Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Cs-OntTQSTZZjHLAdIC8RaWRZis.roa
File: Cs-OntTQSTZZjHLAdIC8RaWRZis.roa (raw, json)
Hash identifier: F6a6Flnb3uIy42GwN9Z6vL/753htBQOYtX9uvRnczmg=
Subject key identifier: 0A:CF:8E:9E:D4:D0:49:36:59:8C:72:C0:74:80:BC:45:A5:91:66:2B
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018967ED4CC54836CCC7317B655ED07508BF
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Cs-OntTQSTZZjHLAdIC8RaWRZis.roa
Signing time: Tue 18 Jul 2023 07:35:52 +0000
ROA not before: Tue 18 Jul 2023 07:35:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.246.0/24 maxlen: 24
141.226.243.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
213.137.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:ed:4c:c5:48:36:cc:c7:31:7b:65:5e:d0:75:08:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jul 18 07:35:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0acf8e9ed4d04936598c72c07480bc45a591662b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:16:27:4a:77:ed:c4:d1:af:05:66:e6:74:
36:8b:66:0d:11:ce:54:de:77:f4:bb:52:f5:9a:69:
7c:84:c7:1c:3d:0d:fc:d2:c5:b4:7e:09:24:08:42:
fc:88:34:bf:e9:1b:b3:ee:64:67:53:8d:e6:1e:2a:
be:e2:71:1a:be:62:9f:02:ac:e7:b7:d0:49:f8:56:
5e:84:2a:76:3a:57:d5:f2:ff:87:4d:a8:18:46:d6:
56:2c:9e:84:9e:19:9d:6c:8c:e4:3e:e7:e4:66:2b:
3e:68:bf:03:a7:b8:cd:94:cc:52:a7:c7:e0:61:76:
6a:76:54:4f:32:cf:18:8d:c3:40:58:83:f6:5b:e3:
ca:20:bc:28:bf:65:b7:9a:c9:bb:6a:96:5b:38:37:
b1:c0:38:35:5d:ac:d0:44:d9:68:8f:01:6e:0b:c4:
fb:37:8e:21:48:bf:77:17:1f:46:3d:29:d3:08:66:
59:4b:95:c8:1a:67:06:28:b9:95:78:74:2b:ad:85:
25:0c:98:62:36:1a:f1:eb:66:26:a4:ad:10:6a:82:
02:bb:0c:92:1c:50:de:2a:0e:36:74:1c:c5:7a:a7:
d5:c2:01:90:81:7a:24:c7:eb:9e:c8:d6:2e:02:61:
c9:1f:60:54:9c:1b:c0:80:5b:ea:56:56:8e:16:83:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:8E:9E:D4:D0:49:36:59:8C:72:C0:74:80:BC:45:A5:91:66:2B
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Cs-OntTQSTZZjHLAdIC8RaWRZis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.243.0/24
141.226.246.0/23
213.137.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f0:30:bb:31:48:7d:20:b2:f7:90:37:4b:73:17:37:07:ce:
cf:6e:8b:10:99:f5:46:84:4f:8b:a2:38:fb:27:25:48:d5:a0:
ca:d1:ff:8f:36:a2:d1:23:28:91:a2:93:ac:d7:3a:fb:98:cb:
0a:cd:08:de:27:f5:e4:37:10:a1:c7:40:4a:78:65:f2:7d:fa:
cd:6b:8b:f1:4c:db:24:fc:a8:7c:da:6f:d1:41:28:a2:fc:f3:
a3:ed:82:d1:15:9c:99:27:10:ce:00:76:39:c7:0e:5f:e5:5f:
b3:7a:be:9f:09:99:23:40:87:48:36:4a:12:bc:71:b0:7a:fa:
f1:f5:63:eb:2e:67:c5:02:fb:7b:df:65:48:a9:0c:ff:3e:12:
06:2c:40:34:58:07:dc:96:17:0b:45:32:a3:ba:00:5e:4e:2d:
52:3a:5c:c6:11:cd:10:fb:dd:cf:a1:10:0b:b2:88:59:c5:8c:
d0:f6:c1:54:ef:c3:39:be:3f:01:e0:fe:06:89:7b:65:cd:4e:
03:d9:14:b6:2e:11:3e:3b:83:c0:94:1c:b4:9c:d0:8b:f5:0d:
c4:56:1e:23:71:78:62:57:61:7b:60:77:62:99:d8:6c:4d:eb:
61:3c:f6:c6:81:65:82:33:7a:39:f8:26:27:16:c0:22:e0:19:
5b:b4:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 22 21:54:00 2023 by rpki-client on console-ams.rpki-client.org