Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/niDDbxhQIMgjfW1Fja_hF_HVTYk.roa
File: niDDbxhQIMgjfW1Fja_hF_HVTYk.roa (raw, json)
Hash identifier: AcuprIG9qesDfFBG5NzorSVj5LA8NXSJhZL5QZ6d71g=
Subject key identifier: 9E:20:C3:6F:18:50:20:C8:23:7D:6D:45:8D:AF:E1:17:F1:D5:4D:89
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018E867345DC09C4320D5E5AC7AAA94E28FA
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/niDDbxhQIMgjfW1Fja_hF_HVTYk.roa
Signing time: Thu 28 Mar 2024 19:04:45 +0000
ROA not before: Thu 28 Mar 2024 19:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 80.246.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 07:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:73:45:dc:09:c4:32:0d:5e:5a:c7:aa:a9:4e:28:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Mar 28 19:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e20c36f185020c8237d6d458dafe117f1d54d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:75:04:08:83:68:90:44:08:9f:31:8e:df:
4e:8f:8d:c0:e9:d8:3a:96:42:9b:92:50:2b:8f:e5:
18:78:a1:58:cd:31:10:02:46:1d:63:a1:57:4e:bb:
53:60:ab:00:c0:47:b5:08:7c:96:1f:d6:bc:88:79:
69:8e:0b:9c:90:0c:f1:81:f0:e5:d5:75:96:5c:28:
f8:cb:ac:e1:95:a5:0a:4e:d3:1a:b2:e0:36:1d:da:
cc:0c:68:e7:71:27:62:07:e2:b1:7b:68:6b:f6:a7:
49:0d:2c:de:6b:a2:2d:9c:1c:18:07:9a:97:27:a2:
e8:6c:b1:2a:c8:a2:8f:2b:41:e1:6b:c3:95:d0:a8:
ba:c9:9e:b0:53:45:b7:57:fd:e7:cb:f3:f5:cf:95:
38:b6:f9:38:6e:9e:04:96:14:7f:ee:b6:af:ad:41:
30:e3:7f:40:46:01:d2:70:9b:9d:d7:86:7a:9b:84:
f1:37:b3:3d:52:03:db:a4:bd:f2:3d:1f:f8:55:62:
c9:3e:e3:01:1c:24:a2:8e:d5:f4:33:3f:2b:46:f8:
6f:fc:80:68:40:8d:54:d1:ed:8e:51:51:8b:82:e6:
c4:04:94:61:67:93:2f:e6:0d:5f:04:9a:dd:a9:10:
65:a3:ac:dd:4a:df:60:07:65:2b:22:99:ba:d4:36:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:20:C3:6F:18:50:20:C8:23:7D:6D:45:8D:AF:E1:17:F1:D5:4D:89
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/niDDbxhQIMgjfW1Fja_hF_HVTYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.226.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b3:a5:9b:43:cb:05:41:7c:f5:6a:ca:cd:4a:50:0c:96:38:
f4:13:ed:c1:57:a5:ed:28:0b:5e:4a:47:92:85:6f:2d:0d:57:
0a:4d:7f:96:3f:fe:8f:a9:08:66:e5:4d:fd:b4:45:20:81:73:
96:f1:bd:63:5c:e6:6e:96:e3:39:49:4a:e9:9a:51:96:94:b6:
cd:b2:61:14:c7:5a:81:97:ad:77:d7:5d:11:f9:b7:d9:b6:31:
70:a4:d4:c4:6b:6c:59:2d:eb:35:2d:62:46:87:18:7e:d0:6e:
ee:b2:03:5a:c8:72:78:fc:5b:ee:84:a6:70:29:02:92:7f:d3:
78:1f:2e:e0:97:44:71:46:4a:ea:40:26:da:3f:83:78:ac:2a:
8d:af:ce:22:23:a5:87:fb:a5:15:da:a0:e0:98:96:21:1b:1c:
f9:17:79:c0:fc:09:f4:c6:49:5e:50:9d:53:da:53:04:12:32:
11:87:a7:f7:9c:a2:0f:e6:27:98:c6:1d:ce:33:97:eb:01:52:
87:d7:d5:07:d6:61:c6:c3:d6:9d:85:45:54:fc:16:ff:18:14:
37:f4:6f:02:10:d9:5d:a4:a5:f5:8c:4a:a7:28:12:62:fd:0f:
31:8c:6b:d4:8a:14:af:3b:f1:cd:cf:1f:f2:3d:6a:a9:f1:31:
b0:f7:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 11:50:12 2024 by rpki-client on console-ams.rpki-client.org