Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/LkwjFADb_DcE1ujkzGf_iaG_6O4.roa
File: LkwjFADb_DcE1ujkzGf_iaG_6O4.roa (raw, json)
Hash identifier: uFMjrKeuWKryvNvjWJ9dzAY2ixQmL2eykHdvMIPy+m8=
Subject key identifier: 2E:4C:23:14:00:DB:FC:37:04:D6:E8:E4:CC:67:FF:89:A1:BF:E8:EE
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018988129991EABDD2E0DE86920A05F8482B
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/LkwjFADb_DcE1ujkzGf_iaG_6O4.roa
Signing time: Mon 24 Jul 2023 13:24:27 +0000
ROA not before: Mon 24 Jul 2023 13:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206446
IP address blocks: 141.226.245.0/24 maxlen: 24
141.226.243.0/24 maxlen: 24
141.226.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:12:99:91:ea:bd:d2:e0:de:86:92:0a:05:f8:48:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jul 24 13:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e4c231400dbfc3704d6e8e4cc67ff89a1bfe8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f2:ac:41:cc:de:54:ce:a1:9f:93:4d:da:36:
9f:b4:0f:d7:3e:ed:a0:91:fc:63:19:02:41:ab:8f:
28:e1:3c:aa:dc:cf:f0:c8:2c:2d:c1:06:b5:39:1f:
68:06:0f:6a:d8:0b:00:c4:7e:e3:43:a0:91:d3:34:
3e:a4:01:57:62:f6:c9:55:25:45:73:fb:d9:a5:40:
b6:5d:3a:5c:50:f1:31:7e:48:95:14:61:1b:9b:6b:
5c:f1:0a:1e:08:f3:1d:ee:47:33:10:71:51:64:3f:
97:41:92:fd:74:fe:9d:a8:49:71:a3:9f:58:5a:ce:
d8:fd:7a:ec:a1:ee:cc:9e:3a:48:53:56:c1:97:78:
cb:58:ce:b7:6c:8d:e4:f0:03:aa:48:14:ff:6b:8e:
65:02:ae:de:a5:ce:2e:08:f9:c8:2a:ca:35:86:14:
a3:54:1e:b7:0d:d6:5b:fa:ae:a4:7f:8c:73:6e:14:
d2:7d:60:df:53:aa:9c:28:7d:c8:48:00:74:57:08:
68:a6:e4:b6:d1:f8:57:2a:ab:c2:28:6e:59:64:4c:
57:54:b2:d5:1e:6e:e4:dc:92:23:49:2c:a2:c7:7b:
ae:9f:49:29:28:96:4a:ba:12:e3:7a:80:36:4a:9b:
43:86:58:9a:12:71:03:1b:5a:25:93:30:7b:58:8b:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:23:14:00:DB:FC:37:04:D6:E8:E4:CC:67:FF:89:A1:BF:E8:EE
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/LkwjFADb_DcE1ujkzGf_iaG_6O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.241.0/24
141.226.243.0/24
141.226.245.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:80:aa:2b:93:78:6c:b4:7d:98:1e:6d:a0:2f:17:de:4c:57:
f4:ef:52:73:26:47:eb:cf:37:47:88:b4:a2:69:05:4a:42:f7:
ff:07:d5:52:49:f3:1a:e1:03:e3:dd:54:0e:12:d9:ce:72:67:
ec:88:b8:29:1f:e5:6b:0f:07:77:f1:6d:09:22:c9:6a:85:8c:
f2:44:50:41:29:f7:03:26:ac:65:cb:06:cd:ec:86:4c:f4:83:
fb:cb:68:00:7b:03:39:94:e0:20:de:62:0e:d5:c0:7d:5f:c2:
ae:bb:19:35:c0:6c:fd:16:a8:c1:2a:33:f6:f6:ba:b0:d3:5a:
c7:be:d2:ec:c6:a8:3e:d3:97:0a:09:ba:b3:2e:88:5b:4b:bc:
52:bc:51:ca:c0:2f:52:d1:d4:15:34:58:2a:84:80:e3:52:3d:
4c:04:e5:63:bf:22:3b:4c:9f:e6:75:86:a1:1c:28:86:50:63:
40:5c:05:b2:d6:45:29:38:7f:05:57:63:a5:49:c5:c4:33:f6:
f2:49:3f:4c:d8:b1:68:1b:00:0e:48:08:a3:af:9e:4e:d9:6f:
6e:ee:7d:4a:90:28:4c:4a:a3:81:13:b0:f9:fb:e2:69:11:8e:
8b:76:d3:68:c1:ee:9c:68:1a:c1:ee:f3:fd:90:06:e5:59:b9:
01:c4:78:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 08:31:59 2023 by rpki-client on console-fra.rpki-client.org