Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/v0-WmWbMwI4AQxvelr5bDjNLGs4.roa
File: v0-WmWbMwI4AQxvelr5bDjNLGs4.roa (raw, json)
Hash identifier: 5Ie8rkHgn/ThXm6nxZ+UIJxrH2JMp3WqihZKA9si7wg=
Subject key identifier: BF:4F:96:99:66:CC:C0:8E:00:43:1B:DE:96:BE:5B:0E:33:4B:1A:CE
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018CC56E0EB7E1CB177444E70727232585E8
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/v0-WmWbMwI4AQxvelr5bDjNLGs4.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 80.246.225.0/24 maxlen: 24
80.246.231.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 10:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0e:b7:e1:cb:17:74:44:e7:07:27:23:25:85:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf4f969966ccc08e00431bde96be5b0e334b1ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:f0:60:02:ea:b7:77:e6:b3:3b:5a:29:cf:
3a:45:37:a8:5d:8c:1d:d2:ad:8b:16:01:36:35:a6:
6e:bd:5d:3d:dc:09:e4:64:5d:a6:f0:f0:83:18:c7:
8a:a5:48:55:74:a3:36:92:9a:8f:80:ea:f9:16:e7:
fc:94:b1:51:9c:cf:5c:04:bf:78:4a:03:4f:92:0e:
77:bf:97:db:99:e7:62:e1:94:16:d2:29:d9:7a:f1:
b6:8a:f3:d9:78:28:65:20:09:1f:4e:08:c2:fd:47:
b4:17:c5:f5:35:d0:32:51:fd:e0:f4:f5:71:c9:18:
58:d2:fd:f2:ec:30:52:9a:69:4e:17:5d:ec:f8:d4:
9b:50:ed:40:c7:57:3a:a2:e1:bb:ec:61:b4:1c:0e:
5d:97:23:0f:18:f8:ad:3b:ff:3d:90:9f:92:38:85:
58:06:a9:fe:46:a9:53:6c:ce:54:50:1c:bf:64:d4:
e1:c3:1b:90:ca:73:a5:3e:77:8a:ee:85:e6:11:a7:
2d:c8:8d:a1:fa:a5:9f:82:d4:15:4e:ff:5c:09:b0:
ca:21:60:11:2f:17:be:f4:83:0b:cc:e3:61:e7:f0:
c1:8b:6a:0c:da:24:41:8b:02:8f:6d:e6:7f:f7:b8:
5b:49:64:1b:f8:86:54:52:d4:b2:91:77:40:ee:45:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4F:96:99:66:CC:C0:8E:00:43:1B:DE:96:BE:5B:0E:33:4B:1A:CE
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/v0-WmWbMwI4AQxvelr5bDjNLGs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.225.0/24
80.246.228.0/23
80.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
79:98:08:b6:7a:b4:44:70:55:77:40:b6:4d:5b:8f:b0:46:02:
1c:02:ea:10:26:a8:47:f6:94:7d:73:ec:57:17:be:eb:18:05:
66:12:a2:7a:d7:21:57:ce:dc:38:8b:6b:7b:5d:29:a9:21:ce:
9c:1a:2e:a1:c4:ac:e0:7d:e2:dd:3c:8a:2f:70:d7:d8:67:ea:
80:bd:cb:fc:5f:25:31:19:54:15:86:51:5a:ee:0d:4d:60:9e:
db:e1:ea:fe:09:23:6c:46:b1:56:c6:97:9f:bb:4c:ff:1d:9f:
b8:e6:55:f2:a1:df:db:7a:f1:d3:b6:d1:71:9b:56:c5:84:96:
37:ff:db:46:81:c0:26:37:56:fc:9f:6d:ab:d5:28:a0:4c:08:
fe:cc:a9:7b:04:3e:8f:2d:aa:f3:c7:50:a7:1a:07:6e:d8:b4:
d1:0a:59:d1:bc:bd:a5:e9:e4:f2:e1:00:f7:96:37:80:2f:26:
4d:2b:a0:97:95:2c:6d:93:8a:c7:c0:fb:a4:fc:dc:17:11:78:
c0:0e:db:9a:58:1c:90:53:88:e9:ea:12:19:da:89:b5:08:f0:
93:dc:ed:19:4c:b1:c2:15:ca:c0:61:e1:bd:78:5e:8f:38:51:
29:81:bc:45:f2:86:87:c7:07:6f:62:3a:56:15:56:e0:e2:8d:
55:63:d6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 13:33:29 2024 by rpki-client on console-fra.rpki-client.org