Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/r8ce_DsqoAWdfPEE-XKwB3Jtb-8.roa
File: r8ce_DsqoAWdfPEE-XKwB3Jtb-8.roa (raw, json)
Hash identifier: XZ1yKgw8PxMuqqnxpqwB+B40KStJF2PJgJSiunyXhKo=
Subject key identifier: AF:C7:1E:FC:3B:2A:A0:05:9D:7C:F1:04:F9:72:B0:07:72:6D:6F:EF
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0185E57A91CC921A41C5A086FCD189E0E0D7
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/r8ce_DsqoAWdfPEE-XKwB3Jtb-8.roa
Signing time: Tue 24 Jan 2023 20:31:33 +0000
ROA not before: Tue 24 Jan 2023 20:31:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 80.246.224.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:7a:91:cc:92:1a:41:c5:a0:86:fc:d1:89:e0:e0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 24 20:31:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afc71efc3b2aa0059d7cf104f972b007726d6fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:ab:df:cc:6d:cf:0f:1c:eb:59:82:8c:6a:
cc:75:87:6a:8e:ff:b7:aa:51:6a:a3:be:b4:fd:9a:
ad:fd:48:7d:42:89:ce:1c:e9:44:98:21:ab:57:03:
0c:78:c8:2f:cc:3f:8e:06:e2:3d:b1:42:a8:f5:0c:
71:76:17:59:fe:17:f3:26:a1:62:0f:f5:43:ed:d5:
ca:ac:de:7e:e2:de:83:24:15:6b:b1:db:cf:93:8b:
5a:b2:80:1b:12:2f:46:0e:6e:bf:d2:f4:67:bd:54:
ea:6c:34:da:ef:11:17:ff:2d:81:01:d0:30:8e:c2:
e9:a5:0b:35:cf:e3:4b:22:db:70:1e:33:cd:18:5f:
25:cb:72:4c:e0:55:ce:61:8e:cf:be:e3:8d:2c:02:
14:e9:f2:61:b9:ef:d1:70:7f:a8:dc:d6:44:7b:ed:
b9:47:9e:7a:86:41:01:b1:f2:3e:3a:4f:68:b6:58:
7e:de:59:07:1d:bd:40:c7:2c:ff:8b:07:e2:4d:15:
5d:94:dc:e2:e1:27:bb:67:46:cb:cd:f3:80:3c:cc:
8d:6a:91:d8:85:36:7e:71:31:ea:97:18:58:84:7d:
f3:f9:dc:e0:45:f2:33:22:ee:1f:01:e7:2d:1c:89:
34:0a:01:73:9c:14:90:66:e2:c4:fe:fe:c6:6c:4c:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:1E:FC:3B:2A:A0:05:9D:7C:F1:04:F9:72:B0:07:72:6D:6F:EF
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/r8ce_DsqoAWdfPEE-XKwB3Jtb-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.224.0/21
Signature Algorithm: sha256WithRSAEncryption
80:61:3f:80:f5:4e:c2:e3:8d:f4:b6:a7:ea:bf:6c:36:53:b2:
66:1a:07:3b:33:91:d1:d7:91:26:d4:81:15:d3:67:1e:41:16:
c6:8b:27:11:59:e1:dd:63:a2:39:60:25:a5:54:c2:d3:37:3d:
47:3e:2c:63:57:8d:17:5c:05:24:d0:6e:02:a4:0b:0e:e6:f2:
ba:78:10:a9:5d:d9:99:0b:27:b0:6e:9a:8d:f2:b1:5b:ac:de:
69:15:52:1c:6e:03:a0:89:80:6b:7a:5b:79:0c:04:6e:51:40:
68:0d:bf:ae:13:34:02:f8:d0:1a:b9:89:f4:97:d8:cc:82:b4:
88:9b:4a:80:f2:ea:a3:44:db:4e:da:f8:fc:75:a7:6e:12:eb:
91:c5:92:16:84:ff:f7:31:7b:06:10:c5:cf:52:09:97:0a:ca:
9a:6f:3d:a2:d4:5e:76:12:80:28:59:69:06:de:77:87:74:c1:
d3:39:f6:aa:45:f3:88:b0:a9:59:0b:9b:50:ba:4b:b2:8d:e6:
ff:ed:dd:7b:43:cf:3f:40:d1:79:3b:1b:e5:32:20:9c:b9:c1:
14:9c:1a:83:a5:f7:30:ff:0b:2c:52:5c:85:0d:0a:60:de:c4:
53:55:65:94:d7:2e:cd:92:95:f3:ff:72:0a:a2:fd:40:f3:7a:
06:ee:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:38 2024 by rpki-client on console-ams.rpki-client.org