Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/UaSUFFqP3F3iNeuj6a9jVGhoA4Y.roa
File: UaSUFFqP3F3iNeuj6a9jVGhoA4Y.roa (raw, json)
Hash identifier: rhz0lryJZjM1StwaLbfxYCMKdbmi4RkFLR3EDWQHG+Q=
Subject key identifier: 51:A4:94:14:5A:8F:DC:5D:E2:35:EB:A3:E9:AF:63:54:68:68:03:86
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01856C814154A9F32299BCAAFA622F496E07
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/UaSUFFqP3F3iNeuj6a9jVGhoA4Y.roa
Signing time: Sun 01 Jan 2023 08:44:48 +0000
ROA not before: Sun 01 Jan 2023 08:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 80.246.239.0/24 maxlen: 24
80.246.238.0/24 maxlen: 24
80.246.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:41:54:a9:f3:22:99:bc:aa:fa:62:2f:49:6e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 08:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51a494145a8fdc5de235eba3e9af635468680386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:27:cf:71:57:4f:fb:7c:93:ee:d5:d1:0e:
66:35:e0:88:eb:d2:8c:ba:7f:e6:a7:95:b4:2f:22:
87:ed:ee:0e:fc:0a:09:92:b3:9a:4e:e7:72:23:fc:
c5:33:47:6c:58:13:fe:01:4d:ce:bd:13:97:96:e0:
8c:58:62:7f:1e:b0:aa:69:68:33:e7:48:8b:5c:b8:
1e:36:dc:ee:a7:99:f6:05:96:ee:49:71:90:75:61:
0a:59:c9:15:11:69:20:72:99:c8:26:84:b6:60:4b:
f4:ef:cf:1f:fa:87:3b:e0:41:95:68:82:f1:72:1f:
2d:fc:63:47:d4:49:59:65:ce:ec:c1:2a:ca:2b:80:
da:60:c7:79:e9:26:89:83:4a:63:5a:39:86:4d:52:
00:64:93:d8:a8:86:c2:03:ef:96:53:55:f0:3d:27:
7c:a1:44:a8:b6:c4:85:8c:77:d3:24:55:e8:1d:04:
28:1b:a2:39:25:a8:58:80:a0:c3:24:c6:41:1e:e8:
4a:df:89:38:44:eb:0b:c9:b5:ee:ed:7d:60:8d:dc:
ad:fc:5c:8f:78:b7:7a:3d:df:b1:54:cd:44:47:69:
a3:6a:54:f2:6f:af:36:e8:e8:b4:04:da:a6:dd:e3:
ed:55:e3:1e:14:23:f0:fd:3d:5f:e0:f3:ed:07:2b:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A4:94:14:5A:8F:DC:5D:E2:35:EB:A3:E9:AF:63:54:68:68:03:86
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/UaSUFFqP3F3iNeuj6a9jVGhoA4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.237.0-80.246.239.255
Signature Algorithm: sha256WithRSAEncryption
39:7c:29:42:f7:45:83:bb:4c:0d:ca:49:2d:87:4c:62:c3:e6:
b8:d1:3f:7f:f8:06:21:94:5b:41:89:4a:e3:7d:c6:a6:56:a9:
c4:0a:26:31:3a:e3:ed:1c:3a:d1:86:c1:dd:d2:ea:5a:95:b7:
b9:e1:20:4c:a9:95:19:63:0b:85:4c:d9:4e:2f:64:6e:1b:08:
a3:cc:f6:58:83:30:7b:b8:78:58:8e:85:ee:8c:4e:2f:95:84:
95:4f:38:31:cb:2f:6e:a0:ac:f9:d3:2a:2d:3c:9c:3d:e7:3e:
28:a3:b1:2a:e2:3f:2e:c4:e0:77:30:15:70:eb:09:d3:20:9a:
cd:11:36:09:da:0f:48:53:bd:40:db:f6:e2:1b:86:1b:5d:05:
6b:55:9a:80:4b:ad:58:7c:67:34:8f:9b:e7:36:7a:67:ff:6b:
f8:6c:a9:fb:24:da:bc:b5:93:2e:40:4f:e0:ec:8b:1c:cc:f5:
56:fd:c6:a8:71:24:97:1d:52:cd:f3:68:19:b8:dd:39:4f:62:
12:75:2a:5c:37:db:f9:16:c5:29:5f:83:20:7f:f4:ae:cb:ab:
e2:f0:69:32:04:c3:df:f1:97:30:ee:f1:2b:f8:64:54:46:92:
04:46:34:42:5b:a4:e1:20:fb:4c:f3:38:78:f5:6b:34:c3:e6:
fd:06:61:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-ams.rpki-client.org