Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b2y9lDvDVHGVW8rlfl5VR0y-Yr8.roa
File: b2y9lDvDVHGVW8rlfl5VR0y-Yr8.roa (raw, json)
Hash identifier: KmnFsuQZSZD+WFXFyFiSL5q+8hxvw4Ik1W/E7Fsjny4=
Subject key identifier: 6F:6C:BD:94:3B:C3:54:71:95:5B:CA:E5:7E:5E:55:47:4C:BE:62:BF
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0189685202E7D3234B1FDF655C655FF8C624
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b2y9lDvDVHGVW8rlfl5VR0y-Yr8.roa
Signing time: Tue 18 Jul 2023 09:25:52 +0000
ROA not before: Tue 18 Jul 2023 09:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.246.232.0/24 maxlen: 24
80.246.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:52:02:e7:d3:23:4b:1f:df:65:5c:65:5f:f8:c6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jul 18 09:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f6cbd943bc35471955bcae57e5e55474cbe62bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e4:24:6d:5a:50:66:7b:af:91:8a:4b:35:4b:
09:43:ea:0a:42:46:44:17:10:6d:a6:b2:47:fc:ae:
ab:b4:39:f6:71:ef:d8:7c:d2:5f:22:ce:2a:09:0f:
17:95:6c:87:5b:1a:2e:05:4e:eb:b4:86:1e:2c:c9:
f4:ea:c7:55:e4:82:31:0c:d9:a6:02:b7:ed:04:85:
6e:a6:5b:96:35:1f:98:52:f8:46:7b:53:31:8e:af:
2b:8b:11:5d:fd:f2:eb:80:96:a8:a2:d2:12:6a:7d:
f2:d7:37:d5:fe:54:36:27:6d:9f:bd:81:d6:c6:7b:
ba:5f:2e:33:26:ca:9d:9a:bb:e8:8c:8a:13:4b:66:
16:18:51:29:3c:86:16:9a:78:64:52:e9:77:ab:e7:
1d:d0:4d:60:2b:5a:ec:88:50:a2:e5:b5:9b:00:d7:
4a:b8:ce:e8:ad:86:e2:51:a7:cb:35:7a:19:92:6f:
2e:67:79:e8:88:7f:39:84:b6:05:62:16:0e:3a:98:
11:56:6e:b4:47:97:68:d8:16:34:3a:93:c7:5d:00:
a9:39:96:a1:b0:e0:20:ae:e5:7e:aa:ee:d8:cb:cc:
e6:81:80:be:c3:e6:a0:c2:39:3c:9b:32:dd:6c:32:
9d:fd:49:9f:ae:dd:34:1d:da:bb:1a:b4:7d:43:a4:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6C:BD:94:3B:C3:54:71:95:5B:CA:E5:7E:5E:55:47:4C:BE:62:BF
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b2y9lDvDVHGVW8rlfl5VR0y-Yr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0/24
80.246.236.0/22
Signature Algorithm: sha256WithRSAEncryption
14:c1:6f:62:90:55:e8:c3:cf:91:53:39:52:6a:f8:67:c1:a1:
4b:c6:f1:1f:b5:92:af:7f:df:ad:99:03:d7:b7:1b:89:a9:89:
47:e1:b0:30:a3:2d:aa:7f:98:ae:04:d7:d1:d2:3e:87:a3:65:
52:ba:18:83:3c:39:c1:59:46:a1:28:14:32:a8:9f:4b:67:1b:
83:43:ca:93:58:10:d7:19:de:a7:50:9d:9d:5c:02:a3:23:73:
3e:2a:50:de:b9:bf:d5:58:e2:92:aa:63:58:a5:fb:ac:e6:8a:
9a:eb:96:2a:6c:15:9b:a3:a4:3f:08:c4:4e:cc:91:6f:78:1b:
46:44:c4:96:12:b8:43:cd:c2:7f:62:fb:a9:a8:14:20:98:57:
68:fd:e2:98:c6:ef:02:83:ef:e0:d5:25:97:ff:3f:d3:61:8c:
37:39:a8:9c:d1:a7:09:9d:4f:de:0b:4a:aa:2d:39:a5:88:49:
62:df:0f:80:e6:d4:33:51:ae:43:82:c4:e5:35:6b:a1:0e:82:
36:0a:bd:f9:73:3c:4b:6d:ab:42:84:b0:ce:7b:c2:49:f2:9f:
ac:b9:04:d3:58:b0:ea:31:cc:be:4c:eb:f6:06:c8:70:5c:ff:
27:17:6d:a2:d0:cd:f0:cc:34:34:25:74:90:8f:2f:20:9a:ab:
33:b7:f8:d7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYloUgLn0yNLH99lXGVf+MYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjMwNzE4MDkyNTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjZjYmQ5NDNiYzM1NDcxOTU1YmNhZTU3ZTVlNTU0NzRjYmU2MmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguQkbVpQZnuvkYpLNUsJQ+oKQkZE
FxBtprJH/K6rtDn2ce/YfNJfIs4qCQ8XlWyHWxouBU7rtIYeLMn06sdV5IIxDNmm
ArftBIVupluWNR+YUvhGe1Mxjq8rixFd/fLrgJaootISan3y1zfV/lQ2J22fvYHW
xnu6Xy4zJsqdmrvojIoTS2YWGFEpPIYWmnhkUul3q+cd0E1gK1rsiFCi5bWbANdK
uM7orYbiUafLNXoZkm8uZ3noiH85hLYFYhYOOpgRVm60R5do2BY0OpPHXQCpOZah
sOAgruV+qu7Yy8zmgYC+w+agwjk8mzLdbDKd/Umfrt00Hdq7GrR9Q6TApwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG9svZQ7w1RxlVvK5X5eVUdMvmK/MB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvYjJ5OWxEdkRWSEdWVzhybGZsNVZSMHktWXI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPboAwQC
UPbsMA0GCSqGSIb3DQEBCwUAA4IBAQAUwW9ikFXow8+RUzlSavhnwaFLxvEftZKv
f9+tmQPXtxuJqYlH4bAwoy2qf5iuBNfR0j6Ho2VSuhiDPDnBWUahKBQyqJ9LZxuD
Q8qTWBDXGd6nUJ2dXAKjI3M+KlDeub/VWOKSqmNYpfus5oqa65YqbBWbo6Q/CMRO
zJFveBtGRMSWErhDzcJ/YvupqBQgmFdo/eKYxu8Cg+/g1SWX/z/TYYw3Oaic0acJ
nU/eC0qqLTmliEli3w+A5tQzUa5DgsTlNWuhDoI2Cr35czxLbatChLDOe8JJ8p+s
uQTTWLDqMcy+TOv2BshwXP8nF22i0M3wzDQ0JXSQjy8gmqszt/jX
-----END CERTIFICATE-----
Generated at Fri Jul 21 06:02:41 2023 by rpki-client on console-ams.rpki-client.org