Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/4M0_U9mchC1MzemxARQcZe3xcsI.roa
File: 4M0_U9mchC1MzemxARQcZe3xcsI.roa (raw, json)
Hash identifier: AcqkppoZdWPeUxVa1KcsAdFtE+xzajvMAtGDH7TKef0=
Subject key identifier: E0:CD:3F:53:D9:9C:84:2D:4C:CD:E9:B1:01:14:1C:65:ED:F1:72:C2
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0189BB002CEA100C2E49FE20B137EEDD442A
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/4M0_U9mchC1MzemxARQcZe3xcsI.roa
Signing time: Thu 03 Aug 2023 10:44:58 +0000
ROA not before: Thu 03 Aug 2023 10:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.246.0/24 maxlen: 24
141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
213.137.80.0/24 maxlen: 24
213.137.81.0/24 maxlen: 24
213.137.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 18 Aug 2023 08:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:00:2c:ea:10:0c:2e:49:fe:20:b1:37:ee:dd:44:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 3 10:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0cd3f53d99c842d4ccde9b101141c65edf172c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:97:ea:25:0d:89:43:a6:ab:33:ee:ad:ea:
c0:17:45:38:2d:52:df:fa:d0:78:fb:3e:d1:d4:9b:
93:aa:32:79:f8:3f:94:8a:97:5f:24:b1:48:a3:35:
00:c7:79:6a:a4:80:65:94:6f:22:85:12:13:2f:df:
e7:2c:97:cc:02:d5:8f:97:77:e9:c1:d8:22:e3:e0:
3a:d0:5b:dc:d5:d4:8a:c7:7a:ff:f0:87:28:91:9a:
6e:d6:f6:e8:99:63:aa:58:c8:f6:b9:3a:3a:c4:20:
d0:87:8b:fb:46:9e:45:fe:3c:f5:3b:02:d1:93:2d:
4c:50:29:b3:f1:2b:f4:e7:9b:ce:45:b1:90:da:01:
8e:10:82:7a:05:b7:a0:8d:ad:2f:d5:2a:51:21:44:
93:a2:e7:9f:27:07:3a:48:a6:ce:ce:34:c5:e7:73:
bc:8b:59:24:2f:32:04:c7:c4:aa:48:69:ec:11:09:
66:70:91:84:5c:44:02:1f:45:de:13:9c:8c:91:5e:
0e:98:6e:09:89:4d:6d:cf:0e:aa:1d:16:48:f9:e2:
bd:19:ae:a8:43:ba:72:6c:35:4e:a1:bf:69:ae:df:
9f:19:4b:af:b7:3a:d0:0c:f9:ee:14:89:80:ed:88:
38:91:10:59:93:92:93:a0:3c:fb:df:00:85:17:18:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CD:3F:53:D9:9C:84:2D:4C:CD:E9:B1:01:14:1C:65:ED:F1:72:C2
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/4M0_U9mchC1MzemxARQcZe3xcsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
141.226.246.0/23
213.137.80.0/23
213.137.84.0/22
Signature Algorithm: sha256WithRSAEncryption
69:d7:80:ca:9e:8b:16:8e:ba:e7:2a:20:4a:8c:8f:0a:f9:61:
a0:54:83:77:59:db:b1:ef:27:a2:3b:8c:11:68:c8:bc:01:8e:
ff:1d:8f:c2:b0:bd:cd:4d:73:4a:cb:58:c6:c0:db:41:ad:78:
c1:8f:39:28:b7:36:23:e7:60:b0:a3:3c:88:1b:d2:92:97:77:
45:8f:52:bd:bd:86:2f:95:ae:14:a6:6c:04:9b:32:6c:74:56:
1a:b4:9a:a8:b6:33:ad:e2:88:a2:50:9d:b8:72:ef:a9:2b:8b:
ab:2e:1f:a8:94:0d:6b:6c:f2:27:07:6c:91:74:e6:39:81:c1:
55:d0:b9:4f:9f:1a:cf:d5:18:3d:9a:dc:87:b8:90:5f:0d:80:
7e:10:79:bb:c0:7d:d2:93:0f:7f:99:8c:f6:b6:4e:12:97:fe:
98:58:dc:f3:02:0c:81:3d:7b:8f:94:2f:10:e2:12:9a:f2:ac:
76:02:52:c0:d3:b5:b5:ab:da:c9:ed:cd:5c:1f:fa:e7:36:9c:
e4:49:43:74:fd:47:af:6d:98:db:3f:f2:ab:f0:bb:ec:1f:93:
af:05:20:cc:50:d2:3e:e3:1a:63:35:e9:d6:a1:26:f0:23:16:
d5:66:75:ec:c7:01:c9:1a:f2:9c:5f:0a:96:62:f9:8a:da:b1:
e0:ec:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:06 2024 by rpki-client on console-fra.rpki-client.org