Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/dvdz871N34-K25BNuZg8xGSBZG4.roa
File: dvdz871N34-K25BNuZg8xGSBZG4.roa (raw, json)
Hash identifier: l8mYRHpGdtBm0Ix5XCZZMsYR1Jbj/K99q4uF+uftbNM=
Subject key identifier: 76:F7:73:F3:BD:4D:DF:8F:8A:DB:90:4D:B9:98:3C:C4:64:81:64:6E
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018829B5B3E0399E37F831AD3327E1CB26E6
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/dvdz871N34-K25BNuZg8xGSBZG4.roa
Signing time: Wed 17 May 2023 12:35:53 +0000
ROA not before: Wed 17 May 2023 12:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.246.232.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
80.246.237.0/24 maxlen: 24
80.246.238.0/24 maxlen: 24
80.246.239.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:b5:b3:e0:39:9e:37:f8:31:ad:33:27:e1:cb:26:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: May 17 12:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76f773f3bd4ddf8f8adb904db9983cc46481646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:86:78:b0:4d:9a:7a:01:35:30:8c:4c:6b:
56:9d:60:b5:a6:63:15:9c:b0:47:26:a2:57:24:6a:
94:4c:ba:59:bc:db:ad:f4:57:d3:cb:fa:c3:48:2c:
6b:f6:ce:7d:5a:2a:4d:84:a4:31:f4:42:d6:f8:bf:
df:16:b8:53:76:62:69:e2:7f:62:b5:dd:c8:06:7e:
b9:0f:10:70:28:92:b8:bd:fc:87:25:db:0c:03:61:
6e:6d:47:7c:90:0d:07:30:04:c5:94:45:89:af:8f:
d5:f5:62:72:92:ef:dd:42:16:31:bc:75:cb:45:53:
f7:a8:c1:16:67:9d:c4:0d:81:4e:ec:65:05:91:10:
70:9f:4d:4b:27:18:34:1c:08:d5:9c:a5:4e:21:0c:
67:8f:d2:61:86:e9:d0:31:4c:fc:b7:9d:0c:43:16:
a0:c0:a4:06:0e:3c:7e:98:96:53:ff:f7:b9:d0:b5:
82:9c:86:7c:fe:50:ef:99:60:67:45:20:a3:25:c4:
65:02:a1:a0:01:83:e4:4c:9e:6d:6e:90:8f:8f:2b:
9e:06:c4:37:0d:48:09:cf:54:a5:dd:f1:36:67:6e:
15:6c:e6:d7:1a:09:4c:38:59:c8:22:dd:d6:10:d4:
f1:c6:da:83:99:fb:26:74:5b:5c:c3:84:cf:e5:a9:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F7:73:F3:BD:4D:DF:8F:8A:DB:90:4D:B9:98:3C:C4:64:81:64:6E
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/dvdz871N34-K25BNuZg8xGSBZG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0/24
80.246.234.0/24
80.246.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:06:23:b4:62:f6:eb:55:d8:41:5e:92:cd:70:db:cb:a2:f6:
12:06:bd:38:a4:1f:36:12:7d:9d:bc:e5:05:c2:46:87:b3:25:
93:12:34:14:f8:92:4f:48:ff:14:68:bd:84:23:bb:07:eb:8e:
70:b8:04:9c:cb:d9:df:fd:b0:f0:60:7f:27:7c:9a:cd:64:9b:
0e:b8:b0:85:82:88:5b:ee:4f:9b:27:6c:a4:fb:8d:05:89:6b:
24:88:fd:a3:6b:ce:eb:7c:b1:f6:0b:c5:7b:2f:38:7f:6e:38:
00:1d:67:8e:f9:9b:2c:bc:e0:24:b8:47:17:2d:9b:e7:62:30:
63:17:2f:f6:51:39:a7:1f:36:0f:8b:ae:a8:dc:af:77:01:2c:
ed:8f:fb:bc:30:48:40:bf:dd:a6:e3:2d:94:7e:bf:be:6d:83:
fa:44:73:42:61:aa:4a:e3:8f:ae:6b:67:86:b1:ca:8b:13:0a:
85:bb:e9:86:55:6b:a6:53:76:2c:26:18:26:f7:6b:40:21:41:
d4:13:fc:6c:58:71:98:97:4f:b1:f1:4f:52:d7:f6:71:02:6c:
85:79:b6:23:87:eb:c9:a8:09:cf:e5:3c:79:dd:6c:f2:50:b3:
84:7f:4f:2c:98:ad:d4:9f:67:96:44:b7:32:ab:f0:6a:dc:77:
e5:c3:0d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org