Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/h7CBBnBOM6yT5RtJBjhL-ms3uUE.roa
File: h7CBBnBOM6yT5RtJBjhL-ms3uUE.roa (raw, json)
Hash identifier: Y6HIJcQg9EMBBkKPSTNLp0s/AR6Iwn2DZI22bYfer84=
Subject key identifier: 87:B0:81:06:70:4E:33:AC:93:E5:1B:49:06:38:4B:FA:6B:37:B9:41
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01902CB36C33DA27A70024FF566D8499B2AE
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/h7CBBnBOM6yT5RtJBjhL-ms3uUE.roa
Signing time: Tue 18 Jun 2024 18:54:34 +0000
ROA not before: Tue 18 Jun 2024 18:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Aug 2024 07:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2c:b3:6c:33:da:27:a7:00:24:ff:56:6d:84:99:b2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jun 18 18:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87b08106704e33ac93e51b4906384bfa6b37b941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:ab:70:6b:16:db:1f:1b:bf:bb:ed:d5:ce:
16:3a:d6:48:40:7f:6a:31:36:dc:f0:da:4e:14:b7:
59:a3:6b:ea:1c:4b:68:eb:ef:4c:f0:36:13:a5:7f:
d7:3d:16:27:8c:c0:5c:ba:45:f9:84:93:15:80:a0:
1c:85:b2:1c:80:70:00:0b:f8:3b:eb:a6:18:f7:00:
4c:00:f9:4c:16:3a:45:b0:cb:44:fa:2c:97:3d:77:
e9:97:fa:73:2f:7e:a3:6b:ea:2a:8e:36:ce:70:bc:
23:11:89:29:5c:71:03:2e:18:55:fc:72:d3:00:57:
3b:40:01:b6:16:b7:55:d4:db:65:3f:c1:3c:b3:8c:
19:c1:99:46:0d:1b:0a:c2:60:b7:11:b9:ab:73:00:
8d:23:50:aa:c0:cf:b5:70:b5:0a:fa:b2:a7:9a:16:
c8:86:86:ea:0f:ac:0d:8a:09:cc:80:32:89:22:60:
bf:22:d1:ad:4d:81:69:ca:89:e5:88:b1:8b:db:3c:
0a:20:2a:67:2e:5f:21:59:db:a6:9b:65:b1:81:26:
76:b6:09:0e:56:51:47:f3:3d:8c:16:34:d9:7b:bf:
0d:a3:a6:00:20:c7:4a:ee:9f:62:c1:15:fa:4c:d3:
b0:17:0c:0c:69:71:4e:93:a2:b5:18:10:52:67:ae:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B0:81:06:70:4E:33:AC:93:E5:1B:49:06:38:4B:FA:6B:37:B9:41
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/h7CBBnBOM6yT5RtJBjhL-ms3uUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8d:46:9f:58:7f:5a:36:48:e3:ff:ec:78:a8:4c:6e:f2:64:
88:56:3a:c5:09:2a:4f:77:c9:41:cd:cb:8c:0b:66:9f:a3:4b:
1f:dd:c7:4e:fe:f1:a3:9a:44:27:40:01:13:5f:36:b4:b1:ac:
39:ad:cb:59:59:7a:98:88:f9:6e:55:0a:a1:d6:82:7d:04:30:
19:63:d5:d3:30:48:4d:e8:ec:ea:02:97:e1:35:10:99:da:79:
15:8a:22:dd:19:1b:3e:b4:d1:56:98:b8:fd:49:20:a2:7a:da:
24:ab:05:f2:36:fc:52:b1:58:71:50:1a:d1:7b:97:7c:7c:a8:
ea:6e:49:97:af:e9:4c:a4:d9:4a:2e:c4:7e:86:ba:9a:ac:df:
82:3f:b7:ec:94:a8:47:ad:f6:98:8a:c9:36:33:5d:fe:cd:ff:
f2:bc:71:04:7c:27:9a:5b:f3:f1:3b:9e:f4:f4:28:9a:23:63:
40:82:72:18:75:eb:2e:13:f7:7f:ff:52:0d:07:28:c0:d9:e7:
87:11:5a:f1:b9:1e:45:3f:75:4b:11:36:f6:1e:71:4a:9a:75:
7d:22:d5:df:36:7c:bc:2a:1e:58:b6:23:70:aa:25:35:b2:0b:
07:8e:d9:19:dd:4f:33:77:c8:c7:cc:d3:0e:e7:be:e6:e4:d1:
46:12:f0:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAss2wz2ienACT/Vm2EmbKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjQwNjE4MTg1NDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2IwODEwNjcwNGUzM2FjOTNlNTFiNDkwNjM4NGJmYTZiMzdiOTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6ircGsW2x8bv7vt1c4WOtZIQH9q
MTbc8NpOFLdZo2vqHEto6+9M8DYTpX/XPRYnjMBcukX5hJMVgKAchbIcgHAAC/g7
66YY9wBMAPlMFjpFsMtE+iyXPXfpl/pzL36ja+oqjjbOcLwjEYkpXHEDLhhV/HLT
AFc7QAG2FrdV1NtlP8E8s4wZwZlGDRsKwmC3EbmrcwCNI1CqwM+1cLUK+rKnmhbI
hobqD6wNignMgDKJImC/ItGtTYFpyonliLGL2zwKICpnLl8hWdumm2WxgSZ2tgkO
VlFH8z2MFjTZe78No6YAIMdK7p9iwRX6TNOwFwwMaXFOk6K1GBBSZ66/YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIewgQZwTjOsk+UbSQY4S/prN7lBMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvaDdDQkJuQk9NNnlUNVJ0SkJqaEwtbXMzdVVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPbmMA0G
CSqGSIb3DQEBCwUAA4IBAQBsjUafWH9aNkjj/+x4qExu8mSIVjrFCSpPd8lBzcuM
C2afo0sf3cdO/vGjmkQnQAETXza0saw5rctZWXqYiPluVQqh1oJ9BDAZY9XTMEhN
6OzqApfhNRCZ2nkViiLdGRs+tNFWmLj9SSCietokqwXyNvxSsVhxUBrRe5d8fKjq
bkmXr+lMpNlKLsR+hrqarN+CP7fslKhHrfaYisk2M13+zf/yvHEEfCeaW/PxO570
9CiaI2NAgnIYdesuE/d//1INByjA2eeHEVrxuR5FP3VLETb2HnFKmnV9ItXfNny8
Kh5YtiNwqiU1sgsHjtkZ3U8zd8jHzNMO577m5NFGEvBK
-----END CERTIFICATE-----
Generated at Sun Aug 11 09:41:02 2024 by rpki-client on console-fra.rpki-client.org