Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/TJk7dflhh4FyzGeYwWiDUUtALyo.roa
File: TJk7dflhh4FyzGeYwWiDUUtALyo.roa (raw, json)
Hash identifier: UATJ704STqEEpBS6+bt5WBny3ZU9Lc7n4G2z4pOaH04=
Subject key identifier: 4C:99:3B:75:F9:61:87:81:72:CC:67:98:C1:68:83:51:4B:40:2F:2A
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01899B26022E4B8EB16C0FFB916AEDA86D90
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/TJk7dflhh4FyzGeYwWiDUUtALyo.roa
Signing time: Fri 28 Jul 2023 06:18:26 +0000
ROA not before: Fri 28 Jul 2023 06:18:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.246.232.0/24 maxlen: 24
80.246.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 15:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:26:02:2e:4b:8e:b1:6c:0f:fb:91:6a:ed:a8:6d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jul 28 06:18:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c993b75f961878172cc6798c16883514b402f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:62:87:ce:13:ea:5b:a0:45:f2:93:bb:6c:9b:
93:d7:ff:64:42:57:dc:5a:0e:ca:1f:02:49:af:98:
40:e9:bd:37:61:fd:5e:a1:4e:b6:eb:63:36:19:93:
6d:07:d6:7b:ab:f4:e9:81:e7:a1:4a:1b:04:58:ca:
c1:40:14:6b:0c:89:b8:5c:1d:f7:fe:9a:ce:9b:30:
40:95:04:06:90:05:4c:e1:b5:52:16:51:d1:8b:e2:
0b:80:9d:c7:80:38:8b:84:02:c2:e0:08:ee:f6:37:
32:f7:fa:d1:04:72:ea:44:ba:2d:43:d5:7d:8a:05:
d2:bb:0d:a8:e0:31:53:b2:e5:53:78:54:4a:02:19:
e5:c5:ab:dc:a6:57:c3:e1:3a:04:51:d6:5c:6a:f3:
b1:f1:53:e7:cc:7a:c1:91:82:2d:a8:5f:95:7f:b2:
eb:a2:0e:a7:73:c0:0d:d1:99:98:6e:2f:76:01:55:
22:7e:34:01:94:93:f6:ac:aa:61:7d:87:af:2c:fc:
72:bd:32:e4:db:e7:39:53:4b:84:bc:48:2f:5b:37:
c8:f7:8f:56:ec:df:b4:a8:51:b5:9c:85:cf:13:01:
36:d8:fe:31:1a:ec:c9:42:d2:7b:05:77:19:84:dd:
7c:25:f7:88:bc:2a:0a:1d:bd:2f:cc:d7:db:20:25:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:3B:75:F9:61:87:81:72:CC:67:98:C1:68:83:51:4B:40:2F:2A
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/TJk7dflhh4FyzGeYwWiDUUtALyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0/24
80.246.236.0/22
Signature Algorithm: sha256WithRSAEncryption
05:bd:77:9b:b0:f1:08:4b:a8:a3:4d:de:da:1c:e4:22:d4:68:
79:f4:98:cd:c9:b6:4e:31:be:72:ab:b6:1f:1b:f2:b7:44:81:
ba:db:c2:1e:df:39:6e:fc:20:65:4a:2d:36:ae:b3:a0:e9:12:
7c:c9:f0:26:53:4b:3d:ea:87:13:84:c4:d3:90:51:2e:4e:3f:
dc:1a:68:ec:f2:ba:32:90:9c:73:b6:a5:28:cc:1f:2e:53:07:
69:22:eb:81:54:cd:29:fb:9a:67:fb:c8:07:95:dc:cd:5d:a1:
ed:f4:ae:7f:96:f8:b7:34:b3:1f:de:58:9b:c1:46:94:cd:16:
52:1d:35:7d:fc:aa:0e:54:84:db:3e:c6:6d:1f:d9:e9:71:19:
ed:02:14:bd:9b:c1:c8:29:43:05:c5:0d:22:ed:4c:fd:5f:3c:
81:5e:15:44:1c:48:ad:6a:a2:62:59:73:81:55:1c:d0:cc:98:
73:5b:18:fc:9f:a1:a9:c1:16:f4:e3:43:b5:51:72:13:19:6e:
a2:d5:27:41:f5:f4:58:37:fb:89:b2:c0:bb:34:50:e3:34:1f:
fe:d9:9a:ad:c5:2a:be:a8:e7:0e:44:0b:5e:5b:57:bc:33:a6:
a7:bb:65:c6:08:05:ae:d3:00:9d:75:7e:69:70:11:1b:65:bb:
15:ef:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org