Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/c-D2QTdMFLBOfb6e3WWLUViNiMg.roa
File: c-D2QTdMFLBOfb6e3WWLUViNiMg.roa (raw, json)
Hash identifier: CEBXBarrZrgLYeCrChRx8MAoGcIqCCvaj6pW5wldCwI=
Subject key identifier: 73:E0:F6:41:37:4C:14:B0:4E:7D:BE:9E:DD:65:8B:51:58:8D:88:C8
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01856C813C7C2599D4C35051FB24ADECD11A
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/c-D2QTdMFLBOfb6e3WWLUViNiMg.roa
Signing time: Sun 01 Jan 2023 08:44:46 +0000
ROA not before: Sun 01 Jan 2023 08:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3c:7c:25:99:d4:c3:50:51:fb:24:ad:ec:d1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 08:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73e0f641374c14b04e7dbe9edd658b51588d88c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:dc:e7:1f:1a:5a:b2:8d:fa:61:a9:ca:a8:
90:e0:fc:5b:d3:65:90:1a:09:42:9f:c4:2b:d9:59:
78:64:b3:07:98:30:dd:22:73:1e:f4:0a:ac:0a:37:
18:ed:d3:7c:ed:88:3d:e2:42:a7:f6:f4:cc:27:79:
ec:b6:30:84:ee:28:bc:0c:1f:1f:13:c4:92:74:d9:
2b:c0:3e:1f:68:6f:f1:14:62:b7:24:d0:8c:fb:e5:
68:fe:66:bb:c6:d7:23:20:05:53:92:ca:93:db:ce:
0e:bf:8b:33:50:f3:42:82:f3:fc:e6:ea:8c:d3:80:
8f:b7:1a:e0:52:13:78:09:b0:73:d2:4f:f7:81:0a:
6a:f7:df:d3:0a:5f:8c:6f:d2:71:49:ba:99:d3:ea:
c8:2b:29:8e:fd:1a:f9:19:90:ed:4b:b4:08:22:70:
90:86:41:14:aa:bb:ce:db:2b:2c:b1:f7:3f:9e:d6:
de:a0:ba:72:c2:a5:a5:72:60:9c:20:4b:2e:02:6f:
12:c8:15:ce:92:27:71:e4:c5:db:72:13:b0:ed:a4:
85:ea:bc:31:9d:48:67:ec:4e:b2:0d:cf:9a:5f:b6:
5a:13:6b:52:5e:c8:e6:1e:b3:2b:3f:67:b0:e2:56:
90:16:40:f4:0d:4f:77:c6:88:c2:ba:f5:8d:e8:3a:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E0:F6:41:37:4C:14:B0:4E:7D:BE:9E:DD:65:8B:51:58:8D:88:C8
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/c-D2QTdMFLBOfb6e3WWLUViNiMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a9:d6:ea:16:53:3c:73:2d:47:ce:7d:26:75:88:33:f9:7d:
c0:da:10:08:ec:d0:a2:0a:78:42:fc:88:ce:17:82:57:af:5e:
23:f5:a2:2a:41:12:dd:03:e9:43:3a:45:73:33:7f:24:43:ab:
1a:c9:1b:46:f6:72:62:f6:12:f5:43:78:8c:42:29:51:7e:eb:
8d:d9:5f:9c:fc:db:ce:1b:67:fd:e7:aa:7d:46:41:c8:62:d3:
3b:00:51:c3:86:a2:6f:79:41:43:c9:c4:0a:0b:6c:da:ee:31:
99:6f:21:e0:8b:be:ba:38:80:57:04:aa:dc:5b:b1:e0:54:7b:
a1:29:fe:b8:46:45:43:82:0d:82:af:80:7c:01:c1:d4:da:af:
64:f5:83:dc:ef:47:80:79:9f:ac:f4:24:3d:a4:68:ef:90:ec:
f1:c5:92:07:0b:5e:1f:e6:f8:0f:49:b8:6e:f1:44:e3:d5:b8:
f4:b8:45:85:b3:74:e7:4c:11:1e:6a:0b:f6:b5:d1:c9:84:09:
48:0c:51:36:c6:99:7a:fb:02:c6:b6:07:80:66:f9:8d:e1:27:
41:4e:3a:ef:e9:b4:27:7f:d6:f3:f1:a3:45:b8:1b:5e:c8:71:
83:91:d1:69:7d:2b:52:73:5a:ba:fd:bb:c0:de:d9:f5:42:d5:
de:63:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org