Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/1N626TYV0vJdjMsaF8rwK6o4NuM.roa
File: 1N626TYV0vJdjMsaF8rwK6o4NuM.roa (raw, json)
Hash identifier: bOVZW1JhcWXAdZHhqm4UoBjNcrarSQuWoklh9Q2YjaM=
Subject key identifier: D4:DE:B6:E9:36:15:D2:F2:5D:8C:CB:1A:17:CA:F0:2B:AA:38:36:E3
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 018570706312DD71A4D371F9768EE6150CDB
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/1N626TYV0vJdjMsaF8rwK6o4NuM.roa
Signing time: Mon 02 Jan 2023 03:04:51 +0000
ROA not before: Mon 02 Jan 2023 03:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47583
IP address blocks: 141.136.33.0/24 maxlen: 24
141.136.36.0/24 maxlen: 24
141.136.35.0/24 maxlen: 24
141.136.34.0/24 maxlen: 24
141.136.39.0/24 maxlen: 24
141.136.44.0/24 maxlen: 24
141.136.44.0/23 maxlen: 23
141.136.41.0/24 maxlen: 24
141.136.47.0/24 maxlen: 24
141.136.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:63:12:dd:71:a4:d3:71:f9:76:8e:e6:15:0c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Jan 2 03:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4deb6e93615d2f25d8ccb1a17caf02baa3836e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:6c:65:4f:b1:4a:d8:44:e3:44:ca:b7:29:
8e:10:cf:14:8e:ec:ca:db:f3:e2:d6:f8:98:08:fc:
91:11:1e:b1:89:b7:e0:aa:c2:11:a7:4c:01:ce:a2:
ce:d3:26:e5:b0:67:8a:a6:92:4f:88:3e:83:f1:f6:
44:e0:b4:1f:09:a0:e0:7b:20:f4:03:5e:fb:fd:74:
44:80:42:0a:31:d3:28:66:48:4d:e9:d7:be:ce:dd:
ee:a8:5e:8b:a8:80:ee:09:1e:4a:13:e4:92:ac:3c:
25:d1:0b:68:e7:7b:0a:49:7e:43:c6:29:4f:c8:c4:
1d:9e:7f:eb:65:d8:17:32:5e:4b:d1:ff:d7:3b:c9:
ef:0b:95:04:6f:2c:0d:10:82:ce:ad:73:36:94:e7:
96:bf:cc:e0:a8:f9:8f:07:ee:f1:e0:f4:3f:48:43:
0a:01:4c:f7:31:5f:73:8c:79:ee:ac:b9:e2:09:49:
f9:2a:9b:65:c4:23:e3:f0:7f:7f:a6:8d:4e:a0:f3:
8f:56:46:03:12:ce:9e:25:10:48:e2:ed:d1:1d:b0:
df:6a:47:c7:39:cc:10:7d:60:79:1b:35:89:9f:cd:
76:6d:38:7c:19:8d:ff:67:dc:6d:8f:db:ba:80:4a:
5d:cd:f5:cd:ec:99:b8:de:bd:d6:33:4a:d5:73:e6:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DE:B6:E9:36:15:D2:F2:5D:8C:CB:1A:17:CA:F0:2B:AA:38:36:E3
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/1N626TYV0vJdjMsaF8rwK6o4NuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.33.0-141.136.36.255
141.136.39.0/24
141.136.41.0/24
141.136.44.0/23
141.136.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ca:8c:3e:67:bc:5d:08:46:34:22:a5:43:83:ec:23:f1:94:
17:0c:c5:0d:8a:b0:56:c0:3b:d7:e1:21:32:0e:ff:c5:0b:fc:
a3:29:bf:a0:50:4d:eb:23:a8:86:c3:04:46:22:aa:3e:c3:69:
56:15:67:54:ab:b9:e0:b8:a6:d3:7e:30:d6:0f:28:7e:99:7d:
ca:32:a7:79:4a:79:41:e7:40:8d:dc:46:94:34:01:48:0e:16:
25:24:c6:4a:d3:ee:cb:a7:ad:5a:8a:86:7e:cf:7d:5e:6d:c9:
5b:f1:40:d9:c3:97:10:98:84:85:51:40:b7:84:da:dd:f9:03:
93:c5:cc:cb:16:4c:4a:7b:1e:42:09:d1:25:b5:a6:f0:44:09:
e1:47:a4:41:6e:16:0b:26:8d:7c:ac:8c:9b:cd:0c:7f:59:81:
50:b8:37:bb:83:8c:ad:be:0f:0d:3b:b3:0b:4f:ae:5c:1c:c9:
c3:88:1d:66:35:6c:df:5a:b9:ad:c0:cd:b3:60:91:1e:17:7f:
bf:69:2d:fc:f0:01:58:2b:2f:0b:45:ce:8e:c3:92:07:1a:d4:
71:3e:10:8a:a1:55:a6:f9:fd:07:1e:91:9a:43:67:3c:de:2f:
0d:82:fe:b8:b3:19:c3:46:79:fb:1b:71:38:4d:12:2e:8c:72:
9f:49:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:16 2023 by rpki-client on console-fra.rpki-client.org