Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/adWowXoTtRwTjvMlVXYzvItHb_c.roa
File: adWowXoTtRwTjvMlVXYzvItHb_c.roa (raw, json)
Hash identifier: AuAkBoV9xQQ3YO5EvmXWjFaiXoay5QzHkgW1lgfhUlk=
Subject key identifier: 69:D5:A8:C1:7A:13:B5:1C:13:8E:F3:25:55:76:33:BC:8B:47:6F:F7
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019355CBF5680B400634D777D14F3929613D
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/adWowXoTtRwTjvMlVXYzvItHb_c.roa
Signing time: Fri 22 Nov 2024 21:34:10 +0000
ROA not before: Fri 22 Nov 2024 21:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.246.229.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Nov 2024 20:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:cb:f5:68:0b:40:06:34:d7:77:d1:4f:39:29:61:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Nov 22 21:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69d5a8c17a13b51c138ef325557633bc8b476ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:22:4e:50:59:41:22:8b:41:e0:8e:d3:02:
65:9a:ab:81:f6:f3:23:5f:06:0b:82:cd:0d:19:29:
50:3e:a0:d9:31:f8:ae:46:c8:c8:a1:1e:3f:fa:74:
23:a7:7f:31:e3:93:f3:e3:41:7e:28:9d:75:02:1e:
66:5a:ed:7c:ef:a6:c9:e7:dc:dd:0f:b2:3d:81:23:
0c:d4:aa:0b:46:aa:cf:aa:fe:7a:be:10:11:ab:4b:
d2:d2:11:61:b3:24:36:9f:8c:c8:99:0a:cb:93:6d:
db:ca:29:6e:63:eb:1a:a5:07:21:f8:5b:42:5c:0d:
32:8d:06:5b:c1:2a:a0:f2:ff:60:09:b1:46:81:51:
8d:1e:0a:9c:f2:8a:cc:b5:64:5c:62:7c:fe:13:9f:
b2:a3:c7:fa:ea:c1:4d:2c:3e:30:4e:75:57:2a:78:
c3:4e:b3:4d:dd:9c:f4:bd:cb:f1:d6:6a:05:ab:9e:
e2:ee:ec:91:93:ef:ba:a3:58:6f:10:3a:dc:2d:25:
c9:67:63:71:0b:77:cb:76:0b:8e:42:36:85:c5:99:
8e:3d:1c:4a:cd:ba:de:b1:e9:4c:1d:94:6b:b6:14:
99:36:81:15:10:0f:58:ef:6d:fc:cb:e3:92:29:c4:
1b:08:3e:d2:05:a4:05:c7:c8:d2:2b:3d:1d:1b:f3:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D5:A8:C1:7A:13:B5:1C:13:8E:F3:25:55:76:33:BC:8B:47:6F:F7
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/adWowXoTtRwTjvMlVXYzvItHb_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.229.0-80.246.230.255
Signature Algorithm: sha256WithRSAEncryption
94:04:66:e2:93:19:e3:2c:1b:dc:ca:b4:da:c3:b2:97:9a:47:
be:2e:15:9a:81:3a:a0:ed:38:25:ae:0e:68:10:80:27:5a:eb:
f9:83:4e:84:28:ab:57:35:88:1c:97:9c:da:49:c2:8d:6a:16:
30:db:4d:44:9f:ee:fc:97:26:46:e4:97:5d:c4:c7:60:07:41:
9d:6d:cd:d2:6d:70:19:72:9e:ba:c4:2c:4d:f1:9f:a7:fe:13:
f3:ec:d2:36:24:02:bc:65:ea:df:7b:cf:ae:df:7b:fc:71:01:
43:cb:84:23:1c:87:c1:1c:39:11:b8:ed:05:c6:81:ec:e6:fb:
92:e4:8b:3e:ff:8c:e2:33:53:4e:3c:92:09:d4:e8:a2:36:25:
fe:96:23:0b:c2:1e:54:73:74:eb:d4:f9:03:9e:12:67:aa:56:
41:d4:bd:90:89:b6:3f:d9:74:c6:7e:20:27:e7:b9:dd:a4:2d:
3d:4d:95:63:df:f2:b2:30:3b:45:05:dc:40:8c:1c:bb:aa:0d:
8f:38:2a:b8:48:c1:61:0f:f6:99:9e:8e:99:7e:3a:63:b5:b3:
d2:ad:84:fa:a2:69:5b:bf:2c:c5:24:a1:e8:d1:2e:93:ad:0d:
b9:e7:3c:cb:d6:08:2a:30:6e:94:92:0b:0b:4e:45:42:ab:12:
89:1e:18:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:14:31 2025 by rpki-client