Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b1xmmCZbCNrX6vTjWIZigNk9HII.roa
File: b1xmmCZbCNrX6vTjWIZigNk9HII.roa (raw, json)
Hash identifier: U7bFUvq1BLKRa4htUVJ5/yvyvN7Fkd/2qlDdwcMIvfE=
Subject key identifier: 6F:5C:66:98:26:5B:08:DA:D7:EA:F4:E3:58:86:62:80:D9:3D:1C:82
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0188DFAE86A1EC1E8EB7E69B55EBE58C3BAB
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b1xmmCZbCNrX6vTjWIZigNk9HII.roa
Signing time: Wed 21 Jun 2023 20:38:56 +0000
ROA not before: Wed 21 Jun 2023 20:38:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 80.246.233.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:ae:86:a1:ec:1e:8e:b7:e6:9b:55:eb:e5:8c:3b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jun 21 20:38:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f5c6698265b08dad7eaf4e358866280d93d1c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:83:f6:58:97:36:33:67:5f:64:47:d3:38:
e0:fe:77:ce:fe:2a:07:70:10:a2:24:b6:a5:86:b0:
ed:38:f0:09:0b:4e:32:37:41:2f:e0:a0:71:2e:75:
46:b3:a7:e5:b4:d9:57:38:13:7b:9b:82:10:24:a0:
67:37:12:b9:c8:c7:41:b1:a4:9b:04:d0:70:80:a2:
1f:a1:64:1c:67:67:72:1e:7b:9e:6b:05:d0:5f:b7:
ba:4d:22:62:79:5a:9a:24:57:7a:ad:54:dc:b0:ca:
0d:b7:13:bd:22:1b:ec:73:44:7d:a0:7b:ae:f3:1f:
fc:a8:f1:78:d4:3d:6a:14:54:d3:c5:96:0f:1c:ef:
92:51:ea:d1:6a:12:e4:c3:72:be:d0:ac:d3:03:43:
a3:35:23:6d:3c:07:97:fd:21:9b:1d:8a:5f:74:49:
d5:11:1e:e8:22:81:c2:31:1b:88:cd:c0:76:ff:5d:
16:45:6a:83:bc:4c:ce:70:76:ed:eb:db:00:75:bf:
28:2a:ad:48:91:f6:6d:96:80:7b:7c:cb:bd:2a:9d:
74:a7:6d:db:d0:b6:01:f5:84:7b:81:95:22:be:19:
d8:aa:63:aa:26:4e:b3:31:6a:e2:65:58:14:52:b2:
30:0c:70:f6:74:cc:29:dd:af:59:15:39:36:3f:ee:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5C:66:98:26:5B:08:DA:D7:EA:F4:E3:58:86:62:80:D9:3D:1C:82
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b1xmmCZbCNrX6vTjWIZigNk9HII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.233.0-80.246.234.255
Signature Algorithm: sha256WithRSAEncryption
49:5b:ea:87:f8:d2:5d:eb:ca:d5:ea:ca:a9:4f:c4:c8:94:65:
5f:18:ee:27:88:9e:58:be:a3:d0:d7:af:43:56:e8:bf:1f:08:
92:db:84:a3:d5:e9:23:c4:53:a3:c4:bf:a7:8a:8e:21:50:7e:
dc:5d:89:4d:62:0b:0d:f8:6a:a1:c7:25:7c:d3:ae:46:eb:cf:
bd:fd:05:a0:c2:07:66:88:4f:56:68:7a:67:39:3e:c9:6a:70:
46:21:56:81:77:75:b6:03:e6:e6:4a:a3:9a:e0:95:97:20:ea:
34:f3:24:66:d5:4c:5f:7e:28:11:7f:cf:ab:b2:8e:97:2a:3d:
7e:f3:16:ed:66:48:a6:84:37:65:2f:25:e4:5d:fd:74:8e:56:
a8:50:b6:58:df:e8:63:fe:fb:23:f8:57:c9:e2:a4:d5:00:c0:
e2:97:2e:35:11:ac:d5:81:97:87:0e:28:ff:fd:56:c4:0b:9e:
d5:13:10:7d:36:c5:2a:2e:20:92:41:cf:2e:bb:4f:61:39:76:
2e:b7:ed:3d:07:86:3c:01:3d:ad:ac:9d:95:a8:60:5e:02:88:
63:b3:4b:94:79:6b:54:92:2a:b9:29:d0:7d:40:be:e3:24:20:
91:b5:64:0c:99:93:f6:57:52:fd:d6:a4:d1:b5:5f:61:e1:f7:
30:84:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 09:03:10 2023 by rpki-client on console-fra.rpki-client.org