Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/UT4ExPfRHFgBePQEqdBP5Cii09Q.roa
File: UT4ExPfRHFgBePQEqdBP5Cii09Q.roa (raw, json)
Hash identifier: koUuVE8nR0pbHgO1VGl0qN/y1dGCqwfCNBycPKQKqJs=
Subject key identifier: 51:3E:04:C4:F7:D1:1C:58:01:78:F4:04:A9:D0:4F:E4:28:A2:D3:D4
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0188715D7C875F3059B84E7BC81F2C79B101
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/UT4ExPfRHFgBePQEqdBP5Cii09Q.roa
Signing time: Wed 31 May 2023 10:32:12 +0000
ROA not before: Wed 31 May 2023 10:32:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
213.137.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 11:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:5d:7c:87:5f:30:59:b8:4e:7b:c8:1f:2c:79:b1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: May 31 10:32:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=513e04c4f7d11c580178f404a9d04fe428a2d3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:ac:e8:56:94:9e:2d:72:ea:b3:8d:c9:f5:
c1:e1:46:68:c9:41:0e:d0:0d:7e:a8:59:87:89:83:
24:3c:7c:29:3a:c2:32:dd:df:e2:e2:7c:fc:2d:6e:
93:a2:97:56:f5:20:32:02:da:85:a0:ac:fb:e5:7c:
91:41:9e:28:68:de:af:f8:83:55:2d:db:89:02:e8:
71:69:a3:b6:e0:b4:1a:c3:d7:29:47:2a:55:3e:b8:
59:43:76:e2:dc:e9:13:a7:7f:d1:41:74:7c:98:6c:
ed:b3:07:de:14:9a:77:bc:63:ba:c9:6a:64:b4:09:
dd:21:fc:d7:3d:fe:ab:cf:e5:37:3e:85:5c:b9:27:
a6:da:86:03:91:4e:a7:44:b2:24:7b:3e:3d:9e:d0:
70:2b:9c:b2:9a:57:95:3e:72:61:62:d8:cc:4f:6f:
4a:8a:37:85:ef:ed:4d:15:2a:f3:39:52:a7:d1:ea:
de:74:76:9a:99:54:0e:9f:96:de:01:c6:52:ee:c5:
63:3d:40:2e:60:b1:5e:76:70:77:08:89:f9:0f:6e:
e7:ef:64:20:e9:15:9a:d7:ff:bd:72:f4:6b:df:11:
ba:91:09:bd:fa:0a:28:f5:62:cb:ac:e8:be:ff:19:
ea:41:e3:bb:71:1a:ca:3c:a7:70:fd:e0:27:d1:24:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3E:04:C4:F7:D1:1C:58:01:78:F4:04:A9:D0:4F:E4:28:A2:D3:D4
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/UT4ExPfRHFgBePQEqdBP5Cii09Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
141.226.247.0/24
213.137.82.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:d6:68:b7:61:03:7a:7f:b0:a3:ce:bd:3b:7c:eb:80:1d:9b:
62:72:6b:7e:8b:69:a8:71:9e:32:04:06:93:b0:5a:08:04:16:
df:a7:74:fe:9c:42:9f:76:3f:bd:71:f8:73:ad:0a:35:59:a8:
79:2e:9c:97:9b:79:61:2c:e8:cd:6a:1e:ae:35:78:8f:21:01:
b1:aa:2d:18:a6:d2:63:ca:c7:d1:f1:7d:c7:87:e5:71:7b:e9:
19:10:2b:b2:c3:ae:fb:bb:a3:dc:37:ff:18:94:0d:75:eb:6d:
cb:fd:00:c3:8b:aa:1a:18:fd:52:9e:c4:e1:44:46:65:7c:52:
a2:20:25:b2:e5:7a:3c:34:8b:0e:ec:45:4c:a3:0f:64:38:a8:
2a:1d:e9:65:0d:c0:bb:9f:70:ab:0f:64:5c:8d:ec:9d:63:ac:
4a:b5:33:18:44:5b:b8:83:bd:a3:e9:97:04:f3:d5:51:1b:e0:
8e:76:cb:84:95:2d:d6:11:72:82:74:42:f6:ec:1e:9a:b5:75:
6d:5e:2a:eb:d8:8c:b4:93:57:5a:84:5b:3a:51:e3:57:e6:aa:
67:5c:d5:f8:f0:0a:54:8b:25:88:8c:07:84:14:f1:99:49:31:
21:6d:6e:fa:23:e8:1f:4f:1b:97:5d:4e:5c:2f:da:25:11:88:
d9:ac:d1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:06 2024 by rpki-client on console-fra.rpki-client.org