Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/4if_IKI_5yUNCbUsiNKhGPk7FI4.roa
File: 4if_IKI_5yUNCbUsiNKhGPk7FI4.roa (raw, json)
Hash identifier: cDX2YBbQeU6Viud+kQq2NuPuTK1Mns6LUPiPqtC9b94=
Subject key identifier: E2:27:FF:20:A2:3F:E7:25:0D:09:B5:2C:88:D2:A1:18:F9:3B:14:8E
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018851F2C5AEB0DDC6A2D82E85117DB875A8
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/4if_IKI_5yUNCbUsiNKhGPk7FI4.roa
Signing time: Thu 25 May 2023 08:07:24 +0000
ROA not before: Thu 25 May 2023 08:07:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 10:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:f2:c5:ae:b0:dd:c6:a2:d8:2e:85:11:7d:b8:75:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: May 25 08:07:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e227ff20a23fe7250d09b52c88d2a118f93b148e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:19:7b:e6:ae:00:ad:12:f7:4e:c0:2b:50:
6d:ae:0d:2d:ef:7d:4c:08:c9:fb:2d:8f:f9:80:0c:
ae:44:2f:a5:e3:94:7a:76:10:49:99:2a:1e:f3:f6:
5d:f6:ef:02:99:9e:cf:8f:8d:84:22:c7:26:18:2e:
f4:8d:02:46:94:21:01:de:fd:fa:8c:1c:88:ed:d8:
e2:8d:ba:5f:8e:3b:17:9d:b6:f3:07:47:77:ed:c9:
66:e4:89:42:65:f2:45:a8:5a:86:1f:36:22:9e:cc:
fb:c9:99:1c:7f:ed:2f:46:c5:85:5c:87:f0:22:e3:
cc:98:29:6b:be:a1:3f:53:d3:9e:ef:9f:7f:2c:be:
05:6d:a3:b4:43:fc:55:56:fd:92:ca:b9:7b:eb:2b:
7f:ae:87:67:8f:cd:77:86:61:59:c1:0a:b5:a5:10:
44:36:b6:67:d6:d0:bb:ec:31:85:24:b7:30:f1:29:
cb:ba:0b:73:13:6e:74:4c:e6:ea:f7:8b:64:c6:36:
44:98:b4:85:e8:0e:36:4b:95:d3:1d:5c:25:61:54:
19:23:93:22:9d:99:f9:41:39:64:23:71:33:5d:e9:
fb:15:07:b2:11:49:7c:09:39:92:c0:fd:6c:7d:5e:
fb:99:33:a4:c7:cd:65:77:42:69:45:4f:66:ff:a2:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:27:FF:20:A2:3F:E7:25:0D:09:B5:2C:88:D2:A1:18:F9:3B:14:8E
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/4if_IKI_5yUNCbUsiNKhGPk7FI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
141.226.247.0/24
Signature Algorithm: sha256WithRSAEncryption
59:94:0a:c8:56:5f:cf:ff:f3:94:fc:12:ef:a1:3a:7e:25:6d:
0b:c2:9b:22:35:52:bb:e7:62:3c:50:ab:68:56:e3:e2:84:3a:
d1:b4:ac:01:ba:ec:d5:51:87:01:ee:e5:17:6e:39:a2:3f:af:
73:19:1b:cc:b5:73:61:7b:e8:07:6e:f6:c7:83:5b:7b:be:39:
5f:e7:6c:d2:79:7c:2e:dd:64:3d:86:6e:28:a2:35:7d:f1:46:
7e:a1:22:b1:b1:25:8a:4e:69:17:ea:60:01:07:69:8c:56:94:
2c:12:09:43:95:15:09:23:b6:eb:8c:e5:ad:ac:8e:e2:53:58:
93:70:73:7a:6d:96:f9:ed:57:7f:6c:9c:ab:36:73:9b:b4:dd:
6e:a1:02:e1:36:cd:11:94:83:76:f2:3d:73:ad:8f:a4:d3:8d:
ac:05:86:2b:05:5c:e9:d4:1f:e1:da:15:21:46:2a:c4:30:97:
c4:c3:42:06:ab:de:62:4b:db:77:f0:3b:4f:6d:0c:2a:26:8d:
2b:42:3e:02:9a:ba:4f:10:82:dc:45:a9:89:10:21:64:27:ae:
49:9e:ef:96:a7:a0:41:16:a2:2f:70:d9:8e:12:bd:fe:db:83:
0b:bf:ac:7e:11:28:ac:8a:85:a8:81:17:2a:a2:42:6f:d0:05:
37:43:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:38 2024 by rpki-client on console-ams.rpki-client.org