Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_pVEdMvh6ueXejHlFfChkz12bqE.roa
File: _pVEdMvh6ueXejHlFfChkz12bqE.roa (raw, json)
Hash identifier: ME8sCLDMSsntNeYJ5BSuMKig+PnGjEXLgD23+SRCXco=
Subject key identifier: FE:95:44:74:CB:E1:EA:E7:97:7A:31:E5:15:F0:A1:93:3D:76:6E:A1
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01889CAF44EEB1613A86058EF79BA40DF93C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_pVEdMvh6ueXejHlFfChkz12bqE.roa
Signing time: Thu 08 Jun 2023 20:25:12 +0000
ROA not before: Thu 08 Jun 2023 20:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 270026
IP address blocks: 141.136.57.0/24 maxlen: 24
141.136.56.0/24 maxlen: 24
181.41.152.0/24 maxlen: 24
181.41.155.0/24 maxlen: 24
181.41.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:af:44:ee:b1:61:3a:86:05:8e:f7:9b:a4:0d:f9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 8 20:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe954474cbe1eae7977a31e515f0a1933d766ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:1b:6a:24:60:4b:d0:67:2e:de:59:15:a4:
21:e8:bb:e4:73:f3:ee:89:3c:e3:5f:e1:bc:4b:a0:
b6:64:3f:ce:2e:8c:5b:a3:9f:de:31:6d:6b:7d:62:
67:1b:f8:2e:65:1a:62:59:ea:52:ed:65:8c:12:eb:
b0:92:06:03:bf:8e:df:12:57:2d:30:17:51:27:7d:
32:59:44:bb:d8:23:29:b1:7f:39:63:1b:ee:52:1d:
79:62:8f:67:5e:df:4c:ae:ac:d0:ee:ad:c4:0c:2c:
5f:ab:6d:18:ca:9d:fd:80:6e:0c:75:73:9b:35:0e:
54:c1:4d:0b:1e:a4:30:75:9b:bd:54:bd:0c:3e:44:
6c:3f:d0:95:db:2c:b2:ac:4a:d6:79:71:dd:dd:61:
92:22:73:68:d6:75:00:6a:7c:ae:2e:19:53:16:f9:
1e:8f:e0:0a:70:30:4b:87:ae:15:5e:ed:95:75:d3:
28:1b:3f:50:5a:82:22:10:52:36:84:ae:3e:66:e9:
4b:ff:bd:14:b6:10:2f:0d:cd:7a:e6:21:01:ae:32:
32:a3:38:85:58:f9:23:6f:2f:66:96:34:77:de:7d:
87:b2:f6:df:5c:b0:18:15:c1:07:54:9b:6f:4c:f5:
96:c2:13:d7:7b:ea:4f:42:e7:a8:84:af:8d:bf:cb:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:95:44:74:CB:E1:EA:E7:97:7A:31:E5:15:F0:A1:93:3D:76:6E:A1
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_pVEdMvh6ueXejHlFfChkz12bqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.56.0/23
181.41.152.0/23
181.41.155.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e4:a0:20:9e:e6:68:12:13:31:d3:0f:a5:e7:70:66:e5:b3:
68:91:35:92:63:7a:15:09:eb:04:8c:b4:1a:c6:c9:e6:ff:8e:
87:1c:ff:1e:aa:5d:aa:f3:0f:52:4b:31:90:0d:2e:ef:d3:f9:
7a:a9:c6:fe:ba:31:24:92:fc:68:18:cc:88:c1:1e:73:21:30:
ad:1a:a3:1a:63:64:7b:1b:33:66:92:11:95:0e:df:b8:a8:36:
59:36:0c:f2:d1:50:4c:cd:9b:2e:7e:92:8f:26:1d:19:f0:68:
bb:f6:dd:b6:8e:95:56:fd:30:a5:aa:18:a8:03:1d:12:f9:5b:
d6:4c:5b:7a:86:bf:ab:68:a3:36:57:6f:8b:e9:f8:f2:7b:96:
01:84:3b:bd:75:ca:30:4d:35:4a:d6:7b:c6:14:54:e5:e5:88:
13:92:de:da:d3:ad:f0:d3:59:db:6a:b9:51:fa:b4:27:2f:4e:
dd:95:2c:f0:1c:55:11:40:bf:19:1c:b3:da:d8:b2:64:fd:f2:
09:a1:d2:9a:e9:5b:bf:7c:b8:55:68:4a:c5:7f:7c:14:4d:62:
ef:b3:41:e7:06:44:27:ae:69:ef:08:12:5b:78:52:0c:5d:23:
60:eb:9b:5f:e3:99:ad:b2:8f:2d:43:9f:df:bb:28:77:44:cd:
52:a9:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-fra.rpki-client.org