Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/T6E7QIkzKWH8YDjfORNzdtdQTy8.roa
File: T6E7QIkzKWH8YDjfORNzdtdQTy8.roa (raw, json)
Hash identifier: fnZ399Cmh4hdNzJN0qGScUAtgyBWw4s/svun4CCdW9g=
Subject key identifier: 4F:A1:3B:40:89:33:29:61:FC:60:38:DF:39:13:73:76:D7:50:4F:2F
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018B7039292FD1C9095190F5833C813075FC
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/T6E7QIkzKWH8YDjfORNzdtdQTy8.roa
Signing time: Fri 27 Oct 2023 08:21:16 +0000
ROA not before: Fri 27 Oct 2023 08:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.240.0/24 maxlen: 24
141.226.246.0/24 maxlen: 24
141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
213.137.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 07:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:39:29:2f:d1:c9:09:51:90:f5:83:3c:81:30:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Oct 27 08:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fa13b4089332961fc6038df39137376d7504f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:48:5c:24:79:3c:0b:8e:9b:55:61:b3:46:43:
a9:79:fe:ad:9b:b9:4d:7a:ae:ee:53:c9:d6:43:63:
17:4b:64:e3:58:f6:d0:e8:a5:13:cf:dc:68:18:4f:
22:a6:3c:e1:55:c9:87:df:72:de:b6:91:29:ea:d5:
4f:17:62:21:c5:c7:9e:c2:97:bb:f9:f3:4e:6e:e4:
12:bd:96:7a:f3:d0:b1:b9:2a:08:d7:0a:90:b6:99:
46:68:2f:ff:b4:a5:4a:e0:ac:31:78:ef:6c:ba:78:
4b:b2:32:db:c9:6b:69:8a:18:ba:9a:86:23:ff:58:
bc:31:d6:f0:ca:1f:95:3f:04:62:99:55:9e:f5:ba:
02:a5:40:47:3e:75:11:d3:e7:94:27:1a:2b:2e:06:
a5:fa:03:fe:c1:77:17:37:88:06:e0:1b:31:ca:6a:
3d:b2:41:32:a5:26:8a:a9:7b:59:ff:24:51:6c:d5:
d5:4c:30:8b:e7:f2:63:2e:1b:c4:44:8b:8a:00:88:
d4:67:5f:11:c0:63:42:96:43:57:63:a5:b4:bc:b6:
75:f3:a1:fe:4d:fb:c4:ac:2c:2e:78:7a:8e:23:e7:
c9:7d:c2:28:3a:59:b0:11:a2:6d:0b:c2:af:b7:0e:
68:c2:5b:a2:49:af:fc:61:b2:fd:e6:7d:01:3b:77:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A1:3B:40:89:33:29:61:FC:60:38:DF:39:13:73:76:D7:50:4F:2F
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/T6E7QIkzKWH8YDjfORNzdtdQTy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.240.0/24
141.226.244.0/24
141.226.246.0/23
213.137.84.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b1:8f:4c:d7:eb:32:80:ff:96:82:24:12:45:54:dd:2f:a2:
47:2a:cd:e0:dc:f7:58:61:07:68:b4:58:0c:5a:a5:35:53:d0:
1e:bc:aa:51:6e:8e:e4:4d:ed:2d:96:87:b5:20:b5:c4:f9:ec:
19:2b:97:2d:cf:ba:b3:ca:b1:3b:0d:ea:13:d7:89:46:f9:35:
8a:89:0f:7c:50:75:76:49:b3:9e:a9:aa:cc:a1:9e:8f:67:9d:
bd:c4:fc:78:92:22:25:5f:11:2a:3c:c8:36:b7:57:b5:23:d7:
51:22:6b:f9:9d:20:eb:98:2c:e2:a0:fc:5d:42:03:f4:9e:06:
70:57:ff:bb:5c:22:53:69:6d:31:52:9f:44:1c:25:59:48:ca:
e2:44:c2:b1:d5:8f:94:45:1f:c0:c3:e7:64:b5:f9:e9:8f:97:
b5:af:35:e3:c6:e2:36:9a:ab:e4:9b:a1:ee:ba:01:61:e8:9a:
16:81:af:72:56:65:9b:64:79:38:e9:24:70:c4:bd:5f:54:eb:
45:62:82:be:13:5d:97:e4:c7:d5:65:2e:60:a1:85:77:b8:85:
cb:e7:85:2f:8d:86:2d:dc:31:05:76:d9:44:82:a8:e5:44:48:
8e:71:89:dd:b0:c0:55:0b:ba:d4:f6:46:59:2c:2f:18:66:90:
c8:38:10:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:38 2024 by rpki-client on console-ams.rpki-client.org