Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/XNnbyR-qlq6FheiRu1DUE8NZcrs.roa
File: XNnbyR-qlq6FheiRu1DUE8NZcrs.roa (raw, json)
Hash identifier: XZOO0KjE+JUJI0zYX4pDCbjHtvNHByD1IgM0hUpqxmc=
Subject key identifier: 5C:D9:DB:C9:1F:AA:96:AE:85:85:E8:91:BB:50:D4:13:C3:59:72:BB
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0191E0AEA9E010BA9741DFDA9CF0158B8A74
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/XNnbyR-qlq6FheiRu1DUE8NZcrs.roa
Signing time: Wed 11 Sep 2024 10:43:48 +0000
ROA not before: Wed 11 Sep 2024 10:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 141.226.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 07:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:ae:a9:e0:10:ba:97:41:df:da:9c:f0:15:8b:8a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Sep 11 10:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cd9dbc91faa96ae8585e891bb50d413c35972bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:ca:18:7c:70:93:95:8d:8a:a8:c6:a7:69:
88:18:3b:23:51:06:18:5f:75:e2:05:3e:fa:bb:4d:
76:55:23:93:17:1b:5b:f6:ee:46:95:52:75:14:e7:
76:2d:39:f0:47:c2:07:7b:ef:0d:85:00:fd:c8:4d:
fe:be:6d:d5:c8:02:d6:64:43:0a:cc:9f:8d:81:9e:
88:92:c5:60:c1:d1:3d:16:da:55:da:02:d6:f9:57:
02:25:f5:3d:8b:58:57:f1:23:a2:63:a4:b0:9b:d2:
ff:c9:a6:b4:2a:c7:45:34:9c:cf:7e:9c:fa:8d:b8:
a6:3c:a2:73:2c:f8:92:e7:fc:4f:dd:21:f1:47:7a:
06:c7:3d:d9:1e:f8:f8:c9:76:b8:83:51:6b:e6:07:
4c:a3:8b:d9:6b:7a:b5:96:ec:fa:cb:0f:84:85:38:
2f:64:15:7d:90:98:32:0d:a1:e5:2c:9a:16:06:6d:
4b:73:52:20:5c:1a:ee:4b:2c:bf:85:73:6f:20:08:
ab:4a:96:24:9f:55:58:fc:7d:02:65:8a:39:6b:88:
83:38:01:aa:2b:d5:cb:f8:a6:9c:e5:9f:fa:32:20:
ff:21:3e:52:74:7d:0b:e7:f1:68:fb:51:bc:82:d3:
e8:c0:a7:cb:81:b4:0e:5a:d7:52:7f:9a:e0:9a:ba:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:DB:C9:1F:AA:96:AE:85:85:E8:91:BB:50:D4:13:C3:59:72:BB
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/XNnbyR-qlq6FheiRu1DUE8NZcrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.243.0/24
Signature Algorithm: sha256WithRSAEncryption
be:ca:34:62:4e:88:4f:41:c8:ef:f2:0b:71:6a:3f:2f:40:ce:
e5:76:67:05:a1:36:57:1b:cf:57:60:59:fb:be:d9:22:43:df:
96:4d:cd:6c:1e:62:ba:7f:72:29:2f:58:93:76:50:c9:09:4b:
6b:0a:ef:09:bb:fd:7c:53:93:b5:2c:22:5d:8b:2f:b8:85:8b:
9d:2f:d8:47:86:23:b0:fa:6e:12:9d:d1:9e:d4:b0:07:fd:5d:
ee:18:38:58:0a:18:6a:52:cf:46:07:62:8d:9d:f2:40:59:25:
dc:77:e4:2f:f8:5c:a1:e9:03:d7:2f:3e:eb:09:49:7a:83:ff:
eb:fc:92:73:31:42:c2:90:90:52:a4:e7:b4:90:05:43:cd:f1:
53:86:8d:4a:f4:d2:9f:55:ca:6a:95:bf:9c:26:ac:21:0a:8d:
fa:7d:ef:45:9b:71:bd:26:85:ef:79:3c:02:99:50:0c:e3:54:
20:67:5a:c2:e8:81:b7:81:67:a2:35:67:e4:e5:3b:e9:7f:78:
da:8c:dd:51:9a:b8:ac:d1:e2:01:c9:49:c7:f4:7a:f6:36:3c:
14:10:82:87:28:b4:ce:dd:fc:de:39:ce:77:48:5a:c5:e4:e1:
9c:db:a5:eb:3d:9a:2f:fb:1e:3d:50:41:b0:2e:50:d2:1b:46:
79:11:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:36 2025 by rpki-client