Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/DNgmfU8zVRHOQIxJfRtdEy9L3_Q.roa
File: DNgmfU8zVRHOQIxJfRtdEy9L3_Q.roa (raw, json)
Hash identifier: XpZA/wpHnkkm+AoHEWA11B8lP2Pvqit9PR+PlQeGjeg=
Subject key identifier: 0C:D8:26:7D:4F:33:55:11:CE:40:8C:49:7D:1B:5D:13:2F:4B:DF:F4
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01857170A0ABE068FD2683243B7BF95297D0
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/DNgmfU8zVRHOQIxJfRtdEy9L3_Q.roa
Signing time: Mon 02 Jan 2023 07:44:44 +0000
ROA not before: Mon 02 Jan 2023 07:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 141.226.246.0/24 maxlen: 24
141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 04:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:70:a0:ab:e0:68:fd:26:83:24:3b:7b:f9:52:97:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 2 07:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cd8267d4f335511ce408c497d1b5d132f4bdff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:85:33:00:f5:d6:7c:78:a7:0d:eb:16:89:
c1:e9:d5:4f:62:64:c8:0d:a8:3f:ff:ca:99:f8:01:
f6:a4:f3:ab:de:21:07:d3:ae:e3:1a:4d:5c:be:bd:
fe:2c:6b:e8:b7:37:f5:e5:e7:ff:04:48:1a:69:93:
8c:71:33:b4:1b:dc:ae:b4:c9:05:ee:8d:f6:4c:7b:
32:d1:f6:e5:d2:0a:36:1e:4d:12:eb:92:36:b1:b7:
01:4d:24:1f:e9:74:cc:9a:12:53:1f:61:e7:bc:a5:
c2:60:f7:06:8d:21:60:37:26:94:18:98:48:f9:27:
6b:9b:77:04:00:28:d7:a2:1a:4b:9b:51:a0:ec:c4:
db:2e:b1:80:eb:fe:3a:5a:92:b9:1c:ff:65:9e:7d:
8a:f5:67:c1:dd:ed:64:60:ad:e8:59:1b:3b:0d:35:
e6:8b:63:32:c0:47:09:72:0f:a8:f9:d6:8d:20:aa:
78:3a:12:44:f1:52:46:4f:50:8a:27:b3:91:37:37:
a0:48:99:51:a3:b5:63:5e:07:b8:7c:81:8f:e9:08:
a3:73:2a:70:9a:58:46:6c:85:0b:85:71:1f:26:83:
33:c3:0b:23:8c:b9:cc:d3:5a:20:3c:46:ac:09:04:
58:e1:d8:00:0c:ca:a3:36:2f:7c:7a:99:cd:25:a9:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:26:7D:4F:33:55:11:CE:40:8C:49:7D:1B:5D:13:2F:4B:DF:F4
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/DNgmfU8zVRHOQIxJfRtdEy9L3_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
141.226.246.0/23
Signature Algorithm: sha256WithRSAEncryption
02:66:86:a6:76:19:65:62:fd:24:4a:b2:9f:28:45:5d:2c:38:
46:93:ee:2b:d2:05:46:d9:15:70:a5:17:2c:b3:e7:fb:bd:b7:
cc:ca:9c:3d:f4:0e:3b:08:09:5a:9a:02:b0:cc:77:94:3e:02:
28:31:c9:2d:23:ec:69:16:3b:4a:b3:e1:6f:4a:fe:b7:14:e1:
73:4c:dd:ea:eb:94:99:ba:51:44:7e:59:1e:93:a5:77:d6:3f:
92:e6:db:d0:05:b1:24:89:57:8b:dd:32:3f:62:03:65:10:c8:
3d:c3:97:fb:3b:61:91:b2:02:3d:e3:77:b2:9d:26:8e:5c:4b:
a0:a4:6e:29:f9:f9:5b:27:6a:12:e7:0f:a1:59:9e:4f:39:96:
87:dd:cf:da:17:67:83:b0:bc:11:d5:fe:69:57:f9:b8:bd:39:
2e:d5:cd:d4:0d:2a:42:8f:60:4c:7d:e4:45:ac:4e:c7:d4:c2:
39:71:10:9d:62:ce:3a:26:ea:35:d2:f1:2b:c6:c1:07:de:c4:
1e:67:39:f3:20:2a:7f:ea:47:1c:b2:7b:5a:5d:cd:6f:0c:0b:
7a:f0:67:4e:7e:f3:59:68:75:5a:99:ff:bf:70:78:05:b9:ad:
af:5c:c6:75:fd:89:60:59:3b:4e:37:01:75:2f:48:4e:86:30:
a2:1e:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:38 2024 by rpki-client on console-ams.rpki-client.org