Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1dpHFLvcX07eolZm5Ho7Ht3opBE.roa
File: 1dpHFLvcX07eolZm5Ho7Ht3opBE.roa (raw, json)
Hash identifier: QpUZNlOLRbRsV9yulYd0TSg8nX6/M8B2JG6Aayqr5b4=
Subject key identifier: D5:DA:47:14:BB:DC:5F:4E:DE:A2:56:66:E4:7A:3B:1E:DD:E8:A4:11
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0194D7BDC8DBA3B0E90AB1D8BBFEFEC09834
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1dpHFLvcX07eolZm5Ho7Ht3opBE.roa
Signing time: Wed 05 Feb 2025 20:12:06 +0000
ROA not before: Wed 05 Feb 2025 20:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Feb 2025 18:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:bd:c8:db:a3:b0:e9:0a:b1:d8:bb:fe:fe:c0:98:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Feb 5 20:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5da4714bbdc5f4edea25666e47a3b1edde8a411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:03:bf:36:11:3f:57:b4:90:25:76:76:e4:
d9:33:6e:7e:bd:49:1e:e1:a6:84:4e:6a:f4:39:20:
7d:a7:2d:6c:3b:09:3a:71:cd:36:2e:1f:91:e9:a4:
a2:9c:1c:0e:9b:f7:f2:d5:07:06:fb:d2:05:8f:03:
b9:98:82:20:9b:ad:8b:51:e1:1c:bd:8a:62:98:52:
59:be:92:d2:e1:c1:ad:da:49:b3:95:70:42:89:e7:
39:df:6b:a3:ef:1a:e3:f9:f8:aa:af:1c:47:be:25:
30:58:79:c0:d9:28:5f:c4:8a:f4:05:1f:72:49:d9:
ec:5e:30:12:ff:78:97:0f:fd:1c:5f:ec:d3:36:94:
96:8a:89:30:2f:26:e7:39:6b:73:12:1f:42:d3:fa:
32:35:1d:b2:fb:1d:0f:53:40:c9:f3:79:d5:1d:18:
30:3b:10:c2:8f:db:9a:c3:18:fb:1a:bd:85:a3:3d:
f6:13:e5:5c:46:76:15:7d:50:2f:1f:21:ba:6b:00:
68:a7:70:a7:0f:4d:97:ee:3a:6e:58:a7:6b:54:89:
0e:d3:1b:7a:db:c4:4b:9c:e9:b0:48:e1:49:e0:a9:
f4:49:72:76:23:3e:c2:99:ab:97:e5:96:88:57:29:
91:48:5e:8f:48:0c:4b:de:47:a9:9d:1c:9a:50:b8:
8e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DA:47:14:BB:DC:5F:4E:DE:A2:56:66:E4:7A:3B:1E:DD:E8:A4:11
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1dpHFLvcX07eolZm5Ho7Ht3opBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
86:30:d3:6a:ad:40:b8:f1:2b:04:24:95:a5:23:41:ad:85:8e:
40:2e:50:e1:3c:d2:de:e9:2c:a7:f3:b5:3c:43:8c:69:3a:12:
61:30:d7:a0:bd:b1:13:b4:04:6d:b3:56:8f:6c:24:5b:bb:0b:
94:be:26:82:bf:4d:5d:5a:de:d4:5e:29:07:81:55:5d:10:86:
22:e0:c4:21:19:9f:46:0b:dd:ad:90:b6:29:f0:db:30:3a:fa:
9b:b2:58:db:cb:41:26:f9:11:29:6c:97:16:04:56:af:bc:b2:
e0:f7:b6:23:bc:e3:43:dc:f1:3b:a3:dc:b2:e9:49:b6:91:e2:
29:44:01:f0:25:5d:5c:1c:ef:19:0f:5d:b8:2f:89:a5:41:15:
61:d1:ea:69:f8:72:39:33:7e:24:15:20:6a:08:7a:4e:03:78:
ef:21:20:44:bf:d6:e4:32:70:6c:81:d6:5c:a6:76:ae:32:37:
f3:c8:48:10:aa:81:1e:1a:6c:b4:2a:84:5f:1d:3c:ef:ac:1a:
f7:b3:d7:f9:f5:f8:03:db:39:27:82:6c:30:b7:d2:5b:ec:9c:
82:48:c4:6d:df:87:4a:a3:b1:db:0b:e0:60:db:a0:4c:bd:ce:
8b:54:ea:51:96:59:56:6a:db:f9:19:29:05:27:22:c4:c2:c4:
8d:ce:79:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:49:46 2025 by rpki-client