Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/rYS79Z72k0A-MzsRJ6ByEvrWQVA.roa
File: rYS79Z72k0A-MzsRJ6ByEvrWQVA.roa (raw, json)
Hash identifier: 6yAxePJGNnzO5mA7UWuqvHcNwRIyAYPaa9Av/eokCvo=
Subject key identifier: AD:84:BB:F5:9E:F6:93:40:3E:33:3B:11:27:A0:72:12:FA:D6:41:50
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0185E57C66F08911785918AFBD675FD7A36D
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/rYS79Z72k0A-MzsRJ6ByEvrWQVA.roa
Signing time: Tue 24 Jan 2023 20:33:33 +0000
ROA not before: Tue 24 Jan 2023 20:33:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 80.246.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:7c:66:f0:89:11:78:59:18:af:bd:67:5f:d7:a3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 24 20:33:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad84bbf59ef693403e333b1127a07212fad64150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:af:bf:41:cd:52:30:ab:2a:11:d3:70:cf:
1f:70:51:97:09:45:67:7e:6d:be:57:bd:fe:50:9c:
52:8e:10:9c:80:3b:53:bb:a2:53:b2:5d:14:cc:75:
a2:83:8c:27:6f:a9:41:9c:8f:9d:c8:63:64:2f:05:
5b:ef:c7:4e:13:d4:01:dc:18:81:28:82:26:51:31:
eb:fc:cb:0b:53:2a:ce:04:d8:ed:29:34:55:cb:ab:
31:d6:a9:0c:2d:15:1f:93:ce:39:81:50:b3:1a:a9:
97:3f:6a:08:b3:32:29:4f:30:0c:ef:8a:95:f2:5e:
0c:4b:46:b0:1c:20:82:d4:2d:66:31:87:fa:91:96:
a1:b3:b7:33:6b:5d:e4:20:12:da:39:a0:fc:2e:7b:
b2:66:21:e4:db:bf:f3:25:fd:4c:9f:12:67:72:16:
3f:2d:be:34:20:0a:53:bd:85:d2:a1:c8:c8:72:e7:
57:80:26:d0:6d:55:5c:09:4f:12:e9:4c:86:ca:67:
17:e1:57:7b:b2:b9:b8:42:f9:72:50:9d:4c:f7:85:
47:42:8e:8a:33:ba:17:60:58:21:08:9a:cf:9f:f5:
e5:92:7a:d5:bb:6c:7b:28:0b:cb:19:19:3b:56:eb:
17:91:91:d3:c6:d9:ae:b2:d6:c8:19:f8:bd:14:bf:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:84:BB:F5:9E:F6:93:40:3E:33:3B:11:27:A0:72:12:FA:D6:41:50
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/rYS79Z72k0A-MzsRJ6ByEvrWQVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.224.0/24
Signature Algorithm: sha256WithRSAEncryption
26:05:92:e8:47:82:01:86:d4:a5:95:55:22:5b:80:30:27:75:
e0:ee:b2:d9:28:1d:ce:c7:88:88:28:b2:0d:cb:dd:bc:78:82:
43:a8:fa:1d:b4:13:60:f4:c2:88:40:37:a7:c3:dd:fc:79:5f:
b9:87:ab:44:07:2c:7f:48:07:46:ca:4f:eb:87:7b:37:1e:9b:
14:86:6b:95:33:6a:8e:65:0d:c8:44:7a:e4:e1:9f:db:e3:fd:
00:67:16:d4:c4:a6:d6:d9:32:ca:96:e1:fe:c4:a8:e4:44:73:
45:bb:41:0f:98:92:83:14:f3:1a:09:eb:98:fb:c7:b9:5e:4c:
6c:9b:5e:01:68:f1:5b:dd:c6:fa:6f:75:8f:3f:ae:b1:98:f5:
25:88:07:d6:3d:01:48:35:9a:4b:c1:22:14:7c:38:fc:bf:c8:
16:01:f6:b1:4d:27:48:e6:65:f2:83:e6:af:f3:1e:7c:75:0a:
d0:73:33:b4:9d:05:ab:df:18:70:cd:dc:28:28:7b:8d:07:2e:
53:e2:de:95:48:d2:70:9a:97:f7:ca:9f:bc:f8:d9:01:d6:dc:
9a:e8:e5:6a:66:4b:a8:c3:6a:34:c6:b9:dd:85:58:02:27:fe:
b2:a5:f0:13:3e:d5:75:8e:86:ee:75:b3:10:52:83:0a:96:f1:
ae:68:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 08:27:28 2023 by rpki-client on console-fra.rpki-client.org