Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/daNKB8v0hqtJ9wAXwZGwsydCJE8.roa
File: daNKB8v0hqtJ9wAXwZGwsydCJE8.roa (raw, json)
Hash identifier: VNHFmLUjtnw4PwrILVvH4aRtweVD7atDq9LJTCDB64U=
Subject key identifier: 75:A3:4A:07:CB:F4:86:AB:49:F7:00:17:C1:91:B0:B3:27:42:24:4F
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018689F27AE45DAB5FBDB4CFD9BE6710F957
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/daNKB8v0hqtJ9wAXwZGwsydCJE8.roa
Signing time: Sat 25 Feb 2023 19:00:14 +0000
ROA not before: Sat 25 Feb 2023 19:00:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 80.246.231.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 05:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:f2:7a:e4:5d:ab:5f:bd:b4:cf:d9:be:67:10:f9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Feb 25 19:00:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75a34a07cbf486ab49f70017c191b0b32742244f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:eb:8c:4f:f9:01:81:a4:14:be:17:b1:6a:
e6:31:34:b2:56:19:00:d7:43:48:b9:72:f6:88:b6:
b8:51:b0:e0:1e:28:0f:68:28:79:da:48:f7:e2:2c:
66:45:14:b5:8e:cd:38:6d:2b:40:c8:93:3c:27:28:
02:e3:8f:71:16:c4:69:d8:77:e0:bc:92:98:87:e1:
d0:6a:0a:04:a4:f8:fb:4e:79:8e:db:bc:a1:92:b6:
6c:7a:ad:fe:88:d3:d8:16:41:14:fa:bb:ee:6e:94:
20:17:91:a3:73:47:7d:cf:91:ca:3b:2f:d5:b2:c1:
09:11:ca:ca:bd:d5:f6:7a:7a:08:9f:0c:14:21:18:
c8:90:04:75:e9:07:99:c7:25:1e:ce:b2:02:15:05:
38:5a:c3:06:c9:3a:f9:dc:e5:6e:f8:4e:f4:1b:3c:
b7:07:83:e4:f1:3b:49:fc:29:81:ea:3f:7b:cb:8b:
3d:d2:2f:b4:7c:3f:2a:46:55:cf:28:ad:c2:0d:e6:
62:30:5f:88:2c:bf:7a:d7:34:bf:0d:d5:51:49:6d:
9a:35:c7:db:3b:90:a3:9a:12:be:91:b9:be:ae:f4:
21:ce:21:87:5b:16:f7:ed:cf:35:f8:1c:a2:91:ab:
ee:ae:c4:64:5a:2c:47:af:70:93:bd:80:9f:c1:8d:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A3:4A:07:CB:F4:86:AB:49:F7:00:17:C1:91:B0:B3:27:42:24:4F
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/daNKB8v0hqtJ9wAXwZGwsydCJE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.229.0/24
80.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:33:d6:7f:78:a5:05:18:b2:d4:b9:23:fd:a6:51:a8:64:bf:
d4:09:77:7f:f0:3e:1a:76:59:8e:71:5d:fc:69:49:75:da:66:
30:19:de:10:f2:11:41:2e:37:84:61:b0:52:2e:de:b1:1c:cf:
27:1a:93:e2:ce:98:17:43:23:58:97:cf:3e:b5:f9:50:6d:6a:
42:9f:a1:32:25:f7:20:aa:83:50:b3:2c:26:2d:ab:66:41:3c:
35:00:30:8d:7d:5f:8d:2f:00:5d:92:b1:8b:f0:38:63:70:13:
89:b7:46:96:67:b2:72:7e:2b:3c:aa:14:6e:e4:63:b0:31:0a:
97:87:d8:c9:0d:e2:14:6b:f0:2b:c2:9d:e8:0f:01:f3:70:94:
2e:9b:69:6c:2e:c0:f1:7f:37:76:c1:4f:93:5f:8c:b1:4e:22:
f9:52:a0:d5:92:38:bb:07:49:f1:f6:37:cc:75:b6:b9:0d:53:
f5:d1:b2:69:40:d5:7f:1b:f3:6a:07:c9:82:ab:a0:88:9f:d5:
cb:2e:47:44:b9:21:fa:82:c1:a1:48:34:72:c1:26:9c:93:a8:
fa:10:3e:54:58:62:4d:7e:f5:4f:23:a8:15:44:7d:5a:37:76:
cf:6a:5d:06:59:3d:9d:ad:54:50:60:b7:26:6f:49:cb:8f:20:
7d:35:69:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org