Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/XvS4ok8NI2Q5PQwYsddJAMcdYBE.roa
File: XvS4ok8NI2Q5PQwYsddJAMcdYBE.roa (raw, json)
Hash identifier: vKmGPn5lw0+IX6zGitoNDs894leXU7uN2w+INCnWi2k=
Subject key identifier: 5E:F4:B8:A2:4F:0D:23:64:39:3D:0C:18:B1:D7:49:00:C7:1D:60:11
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01856C814009080245CF3F1FD9C1C2C1AD8D
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/XvS4ok8NI2Q5PQwYsddJAMcdYBE.roa
Signing time: Sun 01 Jan 2023 08:44:47 +0000
ROA not before: Sun 01 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:40:09:08:02:45:cf:3f:1f:d9:c1:c2:c1:ad:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ef4b8a24f0d2364393d0c18b1d74900c71d6011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:a7:99:29:c7:6c:0c:f7:19:4b:d6:65:23:
ff:1d:24:e4:5a:c8:0a:20:80:de:a5:60:8f:92:ca:
87:73:6e:d4:39:bc:5f:76:a5:2a:3d:e5:54:9c:4a:
d8:5d:b5:8a:04:ee:42:69:15:b7:eb:92:73:0e:07:
95:35:1f:0b:62:ef:06:46:da:9c:48:fc:1b:ae:a4:
5d:d0:f9:14:5f:33:fa:90:c3:b1:63:9c:19:0c:91:
9c:ad:24:41:1a:67:80:8f:b1:b7:f1:69:8e:ab:0c:
f8:e2:3f:f3:9e:28:a8:17:8f:8a:eb:97:26:ac:e7:
ad:01:74:07:e8:f5:5b:a8:b5:ea:c0:b4:cd:31:2e:
0e:75:c4:04:24:94:d2:2a:73:63:26:44:5f:c0:49:
0d:79:14:31:de:eb:20:57:3e:be:a2:8f:e1:e5:6f:
29:af:48:63:9f:53:bb:6d:c5:3d:a1:d9:56:40:03:
ed:0b:8c:e9:bd:43:a5:f9:20:c8:ac:81:20:ab:9d:
8f:9f:5f:b5:e0:24:ec:fa:4d:a3:40:a8:19:4d:90:
cc:e1:e3:00:78:37:a3:ee:fe:e4:14:11:f0:87:93:
6f:b1:80:dc:a8:74:bd:36:19:0f:80:20:85:31:a1:
ab:00:62:cf:af:04:54:2e:a5:8c:98:47:a5:1e:b0:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F4:B8:A2:4F:0D:23:64:39:3D:0C:18:B1:D7:49:00:C7:1D:60:11
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/XvS4ok8NI2Q5PQwYsddJAMcdYBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c7:bb:49:7d:78:c5:cf:6d:23:94:fa:b4:3f:bf:91:bf:69:
0f:3c:22:f1:fc:7f:24:1a:6a:c9:35:7f:6c:5c:62:db:79:e6:
18:a7:2c:c8:1b:fa:32:43:2f:40:6d:cd:f3:d7:e6:cb:7d:d6:
85:01:2b:db:0c:4e:c4:08:de:bb:63:fa:48:0f:88:56:fc:9a:
f5:78:27:f5:f0:a2:38:f3:8e:30:fd:5a:c7:75:b3:27:a0:c3:
f0:63:3a:9a:0f:09:09:c7:da:0a:aa:3e:b1:cf:c1:f6:75:88:
24:44:b0:5e:7d:bf:73:b8:41:5b:fa:04:43:f3:47:42:ff:6d:
1d:53:ff:57:5f:0f:83:90:03:dd:7f:34:67:b3:fc:4a:d4:63:
19:10:3e:50:3d:88:a0:4d:ed:e6:d9:3d:d6:f0:c0:67:6b:ea:
86:7e:86:70:8e:29:26:4a:71:f0:9f:95:6a:8f:58:fa:b1:f9:
07:38:21:cb:b2:55:d5:97:14:cc:9c:66:25:03:b1:50:b8:48:
1c:c1:9b:84:b8:35:08:45:82:ee:83:7c:83:fb:f2:9c:e9:65:
74:fa:c6:11:ec:42:70:fe:e9:3c:54:96:bf:23:42:b8:ab:64:
3a:60:e0:93:fd:dc:da:20:34:dc:e8:16:b8:22:df:4b:20:c1:
b9:e0:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org