Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/bcrnHyHLl2-nkIdaU3zalPV2ruo.roa
File: bcrnHyHLl2-nkIdaU3zalPV2ruo.roa (raw, json)
Hash identifier: w5R1NH7gST8qbEEQbYQn2EoQqj1PCPK7ErfufHjuTTs=
Subject key identifier: 6D:CA:E7:1F:21:CB:97:6F:A7:90:87:5A:53:7C:DA:94:F5:76:AE:EA
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01929E976F169D272B4A6C2263B6B961B236
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/bcrnHyHLl2-nkIdaU3zalPV2ruo.roa
Signing time: Fri 18 Oct 2024 07:46:17 +0000
ROA not before: Fri 18 Oct 2024 07:46:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 17:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:97:6f:16:9d:27:2b:4a:6c:22:63:b6:b9:61:b2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 18 07:46:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dcae71f21cb976fa790875a537cda94f576aeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:45:4d:82:c2:57:c3:ab:1b:7c:c0:9c:bd:b7:
c9:6e:3d:55:81:14:44:db:61:0c:8b:3e:2e:d2:9f:
48:fd:17:d3:4a:4e:e3:97:ac:d1:f7:a6:09:ad:5a:
87:63:93:bc:e8:c2:16:01:6d:8b:70:13:f0:9d:a3:
ae:b2:98:d8:09:88:7d:fc:ea:be:03:7f:3e:5c:58:
b0:cf:26:89:69:d2:54:dc:15:44:b9:40:6b:34:aa:
7e:ba:b5:f5:1a:a3:9b:c5:a0:6f:c6:f3:6d:ae:e7:
32:68:f2:e5:5c:6b:79:76:70:1d:df:a5:5d:9f:21:
e3:a9:73:4c:52:53:a0:5a:ca:85:18:20:cc:09:31:
50:8c:e7:2d:ee:73:07:f3:1d:1e:6d:96:e1:22:db:
dd:aa:95:9c:67:88:12:9c:a6:ee:45:b1:1d:09:f6:
ba:bf:87:ef:20:4c:3c:73:9a:37:ae:33:21:ae:83:
ac:74:e1:a0:86:2c:bd:ec:ef:4a:66:bb:5b:f7:86:
9d:95:d1:c4:57:b3:20:6a:6c:0e:a0:a7:57:f7:2a:
c5:c2:05:2d:8b:ac:23:ec:f9:c3:db:81:2e:90:53:
99:1b:21:f0:9d:d7:e7:aa:f8:9b:00:75:3c:33:d3:
11:a2:8f:83:fa:32:71:46:3c:ac:d5:af:b3:22:af:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CA:E7:1F:21:CB:97:6F:A7:90:87:5A:53:7C:DA:94:F5:76:AE:EA
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/bcrnHyHLl2-nkIdaU3zalPV2ruo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5d:d3:19:4e:73:fc:ab:a2:35:ee:ba:59:17:63:b5:8b:bb:
f1:95:47:96:e6:55:2a:8b:f9:6e:0f:ef:79:7e:17:2e:47:05:
75:aa:ef:8a:ce:92:c8:69:70:50:33:02:ea:a9:3b:ca:0e:0b:
00:c5:d9:39:c5:90:ff:18:f0:28:35:58:eb:31:ac:71:89:5f:
80:02:57:23:0f:6e:a7:e4:58:e4:8e:c3:ff:e1:4e:e7:5f:26:
f9:bd:b1:19:cc:cf:f0:a0:ae:60:b6:1e:e8:c8:eb:dd:be:35:
da:3d:4a:23:0f:fa:8e:00:24:23:f5:6c:7c:e1:02:ab:86:6f:
16:38:19:69:c7:59:9f:e0:a0:aa:8c:2e:32:f4:e0:00:04:d1:
89:0e:a6:b6:5e:82:ce:09:5d:8b:56:40:51:3e:d1:96:1e:bb:
bc:77:4d:cf:74:a5:09:5c:35:c1:16:1d:5e:07:11:d1:4c:44:
33:9b:ac:de:9c:dd:63:3c:b2:ad:34:25:83:22:ff:80:bb:0c:
84:fc:e6:89:8d:b2:28:0b:f7:02:50:e0:c1:99:98:65:ae:81:
75:69:25:2d:db:9e:bd:8e:c0:52:eb:f2:22:68:a8:df:08:33:
e0:1f:c5:36:2a:62:24:29:4e:26:d7:b2:12:59:5b:71:a7:22:
47:fa:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 18:56:41 2024 by rpki-client on console-fra.rpki-client.org