Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Rl9oins2-cfsH8B9_xqnRnpGxuM.roa
File: Rl9oins2-cfsH8B9_xqnRnpGxuM.roa (raw, json)
Hash identifier: rC7LIh7SbRF00OprpYsmW2bxfMGN74XFKhrH3IuDADc=
Subject key identifier: 46:5F:68:8A:7B:36:F9:C7:EC:1F:C0:7D:FF:1A:A7:46:7A:46:C6:E3
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01929E976E7144A4B265D56302AA7A01F733
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Rl9oins2-cfsH8B9_xqnRnpGxuM.roa
Signing time: Fri 18 Oct 2024 07:46:17 +0000
ROA not before: Fri 18 Oct 2024 07:46:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 80.246.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 09:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:97:6e:71:44:a4:b2:65:d5:63:02:aa:7a:01:f7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 18 07:46:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=465f688a7b36f9c7ec1fc07dff1aa7467a46c6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:e1:41:20:c7:5b:47:c7:82:34:5a:9e:f6:
94:64:ca:bf:c4:fc:11:4c:92:b4:45:3e:62:96:35:
05:7a:37:51:1b:77:5d:3a:ce:84:48:b9:d8:a9:55:
dd:f1:26:da:7c:e2:0c:6b:8a:10:cf:47:57:36:71:
4e:78:2a:09:79:6f:30:4a:1a:0a:4d:bf:67:76:98:
d7:00:f7:23:2f:76:d5:de:6e:77:00:f7:6b:0a:7c:
48:c6:b6:88:39:a8:e1:99:b5:ce:e7:95:6d:54:ba:
19:07:53:00:b8:24:24:69:75:45:e6:28:83:e8:b3:
0a:bb:d1:e0:27:89:d2:4d:48:02:61:8f:3d:90:aa:
ec:23:65:4b:57:f2:9e:c9:2b:49:2e:53:14:3c:b6:
7c:2b:2d:be:9b:43:99:bd:98:1d:78:0c:b7:4f:68:
44:a9:ba:1e:61:c5:b0:78:47:c7:f4:ef:62:28:4e:
ae:2f:2c:5c:89:47:97:2e:3a:ae:c6:29:7a:20:e6:
b9:7c:1b:b6:1c:2c:fa:7f:77:07:18:2e:a2:43:03:
a7:5e:86:c5:14:36:4a:a3:6d:34:5f:88:45:6c:86:
ba:bd:b7:cd:cf:ff:45:ee:c9:bd:9e:49:a1:1d:89:
ee:4c:cb:91:4a:af:8d:8e:63:84:1e:c4:37:38:e2:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:68:8A:7B:36:F9:C7:EC:1F:C0:7D:FF:1A:A7:46:7A:46:C6:E3
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Rl9oins2-cfsH8B9_xqnRnpGxuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
30:6b:1d:44:31:92:59:62:33:77:6f:1c:00:54:ac:69:11:32:
10:3c:84:4a:e8:f6:17:4a:68:0e:4e:37:34:42:b1:d0:24:38:
46:c4:8c:f8:1d:e7:bf:f7:1a:34:dd:64:73:bd:00:be:86:66:
7e:53:5e:15:87:e2:84:58:4e:dd:7e:fc:cc:c3:ab:65:22:81:
b4:5b:c3:8f:a4:a4:e4:da:14:1b:e8:bb:ce:80:7b:fe:db:25:
8f:84:7d:67:1f:52:e1:5b:68:c8:a8:c9:00:db:ec:f9:9a:35:
d6:10:de:94:b1:e7:43:b3:66:98:3f:3d:c3:f4:bd:37:34:c8:
89:62:7d:4b:69:83:2d:77:4e:cd:5a:13:6e:b9:e1:2d:ef:f5:
f9:df:b5:08:c0:b9:9f:9a:e4:79:07:97:6d:d7:50:1c:26:53:
1e:96:20:41:a2:2b:f6:c8:0d:d5:0b:46:12:91:ad:26:84:7c:
c1:1b:f6:4c:aa:90:f1:ba:49:77:6b:94:07:ec:09:b1:bc:6d:
8b:ae:14:78:92:23:01:0d:36:fd:cd:43:c6:e0:51:78:af:c3:
01:f0:07:3a:41:95:9a:61:d9:78:5e:80:85:06:56:62:cc:81:
8b:70:58:85:7e:ba:c0:c3:68:9e:19:6b:fb:cf:05:a2:03:1f:
f7:32:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:32 2025 by rpki-client