e4:60:1a:1b:2c:d9:5c:1d:
a3:ab:93:8d:6b:9b:bd:b1:51:d8:47:bb:0a:5f:93:dd:66:b3:
5f:0e:4a:b9:31:8a:3c:1a:6e:fb:50:24:63:e2:11:03:ed:4f:
e8:85:4f:e0:66:4e:ec:5c:08:2e:6f:b5:56:27:58:f3:00:c5:
0f:5f:79:3a:c6:fc:49:10:11:d0:75:c5:4e:5b:dd:96:49:85:
2e:d9:6a:b1:1b:8c:06:3c:71:21:0e:94:2d:27:31:1d:26:b8:
19:63:25:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org