Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/pKV5zOdYZ__E4hZHH4iHUFy6rD0.roa
File: pKV5zOdYZ__E4hZHH4iHUFy6rD0.roa (raw, json)
Hash identifier: BhLOSkap5egbfsLfb5GQ//PW4BsTrGqS2RQRvF/RCEs=
Subject key identifier: A4:A5:79:CC:E7:58:67:FF:C4:E2:16:47:1F:88:87:50:5C:BA:AC:3D
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0191DB4578A967EB7D979FC86DFA047EA18C
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/pKV5zOdYZ__E4hZHH4iHUFy6rD0.roa
Signing time: Tue 10 Sep 2024 09:30:48 +0000
ROA not before: Tue 10 Sep 2024 09:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198510
IP address blocks: 80.246.224.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 09:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:45:78:a9:67:eb:7d:97:9f:c8:6d:fa:04:7e:a1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Sep 10 09:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4a579cce75867ffc4e216471f8887505cbaac3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:55:83:97:6c:eb:3f:dd:60:0b:d3:5c:fe:
5f:d5:7b:9c:be:e0:5e:a8:11:e2:c6:9a:08:cb:4a:
4f:9e:d2:3d:f0:e4:bf:34:0f:76:3c:20:de:7b:c9:
7c:35:d1:6b:0e:ae:c1:82:53:90:d7:54:d5:98:49:
4f:b3:60:b1:ff:75:b5:22:0b:58:c8:c4:29:c7:fc:
25:25:44:e1:40:f1:4b:7e:a3:cb:87:ad:df:4a:8c:
9e:a2:81:84:fd:f6:e4:62:2e:37:9f:73:c0:ba:57:
88:54:e9:1c:95:36:a5:43:bd:39:f2:99:a2:0c:f3:
25:da:c6:8e:d6:52:da:b5:a7:8b:ce:88:0f:ea:14:
65:f6:a5:33:e1:6b:c4:50:67:a8:4b:64:2c:d0:83:
3b:8a:88:80:83:53:40:2d:65:a5:a4:b8:9e:fe:3b:
80:3b:fe:3a:e9:f5:07:31:90:ff:72:b2:4e:bc:57:
74:40:94:bc:9a:27:7e:fa:19:25:52:2d:56:45:ed:
61:c2:43:af:1a:65:d3:12:38:8b:c9:05:7e:50:79:
94:2a:6a:89:c5:37:8d:13:68:5f:69:79:cd:40:2a:
d5:69:e0:d0:e5:67:ca:f1:97:51:e6:54:d3:99:37:
0c:c6:71:cf:34:ba:81:74:ca:0e:28:12:8b:57:a8:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A5:79:CC:E7:58:67:FF:C4:E2:16:47:1F:88:87:50:5C:BA:AC:3D
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/pKV5zOdYZ__E4hZHH4iHUFy6rD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.224.0/24
80.246.229.0/24
Signature Algorithm: sha256WithRSAEncryption
95:83:be:ba:12:74:4b:7d:f6:4a:76:5f:09:48:55:80:ee:96:
0a:8d:f1:4a:e3:26:57:16:45:8a:c9:c5:d3:7e:96:81:08:68:
1c:10:d3:c7:97:d7:8d:cf:a0:da:50:75:31:a4:08:08:47:23:
37:4f:2b:01:8a:b1:e0:72:7a:f9:a1:2b:f3:ba:15:5b:77:c0:
60:46:30:40:36:e8:44:0f:49:17:1a:30:34:e5:9e:1b:b6:d3:
fd:f3:28:f8:ad:ff:62:22:09:0a:0c:0e:fc:f7:45:8a:3f:59:
fb:35:a5:a3:d2:7c:fe:53:8f:e0:69:1d:da:b7:39:37:ac:a3:
7b:d5:98:5a:e2:bf:14:d1:66:9b:3a:ec:4c:76:9a:92:df:7a:
06:3b:80:39:1a:1f:0a:e5:ee:5b:49:51:1a:b7:1b:7f:51:fc:
83:d8:04:ea:53:57:95:8f:8a:94:d7:13:54:da:61:0e:26:d9:
94:5f:3f:2e:67:18:57:38:81:b0:35:f4:b2:2b:6f:16:56:f7:
45:1a:bb:30:09:a2:81:b2:2e:90:fc:0e:92:56:7c:e9:1d:b8:
7d:5d:d6:f3:cd:46:53:ef:08:64:1a:bf:8b:39:e4:0f:1a:e7:
4e:ee:c2:6d:ee:38:b2:b1:a0:21:04:70:d2:b6:05:d3:d0:bf:
0e:68:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 14:52:52 2024 by rpki-client on console-ams.rpki-client.org