Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eWbkPxTj67cwOO6qgUlu9DgkMik.roa
File: eWbkPxTj67cwOO6qgUlu9DgkMik.roa (raw, json)
Hash identifier: fbtuEg+FU+YOg7VMNga+5p24+op7ErUOzIEQvRlMZlY=
Subject key identifier: 79:66:E4:3F:14:E3:EB:B7:30:38:EE:AA:81:49:6E:F4:38:24:32:29
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01856C813B5DD7C1FCABA1C75247E2769580
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eWbkPxTj67cwOO6qgUlu9DgkMik.roa
Signing time: Sun 01 Jan 2023 08:44:46 +0000
ROA not before: Sun 01 Jan 2023 08:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33387
IP address blocks: 80.246.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3b:5d:d7:c1:fc:ab:a1:c7:52:47:e2:76:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 08:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7966e43f14e3ebb73038eeaa81496ef438243229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:d8:dc:93:26:61:46:f4:c4:e2:18:c2:af:
ab:d5:38:2f:2c:d8:c4:40:7e:8e:40:2a:38:d8:ca:
af:c2:3e:d3:16:bd:60:b0:07:eb:cd:55:e0:55:4c:
77:b6:08:1f:ce:9d:f1:a0:45:c8:3f:fd:2c:13:16:
f7:8a:14:19:18:c4:46:be:09:71:0e:2a:d4:ba:05:
9d:61:5d:83:0c:39:6e:dd:3b:e3:de:1c:3a:30:5b:
57:2e:fe:04:96:53:dc:c8:5b:86:df:e0:7f:6c:3b:
86:0c:fc:3a:d8:0e:d0:fe:84:6f:0d:7b:78:e0:cc:
3b:92:f7:3e:ec:da:3b:3f:95:77:fd:b6:84:94:b0:
b5:c3:cd:2a:10:b7:d2:0e:6c:ea:f6:5f:b2:79:f2:
66:54:94:18:96:f1:75:48:37:1b:3d:e9:9d:9f:53:
a9:a7:b0:25:72:44:97:b2:e5:af:07:80:b7:18:42:
df:2c:14:85:89:33:29:89:92:a1:40:a7:ee:77:5a:
fc:d9:2a:d1:98:37:d2:ab:43:83:70:bd:5f:2a:63:
eb:1c:31:e8:1e:72:40:b2:c5:fc:8c:a2:2c:81:49:
72:b8:cf:b4:87:e9:af:14:e5:09:f6:7a:b0:ec:6c:
f7:81:4a:5d:fe:4e:69:44:64:a6:da:07:20:31:9f:
aa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:66:E4:3F:14:E3:EB:B7:30:38:EE:AA:81:49:6E:F4:38:24:32:29
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eWbkPxTj67cwOO6qgUlu9DgkMik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.228.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f9:05:34:6c:51:35:2b:31:b1:72:5a:8b:18:d0:e3:d0:62:
29:24:25:6e:78:66:ca:33:9e:02:50:81:20:28:84:40:3a:47:
cb:7c:17:35:0b:76:e1:ab:ca:d0:01:a1:f5:1e:12:7d:19:7e:
8c:a5:77:a7:6d:5d:66:b6:e1:80:d2:9c:92:c7:43:fc:6a:41:
77:3c:79:36:d5:e4:1a:2f:e7:6e:4e:bd:45:4a:78:5d:90:2a:
77:22:3f:9b:24:b4:2c:c8:31:b8:b4:5c:87:7d:ab:7b:bb:ff:
d4:e7:90:12:20:fd:c5:cb:d0:1d:ce:f0:07:cb:ab:75:a1:8a:
5c:8f:63:62:ca:05:65:c4:7c:df:f7:55:80:62:75:cd:9f:6a:
2e:5f:42:9f:c4:fb:33:f1:f6:a0:9a:31:3a:dd:ba:a3:45:7f:
86:ff:ed:17:11:ab:1a:dd:18:53:1e:61:c9:85:df:f7:87:f9:
4f:3c:df:35:e8:61:35:da:38:e7:4b:23:0f:75:79:a8:1a:7a:
48:bd:6b:43:2b:47:a8:ff:0a:a8:2a:cd:e7:5a:a2:c9:7d:be:
96:78:f0:9e:31:7b:f6:c0:cc:ba:68:ef:5f:54:ec:27:e2:db:
3a:52:c1:8c:c8:0f:6b:f1:74:a6:11:1f:f8:5d:06:7a:2a:2d:
a6:3f:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-ams.rpki-client.org