Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/FamodpywMZFkBRQGqNs_TUneB1g.roa
File: FamodpywMZFkBRQGqNs_TUneB1g.roa (raw, json)
Hash identifier: RKtkCz/t+5hJxrZ8Q5iA6DVNdWjbcyJwQ/Zgpl8nylI=
Subject key identifier: 15:A9:A8:76:9C:B0:31:91:64:05:14:06:A8:DB:3F:4D:49:DE:07:58
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01856C4A6F34496C6D5102851F7546BA34E4
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/FamodpywMZFkBRQGqNs_TUneB1g.roa
Signing time: Sun 01 Jan 2023 07:44:55 +0000
ROA not before: Sun 01 Jan 2023 07:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43513
IP address blocks: 80.246.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:6f:34:49:6c:6d:51:02:85:1f:75:46:ba:34:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 07:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15a9a8769cb0319164051406a8db3f4d49de0758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:2d:5b:28:57:64:4d:51:c1:36:a6:0d:0d:
69:79:53:76:11:a8:28:b8:3a:51:bf:3b:de:27:8e:
22:7c:46:0a:29:08:35:78:be:2c:cb:fd:94:d8:ff:
48:74:32:b7:6b:49:07:92:a8:9c:5c:5f:f8:c8:5b:
e3:f6:b2:8b:5f:c1:a0:58:be:de:60:a9:41:08:64:
f8:84:60:df:31:29:8f:70:c5:ae:5d:df:e6:5d:91:
b5:42:2d:39:11:0d:b4:e3:c7:4f:c7:93:09:c1:63:
6a:fe:b0:fb:f0:f0:dc:bb:a1:80:d0:f2:bb:62:9c:
f6:91:a2:83:fa:14:e9:15:d6:ff:ed:9b:36:57:69:
36:94:a9:cc:20:74:b5:40:4b:d7:58:8c:97:e5:1d:
df:e7:ad:c9:71:20:9f:d1:e3:60:5d:f5:39:04:72:
fa:36:ea:b7:04:4b:d8:9a:47:11:bf:67:bf:31:83:
15:8f:b3:e1:67:2b:3d:ec:c4:ef:63:f6:9f:8c:c3:
45:c7:4a:47:c4:e7:e6:fe:15:a1:42:88:72:40:60:
65:09:b7:19:17:01:03:6d:84:d0:44:e1:49:67:7a:
f7:38:fd:73:01:f2:0d:13:cc:dc:df:47:58:b8:f1:
a0:2e:39:8a:21:3f:22:ee:df:82:3c:3d:1f:f4:16:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:A8:76:9C:B0:31:91:64:05:14:06:A8:DB:3F:4D:49:DE:07:58
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/FamodpywMZFkBRQGqNs_TUneB1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a0:4c:52:06:b8:6e:f6:1f:66:a8:a4:cd:5c:dc:ee:5d:e0:
d5:18:62:4a:be:dd:c9:74:11:f6:3b:10:32:00:cc:4f:62:7d:
32:ac:d2:82:87:95:43:c1:ee:34:19:e7:2e:7c:6d:7d:98:9a:
fb:78:f2:91:1b:7b:bc:08:ba:df:84:53:e2:d5:bf:3d:eb:26:
bc:c4:c9:02:1b:19:bc:18:5a:e6:76:a2:b4:2a:ba:a0:97:64:
6a:30:f7:bc:ad:48:ec:1c:e6:44:82:ea:1a:c1:1e:3e:c5:2e:
77:f9:4a:6a:16:c2:61:0c:b4:0b:74:f7:82:c9:be:ad:e4:3c:
5c:b4:80:1a:0e:79:05:47:38:4a:5b:a9:e3:42:f9:22:41:1a:
ba:86:4d:c0:fa:c9:49:e8:81:3a:51:88:05:20:42:3f:19:ee:
0b:e4:ca:19:72:e2:02:e7:8f:3c:bb:25:bd:8b:83:1c:7c:f6:
6d:38:3a:85:80:ad:63:f4:44:f7:5d:7a:ec:5e:e0:75:a5:1e:
ad:02:87:4c:02:f0:da:77:2e:13:24:38:b5:80:bd:8d:09:e8:
fc:53:cc:8e:ab:72:6b:b3:24:08:23:40:e9:4b:5b:75:e9:65:
f0:c8:af:8e:40:1c:8d:1c:72:76:98:06:41:2c:98:b5:f0:48:
b9:c6:bd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:31:03 2024 by rpki-client on console-ams.rpki-client.org