Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/v1q8z7xdPErPOagK4B1ndzTro18.roa
File: v1q8z7xdPErPOagK4B1ndzTro18.roa (raw, json)
Hash identifier: GKa13aN4epXq4+CbGiUoNnBVtvt5AOBaBrt1bSYKHuw=
Subject key identifier: BF:5A:BC:CF:BC:5D:3C:4A:CF:39:A8:0A:E0:1D:67:77:34:EB:A3:5F
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018C78FA6A9D183E76FD5C1C257D08F43D13
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/v1q8z7xdPErPOagK4B1ndzTro18.roa
Signing time: Sun 17 Dec 2023 18:12:06 +0000
ROA not before: Sun 17 Dec 2023 18:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 80.246.225.0/24 maxlen: 24
80.246.231.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:fa:6a:9d:18:3e:76:fd:5c:1c:25:7d:08:f4:3d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Dec 17 18:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf5abccfbc5d3c4acf39a80ae01d677734eba35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:42:9b:1f:41:3f:95:68:28:0a:46:da:e5:
83:ca:1b:00:a0:1b:f7:d8:6e:f7:f9:7b:d5:43:61:
fa:43:90:cf:ee:10:7f:53:6a:cf:1d:1e:13:77:3f:
b5:74:5b:cc:ed:50:32:94:61:eb:3c:b6:fc:e1:26:
32:85:3e:31:50:6a:bc:5d:10:ed:3d:86:8b:2f:25:
99:92:83:f2:fc:01:91:93:82:3c:a5:ba:62:c4:94:
a3:41:7c:c5:60:3c:88:01:fc:42:b9:d1:ed:51:c0:
9b:e0:59:51:40:10:ec:c7:87:51:9f:12:be:17:d9:
e8:a3:17:ce:05:9d:a7:16:12:98:7e:5c:33:4e:dc:
bf:3e:49:7c:de:88:ab:d0:59:11:77:69:43:8a:68:
33:34:83:6a:78:d7:8c:dd:90:93:e4:e6:fd:7b:56:
0e:df:08:89:89:9c:38:b2:2b:2a:9d:6b:b7:34:ce:
ab:3b:c2:f9:e4:c8:3a:d0:fd:81:47:44:97:ad:2a:
f6:bc:1a:07:1d:f2:ee:91:bd:f6:40:41:51:4c:2f:
2c:36:94:69:f0:c2:5b:97:33:c5:69:13:09:8c:c8:
7c:27:94:45:00:a0:1f:e9:88:0d:0f:cf:da:28:ae:
55:ed:b8:bb:37:cd:16:2e:b9:fc:1a:87:c7:03:cf:
2a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5A:BC:CF:BC:5D:3C:4A:CF:39:A8:0A:E0:1D:67:77:34:EB:A3:5F
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/v1q8z7xdPErPOagK4B1ndzTro18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.225.0/24
80.246.228.0/23
80.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
34:41:86:f2:cd:84:05:11:0c:49:cb:3e:54:2e:5e:86:fa:96:
c2:1c:3a:5d:9f:1f:8e:22:01:df:b4:a1:59:46:8d:47:03:2f:
5b:2b:b8:1b:aa:c5:be:08:a9:28:73:0c:72:31:cd:9b:4a:8c:
7a:1f:d0:ab:e9:38:8e:f4:79:08:95:3d:f9:b6:2f:e4:82:64:
d6:b5:1a:d5:0e:0c:7d:6a:bd:1e:ab:7d:07:3f:eb:1c:62:9f:
0c:93:20:a6:5d:3b:c0:27:0a:9d:a5:aa:b9:46:09:19:f7:87:
8c:02:c0:c6:3b:09:96:01:c0:bb:54:bc:36:98:8d:b9:ed:73:
65:e4:4e:57:38:a1:0d:5c:70:c1:5a:98:b7:60:33:6d:81:be:
fa:01:86:48:39:9a:da:ce:3d:7d:df:c0:30:16:e9:c8:2e:25:
57:9c:22:13:9d:fe:e7:47:b1:8d:32:cd:85:d6:58:c6:de:4a:
0d:26:57:ba:ed:9e:c0:3e:f5:02:54:b3:c7:a0:06:3f:f1:e5:
3a:78:ff:99:18:1f:36:92:d3:51:45:bd:3a:8a:1c:e0:12:75:
aa:58:4f:1d:a5:98:88:fc:20:f6:ed:69:bc:4c:86:f2:92:0e:
2c:96:13:f3:92:1f:95:0b:4d:df:ba:e6:8c:7a:9b:6c:d4:b4:
86:9b:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:17 2024 by rpki-client on console-fra.rpki-client.org