Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b5dk5YyJrUPM6UNiO9KvQwdmvZY.roa
File: b5dk5YyJrUPM6UNiO9KvQwdmvZY.roa (raw, json)
Hash identifier: mrFw7EmZyi8PlTysC7pVhg7v8c7zpYXnrw8sdAqmb3s=
Subject key identifier: 6F:97:64:E5:8C:89:AD:43:CC:E9:43:62:3B:D2:AF:43:07:66:BD:96
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01856C813DB84EAB8A8B2AC56912423F55DE
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b5dk5YyJrUPM6UNiO9KvQwdmvZY.roa
Signing time: Sun 01 Jan 2023 08:44:47 +0000
ROA not before: Sun 01 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 80.246.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3d:b8:4e:ab:8a:8b:2a:c5:69:12:42:3f:55:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f9764e58c89ad43cce943623bd2af430766bd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:b7:3e:02:38:4f:98:b1:9b:04:1b:e9:c6:
a9:56:41:c1:ca:5a:e4:5a:05:11:cb:12:6d:8d:9e:
a9:60:41:ee:2f:01:9b:ad:81:dc:f3:4f:fa:54:7f:
e9:d3:2f:bc:1b:fe:ad:32:6f:3b:16:1e:3f:90:a5:
d8:b6:04:9a:f0:3a:ae:5b:8c:e9:c5:7f:a7:5e:ea:
13:88:31:e7:22:c8:28:14:3f:99:5a:b0:b8:3e:2b:
bf:38:3d:0c:4f:7d:99:41:d0:c1:16:23:89:3e:b2:
01:e4:f9:fc:75:b0:63:fa:cc:fc:ec:d8:30:6e:cc:
6b:cb:56:30:e4:06:81:72:7f:3d:35:b8:cc:7f:d7:
ab:96:92:76:23:4b:5c:b0:78:52:51:66:ef:90:0d:
c4:84:d2:d6:42:1d:74:84:48:29:84:bb:80:73:df:
4f:e2:34:6d:d7:df:40:8a:c7:3c:38:3f:e7:1b:69:
6e:58:aa:10:5f:ef:d9:54:23:18:9b:d6:07:a0:ba:
ae:ca:90:71:03:9a:f1:77:cf:9d:6c:01:fb:37:5c:
d4:66:11:71:d3:ca:41:60:4c:b2:72:2a:c2:3b:4e:
f2:96:e0:0b:87:79:f2:88:67:79:8f:0b:96:63:c9:
5a:1d:ed:5a:73:8a:50:48:2d:8f:f1:9b:b2:f2:c6:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:97:64:E5:8C:89:AD:43:CC:E9:43:62:3B:D2:AF:43:07:66:BD:96
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b5dk5YyJrUPM6UNiO9KvQwdmvZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d0:ae:7d:53:b3:b3:e9:b2:9d:fc:91:f3:8d:ef:5d:4e:95:
48:d0:77:63:e6:d0:98:b4:c6:14:7b:c2:14:da:5a:b5:fb:64:
ca:60:d3:45:47:de:2e:46:6e:14:71:eb:2f:ec:04:e8:07:2c:
67:7e:96:9c:c2:44:5b:b0:d6:2a:af:5f:07:77:28:8e:75:01:
b0:44:55:31:c1:fd:c1:cb:7a:8c:2a:9d:09:64:1e:c5:e7:ad:
9a:4a:98:27:7a:3a:be:88:ed:2e:92:40:65:75:24:ee:d1:37:
ed:a9:8e:74:27:3d:72:59:a2:22:01:bd:35:e2:00:86:42:0c:
77:61:07:6c:2b:7a:ac:32:fc:23:57:d4:da:8c:b0:e0:1c:4e:
ba:a1:2f:22:11:b0:4d:71:a4:c3:7d:43:ce:02:77:ec:e0:f7:
7f:2b:1f:53:8a:51:08:35:0f:bd:8a:4f:86:df:b0:7e:a6:0a:
31:02:aa:f6:97:e9:18:e2:7a:bb:02:bc:4e:16:9b:82:ba:d0:
a4:1e:b7:c3:dc:29:56:ed:8f:0d:69:96:b7:65:cb:25:ae:05:
35:93:65:35:23:eb:da:c0:44:84:7b:9f:d9:1e:64:63:0a:b1:
c7:3c:a9:e3:c7:1e:4f:4e:92:93:49:ce:1e:03:ee:e7:11:2b:
38:41:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org