Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/c064TDuMavCpQe0GNPRRGkF_iWA.roa
File: c064TDuMavCpQe0GNPRRGkF_iWA.roa (raw, json)
Hash identifier: SIdr3PsqacyckM4i4GTjkQ/YlTRrIzCe1kSePPAYYLM=
Subject key identifier: 73:4E:B8:4C:3B:8C:6A:F0:A9:41:ED:06:34:F4:51:1A:41:7F:89:60
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0192AFC773E253C451E582E2C1917794D189
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/c064TDuMavCpQe0GNPRRGkF_iWA.roa
Signing time: Mon 21 Oct 2024 15:52:16 +0000
ROA not before: Mon 21 Oct 2024 15:52:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.246.229.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 06:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:c7:73:e2:53:c4:51:e5:82:e2:c1:91:77:94:d1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 21 15:52:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=734eb84c3b8c6af0a941ed0634f4511a417f8960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:32:85:d8:93:da:5d:9a:73:7e:29:53:de:
ae:9d:6f:c7:34:59:c9:25:7f:1c:1e:0b:5e:95:04:
e6:3c:7b:b7:f4:a1:58:e5:1d:6e:97:3c:b3:94:5a:
14:62:48:a0:03:77:e2:82:32:66:45:ef:c0:fe:c3:
e2:84:2c:05:2d:52:a3:88:63:97:4e:1e:95:de:32:
72:0b:c5:09:d7:d3:5a:5c:0c:80:4d:89:58:b0:35:
95:85:51:38:e2:93:07:b5:61:78:5a:2f:91:71:dc:
09:8d:72:67:a8:14:76:05:cf:db:17:4d:6d:3c:ef:
35:bb:89:81:2b:e8:8e:84:fb:64:7b:a2:53:ef:cb:
5e:d3:a9:da:37:a7:0b:0c:cf:bb:76:41:cb:14:c2:
bd:0c:69:02:4a:ee:e0:97:a6:5f:19:05:d5:49:40:
03:c3:50:fb:bc:25:09:2a:06:d0:a7:46:b9:10:f1:
58:a5:11:8d:d8:9d:51:60:5a:6d:ba:66:af:fc:88:
c9:89:ff:2d:74:71:94:68:1e:c2:73:07:12:4d:1f:
ce:db:2d:75:35:dd:79:1a:22:95:c3:b0:f5:2c:ad:
7a:5d:8b:d3:84:ba:f3:3b:71:8b:c2:de:8f:24:21:
27:b1:98:ed:6b:7a:c9:4f:d1:f7:b4:7a:7e:af:86:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:B8:4C:3B:8C:6A:F0:A9:41:ED:06:34:F4:51:1A:41:7F:89:60
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/c064TDuMavCpQe0GNPRRGkF_iWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.229.0-80.246.230.255
Signature Algorithm: sha256WithRSAEncryption
1f:0d:8e:ac:01:dd:81:02:fd:9f:ee:26:a8:14:05:fc:d0:c2:
f4:44:eb:90:d9:2d:f8:b5:c5:3f:bf:11:48:60:27:83:9b:98:
fe:02:01:bd:54:9c:12:e5:c9:e8:94:df:fe:86:6e:6b:ce:46:
9a:9d:a5:09:e0:ae:5e:30:65:7c:7a:dd:fb:18:99:8d:66:4e:
34:18:51:1f:a0:23:3e:87:92:a9:20:15:e8:74:3e:59:f6:b4:
bc:d4:11:e0:45:52:f7:99:2d:33:67:cc:0d:ab:ef:12:d6:e5:
ed:69:d7:69:0d:7f:de:63:ac:e5:87:54:bb:92:8a:0c:14:46:
13:96:e7:96:b8:08:d5:15:b5:16:7c:d4:7c:1f:1a:f4:b8:8c:
bd:51:4f:f9:b8:d6:53:ba:c6:2a:15:27:9b:38:cf:c1:3c:47:
2c:94:26:07:6c:2f:cb:be:c5:2d:e1:79:21:ad:63:40:70:f7:
48:b7:fd:8a:a3:d7:6d:3c:de:6d:f5:50:16:22:5c:ad:89:78:
fd:88:7c:d0:3e:58:5f:04:2d:99:8d:41:ce:59:72:b3:01:bb:
2e:d3:87:39:c6:a2:c4:ae:f0:02:6c:7e:bd:72:0a:e1:45:47:
65:eb:20:61:cc:c4:1f:fa:6a:85:a2:0d:9a:00:98:24:8f:56:
c1:3c:19:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 08:44:36 2024 by rpki-client on console-ams.rpki-client.org