Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/wL6MpOKfCwzquGwcg5PBkmqJFPQ.roa
File: wL6MpOKfCwzquGwcg5PBkmqJFPQ.roa (raw, json)
Hash identifier: 6K0yrVrR2ENi8ikAXOV8QzfuRYMidynaRwUzIPX8Iwk=
Subject key identifier: C0:BE:8C:A4:E2:9F:0B:0C:EA:B8:6C:1C:83:93:C1:92:6A:89:14:F4
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01888320EAA18B308066AA3EF76868344955
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/wL6MpOKfCwzquGwcg5PBkmqJFPQ.roa
Signing time: Sat 03 Jun 2023 21:19:12 +0000
ROA not before: Sat 03 Jun 2023 21:19:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 141.226.240.0/24 maxlen: 24
213.137.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:83:20:ea:a1:8b:30:80:66:aa:3e:f7:68:68:34:49:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jun 3 21:19:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0be8ca4e29f0b0ceab86c1c8393c1926a8914f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4a:58:eb:4e:a1:a4:91:c9:88:c5:e0:92:05:
1d:aa:fa:fc:66:fa:95:72:5c:4c:0b:2b:1e:7b:4a:
2d:95:a9:5c:77:09:fb:ba:60:7e:64:e2:38:80:38:
a5:7b:ea:9f:d4:39:25:0e:d2:5f:78:ab:df:e3:34:
41:ea:98:81:d6:3a:59:0d:10:3e:7b:1a:a9:01:1b:
5b:fd:98:20:f9:a6:b0:49:7b:3d:65:eb:60:40:fe:
81:70:26:e9:c3:50:a9:cc:90:9a:ee:02:7c:60:f7:
1c:2f:a9:75:4c:ed:1c:42:2e:e2:8d:13:5f:8d:c5:
16:2e:6c:05:29:28:a8:b7:9f:b4:b9:eb:ca:f5:33:
aa:9d:48:ed:15:01:6d:da:0c:44:d4:bf:6d:ba:36:
0f:52:b0:a0:eb:67:af:b9:82:5f:9c:10:65:22:35:
d1:f6:6d:33:2e:95:84:ef:1a:83:5b:ca:58:b0:60:
c7:e8:10:73:77:52:7d:40:36:f6:60:bc:98:7c:19:
7c:d8:fb:7b:23:38:36:a0:c3:0e:72:7e:d1:9c:08:
72:86:76:6b:90:6b:c8:46:68:f9:72:f4:20:8a:1e:
20:14:b4:70:34:38:12:2c:b8:f2:a7:19:d1:af:11:
db:d2:d3:eb:a6:16:22:3e:12:35:e0:dc:3c:94:b4:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BE:8C:A4:E2:9F:0B:0C:EA:B8:6C:1C:83:93:C1:92:6A:89:14:F4
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/wL6MpOKfCwzquGwcg5PBkmqJFPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.240.0/24
213.137.82.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ec:ed:3d:c8:c1:3c:97:fb:c4:9b:c1:23:57:06:8f:3a:9c:
6c:ed:a9:8a:af:f5:cb:62:47:62:5e:e5:fd:8b:73:74:d3:cc:
ea:68:40:f6:85:01:7f:3f:b0:19:8d:9d:34:de:d4:56:05:a6:
12:48:cf:1d:80:05:32:ec:47:af:0e:e1:27:c4:6f:ee:d5:96:
61:2e:08:26:3a:ae:be:c2:bc:ae:d7:03:8f:56:89:ea:83:96:
54:fb:16:59:8f:5c:f7:46:a6:6b:9e:53:f3:d2:f7:b1:bf:f7:
d3:9d:d0:c0:1f:14:c3:64:1b:68:f2:05:ef:e4:a2:a4:b5:74:
4d:83:9c:9f:ae:ce:dd:81:e4:b4:aa:0b:35:c9:1d:d3:3d:51:
a0:69:28:4c:8d:a3:35:b7:7f:18:23:78:e0:09:f4:58:b2:02:
84:1d:48:c4:d8:fc:ff:87:46:cf:62:15:bc:19:6b:45:fa:32:
be:d6:db:e2:b5:5c:63:ee:93:b3:fe:f9:d5:58:82:e0:cf:6e:
bd:48:2a:51:8c:b6:9f:06:fc:8f:58:e3:5b:ca:d3:4c:f6:54:
f7:74:0a:98:16:de:49:92:bb:f5:a7:6f:28:1b:49:8b:0b:d7:
3d:33:f7:40:39:33:96:d7:79:c3:d8:7b:d8:1e:62:1a:3f:3c:
e4:b8:8e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 10:11:19 2023 by rpki-client on console-ams.rpki-client.org