Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0Ald_NbHe0hylN_15akMuJb3QOM.roa
File: 0Ald_NbHe0hylN_15akMuJb3QOM.roa (raw, json)
Hash identifier: VS3+IX6m9v9H4JKN4McyWNnve/Te8+Squ0c/h/xa6JY=
Subject key identifier: D0:09:5D:FC:D6:C7:7B:48:72:94:DF:F5:E5:A9:0C:B8:96:F7:40:E3
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018AF6404D62B6DECA78A75CF647F114F290
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0Ald_NbHe0hylN_15akMuJb3QOM.roa
Signing time: Tue 03 Oct 2023 15:55:23 +0000
ROA not before: Tue 03 Oct 2023 15:55:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.246.0/24 maxlen: 24
141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:40:4d:62:b6:de:ca:78:a7:5c:f6:47:f1:14:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Oct 3 15:55:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0095dfcd6c77b487294dff5e5a90cb896f740e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:9a:12:15:b5:ba:15:db:ec:62:d0:c9:17:
2f:e5:0c:e5:4b:44:b7:99:b2:a7:50:54:c9:0f:a8:
c2:a2:77:c8:44:d1:fe:31:fd:80:77:8f:52:aa:f3:
bd:67:ec:f8:5e:f1:0d:7e:05:a8:5b:6c:f5:9a:30:
36:01:f2:17:c0:81:ad:90:c0:96:8f:db:ef:6b:87:
72:23:e6:58:79:f7:7b:5d:5b:a5:56:10:cb:79:15:
ea:b6:da:8b:92:66:8f:7e:4f:04:70:15:a1:c7:e3:
10:cc:dc:3c:b0:53:34:e5:79:b6:91:b5:9a:54:07:
65:10:8b:6d:f6:f3:06:ba:3c:52:35:a7:d3:19:d5:
60:e8:17:54:e1:95:84:ae:f7:67:0f:4e:67:ef:ec:
4a:4e:e0:df:2c:8f:1f:b9:0a:37:4b:a7:40:ea:b7:
fa:5e:58:02:de:3c:01:8d:5c:37:7c:47:3f:a4:47:
71:d9:44:8d:f2:fd:5c:09:b0:b5:5c:70:be:c0:73:
2f:a1:45:7e:1b:25:1a:5a:70:53:aa:30:a5:b2:5c:
e3:a9:07:39:78:4a:c3:1d:45:bb:79:aa:74:bd:cd:
6d:56:df:86:62:a2:d6:c9:10:81:82:31:0f:5f:33:
ba:e3:00:94:6c:f4:30:cb:a1:ab:2a:07:39:70:5e:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:09:5D:FC:D6:C7:7B:48:72:94:DF:F5:E5:A9:0C:B8:96:F7:40:E3
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0Ald_NbHe0hylN_15akMuJb3QOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
141.226.246.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:37:83:44:08:f4:48:f8:2e:54:1f:3d:94:32:fd:b8:7b:4c:
0e:eb:db:31:ee:d5:08:b3:26:87:ec:99:62:d8:39:ff:2a:c7:
e9:06:be:c2:4a:f2:d9:10:2b:3b:ab:90:8b:61:53:cf:3f:ac:
4f:41:7b:21:ce:b4:81:52:97:0a:05:89:de:1b:f4:7c:f3:b9:
5e:77:ee:3b:64:44:1a:b6:3a:5f:01:9d:5a:4a:e9:7a:e1:22:
54:62:e1:4e:d1:d7:52:85:1c:38:81:68:97:04:a0:62:23:e8:
4f:98:47:9e:53:f5:0f:d4:77:60:9f:83:f7:61:9b:5d:ac:3a:
24:96:be:cb:95:95:ef:6a:b7:8d:b8:63:ce:72:7e:a6:1b:83:
f9:19:29:2d:1c:c4:01:5f:ea:ab:f8:ff:da:a5:d7:ec:2f:fb:
ac:d4:af:3d:bf:6b:eb:3a:10:01:45:28:89:99:9f:2d:ab:4c:
75:5a:a0:88:59:77:1a:2b:8d:7a:09:be:c8:56:a9:61:d1:c2:
f4:b7:c8:c2:1b:28:ce:60:d5:52:f8:d8:ef:63:fe:24:64:a2:
ec:fc:78:50:5a:64:2a:b7:6a:e9:85:50:09:5d:46:5f:60:83:
a4:0e:1e:7f:7f:9e:70:0a:db:90:6a:9d:90:eb:83:16:72:2c:
f5:c8:ee:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 09:46:33 2023 by rpki-client on console-ams.rpki-client.org