Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/wFH_F_uwTDwyAQqf1ALBXLJmWjM.roa
File: wFH_F_uwTDwyAQqf1ALBXLJmWjM.roa (raw, json)
Hash identifier: KTS7tA/H7z6gnT3l9gBZFLMu1TP7XBxhfxRAP0QIP6c=
Subject key identifier: C0:51:FF:17:FB:B0:4C:3C:32:01:0A:9F:D4:02:C1:5C:B2:66:5A:33
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0188D7A2B3B1B773AF8B300AC68B99BE3CC9
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/wFH_F_uwTDwyAQqf1ALBXLJmWjM.roa
Signing time: Tue 20 Jun 2023 07:09:04 +0000
ROA not before: Tue 20 Jun 2023 07:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.246.233.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 20:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:a2:b3:b1:b7:73:af:8b:30:0a:c6:8b:99:be:3c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jun 20 07:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c051ff17fbb04c3c32010a9fd402c15cb2665a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:7c:af:e9:4a:15:c1:fd:6f:74:82:16:fb:
cf:a3:ba:f4:49:bb:c3:3d:a1:89:de:e4:b1:d3:42:
b1:87:d2:f0:34:7e:53:a2:5b:6d:72:87:1b:1e:3e:
2b:0f:56:a7:84:8e:14:cd:d8:d6:83:9b:9f:c2:fb:
3b:c9:e3:95:cf:26:86:cd:3b:29:bc:bd:84:7d:7a:
33:4a:36:c6:0d:60:8b:59:2b:29:63:b5:c1:4f:2a:
9f:24:8e:e2:77:4f:1c:89:f3:6d:e4:e8:38:89:04:
f0:73:3e:45:1e:14:5f:14:35:c6:f8:bf:0d:17:54:
df:fd:bb:30:e9:37:af:b7:c2:c4:32:ab:08:17:c0:
a1:c1:ca:f1:12:8b:b9:78:35:bf:e3:ef:ae:23:07:
fa:a7:b0:f1:cb:78:46:8e:d2:69:9d:d2:a8:4c:97:
d7:a5:3c:2c:a6:ae:0a:46:fa:5a:dd:19:b2:34:d9:
48:52:22:63:6f:f5:de:df:25:6f:e5:2d:69:38:cc:
93:7d:bd:c7:75:0f:94:e9:ac:8f:66:e0:38:74:ea:
9a:5c:b9:c5:74:15:5a:29:37:d2:86:75:42:52:e0:
d8:35:a9:54:fc:9f:ea:a0:e1:23:26:ed:e2:9d:36:
80:4d:70:c9:da:f7:33:b9:ee:a9:0c:59:3c:c5:80:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:51:FF:17:FB:B0:4C:3C:32:01:0A:9F:D4:02:C1:5C:B2:66:5A:33
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/wFH_F_uwTDwyAQqf1ALBXLJmWjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.233.0-80.246.234.255
Signature Algorithm: sha256WithRSAEncryption
31:cb:62:3e:6d:b1:81:21:89:9c:3f:7e:07:d8:e4:8c:67:08:
63:27:10:f3:a3:01:b8:a1:e9:ce:96:c5:06:eb:74:7b:9f:a1:
dc:dc:6b:19:d6:91:53:c0:cf:5d:3e:e5:8f:8a:ac:f9:9b:15:
9a:22:e8:40:e8:01:7e:f7:93:1a:d7:8c:2d:04:03:04:c2:bf:
0b:40:4d:32:d3:7f:e7:83:cd:a3:41:7f:c4:c3:8c:c6:04:20:
c9:8c:c8:c7:13:d0:99:94:24:c2:45:a9:af:40:5f:ac:a4:64:
58:0e:70:e2:12:72:7e:09:b8:eb:26:58:2d:5c:20:3b:bc:1d:
05:ba:f0:f6:c3:a7:1a:b0:8a:ac:16:69:7c:cc:3d:0e:4d:9b:
8e:7f:29:f6:c8:6c:88:ca:31:0f:be:19:11:4f:0e:0d:a2:ac:
b6:15:5c:d6:93:3e:da:9f:10:28:b5:ab:ab:46:b0:53:35:f3:
48:53:5e:bd:32:4b:1f:8c:f9:a4:2e:54:27:2f:82:a9:84:47:
33:fa:af:b0:11:95:57:fd:d7:cb:9a:93:e9:b1:0b:af:74:80:
d8:cf:80:1d:dc:4e:de:79:61:9b:94:b8:28:dd:90:70:6c:5e:
86:44:2b:c1:bd:3b:29:21:87:cc:1c:4a:4f:bf:5d:d3:76:83:
ae:e6:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org