Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/eh9J-DmCB-wRlo1te-p9Xgm_Hxk.roa
File: eh9J-DmCB-wRlo1te-p9Xgm_Hxk.roa (raw, json)
Hash identifier: Yq+1YswI1Ta9NI7Splp4neBYLVUPekE0z+p5KuKp3xM=
Subject key identifier: 7A:1F:49:F8:39:82:07:EC:11:96:8D:6D:7B:EA:7D:5E:09:BF:1F:19
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018694A1550B40583B007A31483A54938BBA
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/eh9J-DmCB-wRlo1te-p9Xgm_Hxk.roa
Signing time: Mon 27 Feb 2023 20:47:26 +0000
ROA not before: Mon 27 Feb 2023 20:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206446
IP address blocks: 141.226.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 13:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:94:a1:55:0b:40:58:3b:00:7a:31:48:3a:54:93:8b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Feb 27 20:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a1f49f8398207ec11968d6d7bea7d5e09bf1f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:ba:fb:15:cb:b8:00:13:03:7e:4f:b1:bf:
8c:df:13:f7:8d:07:ef:76:68:c4:ec:9b:be:39:2c:
a6:cf:3c:70:10:a2:fb:d9:cf:9d:21:aa:ff:c7:34:
14:d4:a6:78:40:bd:34:01:dd:2d:76:66:74:39:74:
a7:6f:2a:92:e9:da:f5:e1:ba:28:3f:50:8b:82:6b:
a5:39:c7:c8:aa:db:0c:c0:30:94:44:b2:0e:e0:0d:
1a:1d:b3:6f:db:f8:f3:37:b6:5d:c8:87:d7:4b:6d:
70:0b:28:8e:5d:3c:84:90:b2:d1:57:a9:80:d6:4f:
4d:c3:ee:a8:ef:4d:32:70:d8:88:fc:2e:bf:29:c9:
6e:03:28:97:f7:44:6f:2a:ee:a9:8a:ca:48:cb:d1:
3b:49:69:5f:98:0e:1f:31:cb:f5:da:1d:4e:42:b7:
85:37:c3:71:08:54:29:24:00:44:5d:8d:f0:4e:1d:
bb:60:d1:02:77:dc:62:80:47:7b:5e:9f:6d:7f:7c:
70:03:ac:0d:4e:80:a8:6a:c0:92:36:be:6e:33:96:
7a:f9:58:23:61:bb:d3:d0:bc:4e:24:93:cc:58:39:
82:22:7e:55:f3:70:62:ee:5a:f6:4c:5d:7d:04:80:
46:c1:22:2f:02:7f:09:77:01:f6:85:61:c5:cd:ef:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1F:49:F8:39:82:07:EC:11:96:8D:6D:7B:EA:7D:5E:09:BF:1F:19
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/eh9J-DmCB-wRlo1te-p9Xgm_Hxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.245.0/24
Signature Algorithm: sha256WithRSAEncryption
18:50:55:20:e7:32:78:d8:e4:c3:b9:0e:26:95:68:0b:fa:85:
2b:ca:ae:db:84:72:fb:16:8f:70:7b:c9:2c:27:28:de:3c:68:
c1:bc:05:71:a6:da:bb:d1:3a:ab:49:f0:17:65:ca:19:89:e6:
08:07:82:6a:21:92:bd:6b:ca:d1:80:43:c2:c1:93:4f:ea:d8:
23:ac:bb:27:15:17:b2:be:ea:88:e9:a7:8f:b6:97:eb:10:f4:
5d:ea:59:fb:29:40:95:bf:49:89:d4:18:2c:ad:ed:2b:f7:e5:
46:b0:70:79:4e:3d:8f:5e:83:66:58:49:75:d8:ec:04:35:45:
9a:d0:63:e9:e4:4f:70:6b:e6:e2:c2:ed:08:74:33:48:d2:64:
66:34:90:96:cc:e4:4a:65:e5:6f:f8:d6:b0:b8:f1:9f:21:2b:
8f:87:90:5d:df:84:4d:7b:89:da:a2:bd:3c:8c:a4:30:1a:01:
b9:f8:2e:e6:b5:ba:08:05:b7:3f:e0:b3:a7:04:49:f3:9d:f0:
ba:5c:f2:dd:fc:47:f1:91:16:ca:ee:11:dd:d3:77:24:f5:c4:
f7:07:bf:a9:68:b3:05:13:ac:11:40:75:96:7b:77:ac:24:9d:
a6:f8:bd:e1:c1:1f:95:1b:77:b7:9f:0d:ff:df:8e:23:ce:4c:
93:26:ec:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaUoVULQFg7AHoxSDpUk4u6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjMwMjI3MjA0NzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTFmNDlmODM5ODIwN2VjMTE5NjhkNmQ3YmVhN2Q1ZTA5YmYxZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIa6+xXLuAATA35Psb+M3xP3jQfv
dmjE7Ju+OSymzzxwEKL72c+dIar/xzQU1KZ4QL00Ad0tdmZ0OXSnbyqS6dr14boo
P1CLgmulOcfIqtsMwDCURLIO4A0aHbNv2/jzN7ZdyIfXS21wCyiOXTyEkLLRV6mA
1k9Nw+6o700ycNiI/C6/KcluAyiX90RvKu6pispIy9E7SWlfmA4fMcv12h1OQreF
N8NxCFQpJABEXY3wTh27YNECd9xigEd7Xp9tf3xwA6wNToCoasCSNr5uM5Z6+Vgj
YbvT0LxOJJPMWDmCIn5V83Bi7lr2TF19BIBGwSIvAn8JdwH2hWHFze8FiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHofSfg5ggfsEZaNbXvqfV4Jvx8ZMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvZWg5Si1EbUNCLXdSbG8xdGUtcDlYZ21fSHhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjeL1MA0G
CSqGSIb3DQEBCwUAA4IBAQAYUFUg5zJ42OTDuQ4mlWgL+oUryq7bhHL7Fo9we8ks
JyjePGjBvAVxptq70TqrSfAXZcoZieYIB4JqIZK9a8rRgEPCwZNP6tgjrLsnFRey
vuqI6aePtpfrEPRd6ln7KUCVv0mJ1Bgsre0r9+VGsHB5Tj2PXoNmWEl12OwENUWa
0GPp5E9wa+biwu0IdDNI0mRmNJCWzORKZeVv+NawuPGfISuPh5Bd34RNe4naor08
jKQwGgG5+C7mtboIBbc/4LOnBEnznfC6XPLd/EfxkRbK7hHd03ck9cT3B7+paLMF
E6wRQHWWe3esJJ2m+L3hwR+VG3e3nw3/344jzkyTJuzP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:06 2024 by rpki-client on console-fra.rpki-client.org