Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/rL52iKs2UBj8uYa7KL8g75w8D8Y.roa
File: rL52iKs2UBj8uYa7KL8g75w8D8Y.roa (raw, json)
Hash identifier: LR1WYsLTT7qhsdkc41nUWY2CXZjTYq8O8X4dOR9jCP4=
Subject key identifier: AC:BE:76:88:AB:36:50:18:FC:B9:86:BB:28:BF:20:EF:9C:3C:0F:C6
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0187A279C2B24F0FE85BBB7D5753250369C1
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/rL52iKs2UBj8uYa7KL8g75w8D8Y.roa
Signing time: Fri 21 Apr 2023 06:21:41 +0000
ROA not before: Fri 21 Apr 2023 06:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:79:c2:b2:4f:0f:e8:5b:bb:7d:57:53:25:03:69:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Apr 21 06:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acbe7688ab365018fcb986bb28bf20ef9c3c0fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:98:cd:92:78:06:ee:c6:fa:3b:94:0b:01:
a5:70:32:2f:79:9c:b6:84:5b:7d:53:7d:84:28:f9:
73:23:a2:45:c4:49:66:4c:20:68:bd:d5:a8:26:70:
84:a5:46:40:c4:7d:28:89:d2:5b:b8:4e:a8:18:e9:
82:55:90:8e:89:27:f0:d4:a1:ae:23:fc:0d:51:4f:
97:24:2a:24:91:5a:f1:3b:3c:25:9d:e1:61:db:5b:
40:d7:29:3b:a9:ec:e2:85:48:25:cd:87:10:8e:01:
6d:fe:e4:2d:56:ed:07:9d:ee:67:a8:a3:f3:89:aa:
ce:80:30:28:e7:2e:f3:3f:fa:38:98:2e:96:cc:ef:
51:59:33:7a:1e:54:20:6b:39:bd:3e:8e:9d:13:f2:
82:39:f1:21:ec:f2:90:ae:5b:77:7c:4e:cc:d0:e1:
20:02:a7:bb:5b:b2:06:44:30:07:e0:df:fe:bb:6f:
c5:67:f9:e8:d5:5f:27:0d:51:2d:8b:6d:e9:06:fd:
c6:81:ac:57:40:bf:0d:9d:74:69:16:ea:44:64:ee:
e9:04:de:e6:94:c5:da:b0:25:56:2a:ea:d8:13:74:
50:8d:13:4b:9f:70:b7:9d:3a:c5:f6:92:32:64:bc:
e7:0a:59:9e:a9:8a:2b:f0:87:0d:8c:e5:7a:bb:2d:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BE:76:88:AB:36:50:18:FC:B9:86:BB:28:BF:20:EF:9C:3C:0F:C6
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/rL52iKs2UBj8uYa7KL8g75w8D8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5b:de:5d:11:e1:d9:e3:76:0e:86:66:2d:08:0c:1d:4f:0a:
e6:18:09:89:2b:d3:0d:9b:ab:a4:93:66:b2:24:99:2a:c7:b0:
ab:f2:a9:9b:fa:78:02:34:b8:d1:e8:10:e0:c3:e0:80:67:6d:
bf:0d:ac:f4:54:f8:d4:57:b5:c5:db:f8:40:b5:0e:00:50:7f:
81:c1:72:b9:99:f5:91:92:09:ef:6b:f7:a0:98:5c:22:05:7f:
38:a5:8b:71:1f:84:df:16:ce:cc:46:0b:8f:74:4b:06:63:72:
f6:16:48:a6:15:89:27:c0:8c:5a:66:d7:4e:1d:2b:5a:9a:65:
9b:41:8a:38:88:70:c1:84:c5:bc:f5:15:6c:7b:0f:ba:1f:dc:
f8:32:bc:f4:89:b0:b2:34:d0:01:37:d9:4e:11:54:ef:6e:20:
a5:b0:2d:70:12:0a:2d:8e:66:ab:ca:df:12:76:b7:45:0a:4f:
ef:72:f3:e4:68:88:9c:26:6e:a2:86:60:77:bd:82:2b:86:c3:
1a:a1:a5:5f:ec:ec:b7:44:dd:f5:2c:ee:c6:b5:7d:a1:fb:18:
37:44:92:a3:0a:47:7c:65:53:44:c3:61:b2:ea:d4:05:f2:c7:
c2:52:9d:10:df:a4:81:d1:97:3c:e9:ee:aa:b5:ea:ab:43:18:
fc:28:4c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:17 2024 by rpki-client on console-fra.rpki-client.org