Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/C1Eq8Q5d73hFNTFclluqqcC7QNE.roa
File: C1Eq8Q5d73hFNTFclluqqcC7QNE.roa (raw, json)
Hash identifier: XJAtpudgaKeM6uiRM7q/ur2oP9a0wIntgeXQy8I6NGE=
Subject key identifier: 0B:51:2A:F1:0E:5D:EF:78:45:35:31:5C:96:5B:AA:A9:C0:BB:40:D1
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018BB82E32D19D7496E0C59535DAF3312418
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/C1Eq8Q5d73hFNTFclluqqcC7QNE.roa
Signing time: Fri 10 Nov 2023 07:41:57 +0000
ROA not before: Fri 10 Nov 2023 07:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206446
IP address blocks: 141.226.245.0/24 maxlen: 24
141.226.243.0/24 maxlen: 24
141.226.241.0/24 maxlen: 24
213.137.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 08:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:2e:32:d1:9d:74:96:e0:c5:95:35:da:f3:31:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Nov 10 07:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b512af10e5def784535315c965baaa9c0bb40d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:c4:a9:ab:3a:6b:33:a5:f4:75:7a:95:06:
86:2c:3e:47:f1:8d:31:cf:9c:02:77:00:a0:32:d1:
e4:b7:b7:a5:cc:e8:83:89:00:ba:ef:78:4c:34:3d:
78:e7:d3:68:c8:d4:9f:35:21:c6:fc:f1:b8:12:9f:
69:a4:ef:f3:b3:d3:6a:01:4c:34:45:a0:1d:9a:b5:
9c:3d:d5:d2:ba:ce:27:eb:4d:84:d0:a8:25:df:54:
3d:fa:7d:bc:38:bc:9b:04:75:ef:0b:30:7f:98:4e:
49:52:99:eb:2f:78:30:41:1b:c7:09:5b:88:13:de:
d5:48:07:a3:a8:79:d0:86:65:6b:ad:e6:6c:03:64:
1d:6b:97:51:05:aa:8f:4b:9b:d3:a7:18:f0:32:41:
3f:32:e0:d7:6c:70:7d:47:c6:39:0b:7e:fe:2f:fa:
a6:15:72:03:b3:f2:a2:9b:5a:3f:9b:6c:72:2e:3d:
48:24:ea:4a:01:54:25:f8:02:e8:14:13:cf:c4:24:
fc:c8:b5:82:ce:3a:a1:ae:ae:56:f5:d1:c9:ac:97:
43:fb:56:2a:75:3e:11:cd:9c:69:93:4d:14:9f:85:
ac:e9:67:00:f4:96:81:ae:db:40:e0:d4:51:0b:eb:
6d:f4:52:76:20:a1:2e:89:7e:d6:e5:3a:09:76:fc:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:51:2A:F1:0E:5D:EF:78:45:35:31:5C:96:5B:AA:A9:C0:BB:40:D1
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/C1Eq8Q5d73hFNTFclluqqcC7QNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.241.0/24
141.226.243.0/24
141.226.245.0/24
213.137.84.0/22
Signature Algorithm: sha256WithRSAEncryption
92:11:68:fa:13:46:c2:5c:26:40:fb:3d:e7:ce:c7:bc:4c:d0:
e2:dd:ed:ff:2b:98:b1:75:9b:a7:bd:49:ce:78:1c:41:ca:ef:
f4:1e:c4:bb:58:8c:d9:36:b3:a7:44:af:d7:38:2a:cf:af:b0:
73:a4:c8:f7:1c:d4:65:a3:c9:9a:f4:38:d0:c7:c1:09:f8:de:
ff:18:2f:71:af:4d:9b:6c:05:0c:dd:14:05:2f:93:85:9f:6f:
2a:dc:07:23:ed:f0:94:f0:74:43:af:00:50:18:4b:b3:d2:23:
b6:3f:1a:9f:fc:5d:78:c6:b6:a7:34:e5:32:80:17:2c:ff:8a:
16:57:f9:ba:b6:f1:5b:6c:09:9a:90:cb:76:94:ff:15:9f:f1:
0a:e0:fc:48:a4:81:06:e0:10:6a:64:8c:5e:d7:0f:7a:6a:42:
d0:9a:9a:4c:30:24:e1:ae:6a:02:33:a1:00:36:e5:3a:20:18:
c0:ff:ce:67:20:0b:11:66:0b:67:86:3f:a8:d8:3c:3b:18:50:
43:1d:2c:8b:bc:33:e5:77:19:9c:3a:a0:62:7a:ea:21:cd:4d:
cd:bf:f3:b3:6e:5e:b5:e3:2e:5a:51:6a:77:10:fa:c5:51:61:
de:ba:4f:f2:6d:42:14:71:38:1b:33:2d:41:7a:99:15:99:fb:
c0:f9:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:38 2024 by rpki-client on console-ams.rpki-client.org