Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/jNfS4z0eYd4xT6cxPrMoOMv_NVo.roa
File: jNfS4z0eYd4xT6cxPrMoOMv_NVo.roa (raw, json)
Hash identifier: /lrlC+BZ/f70CdOTm1LaTAX/rvukjQYagO9/71ip8lI=
Subject key identifier: 8C:D7:D2:E3:3D:1E:61:DE:31:4F:A7:31:3E:B3:28:38:CB:FF:35:5A
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0192AE69E3D6060A8847DAAEE6481B144471
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/jNfS4z0eYd4xT6cxPrMoOMv_NVo.roa
Signing time: Mon 21 Oct 2024 09:30:28 +0000
ROA not before: Mon 21 Oct 2024 09:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215238
IP address blocks: 141.105.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 21:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:69:e3:d6:06:0a:88:47:da:ae:e6:48:1b:14:44:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Oct 21 09:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cd7d2e33d1e61de314fa7313eb32838cbff355a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:5d:3a:fa:91:29:2b:7d:22:96:3c:17:ea:
3c:f6:f5:7d:af:7f:88:3a:f9:cc:96:19:ba:8b:6e:
4f:15:b3:4a:f7:7b:4d:f3:63:d2:dc:c5:5f:3d:c7:
bc:37:86:7d:3c:4b:98:6e:ac:07:ef:1e:c8:6b:55:
99:5e:d5:b2:54:d0:4a:dd:51:e5:83:24:83:b9:72:
64:43:81:d2:19:fd:26:b3:4a:5e:ff:10:d5:6a:ca:
92:3d:6c:fd:be:c4:e0:eb:a5:aa:71:ab:cf:df:81:
ec:61:ae:ce:07:fa:a0:26:2b:8a:93:86:3d:0a:9b:
ae:80:ef:a8:57:4d:5e:77:fb:ed:58:6b:22:3a:9a:
c6:b1:40:ff:55:d7:a2:01:84:b0:13:4b:80:bf:9f:
f5:c1:49:e6:84:b7:ab:88:db:9f:7d:a7:77:e0:6e:
a3:9b:46:a7:8e:3e:47:ea:39:be:05:53:2f:87:b3:
7a:cc:c7:03:96:38:f6:02:a4:8e:b2:09:9a:e2:b5:
1a:cf:9d:5e:eb:b0:1b:bc:fa:f6:09:e0:ed:d4:21:
e7:6a:57:29:14:53:ff:49:e6:30:48:ca:1c:6b:9e:
da:fe:aa:05:01:33:27:5f:b3:9d:52:df:f2:29:eb:
51:72:b7:2a:22:88:91:35:7f:eb:8e:80:7e:c8:01:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D7:D2:E3:3D:1E:61:DE:31:4F:A7:31:3E:B3:28:38:CB:FF:35:5A
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/jNfS4z0eYd4xT6cxPrMoOMv_NVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.140.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5c:55:2c:29:85:19:99:de:fd:79:a2:79:b6:3a:12:d4:76:
25:c7:42:4f:6d:5c:d4:35:19:ca:27:ea:f4:59:f9:7e:ca:2d:
5b:9a:18:af:e5:85:ca:ec:7b:8b:c1:3c:1f:e9:38:3d:d1:65:
99:1a:5a:61:ed:cc:11:1a:e6:e1:38:e2:c9:70:4a:76:a6:ce:
de:ee:db:e1:b4:17:91:ee:18:41:2e:d2:78:dd:53:48:b3:64:
8b:d9:09:b6:77:6d:a2:0f:bc:c6:2e:92:ec:ac:b8:0c:7c:ba:
f7:d3:e9:6e:af:39:e1:8a:6d:3f:c6:f1:74:91:74:d6:c1:92:
02:1f:34:8f:a3:c5:21:32:5f:b6:22:1a:66:f0:25:df:45:77:
3b:c6:ac:ae:4e:48:33:8b:a6:63:e8:80:40:d3:37:ee:4a:f2:
1b:5a:03:66:ad:56:8c:83:f5:9e:6a:77:a6:d2:73:6c:bd:e2:
df:48:57:ac:55:04:a9:a4:1f:d9:9d:9d:e5:d6:50:62:fc:55:
e4:5f:09:8a:8c:97:e7:b9:99:d0:e3:c8:19:51:1b:33:83:92:
7a:85:f6:93:1c:ae:a4:4e:93:f6:d8:e2:1b:ff:bf:a4:cd:9c:
54:1c:c0:e6:a2:3d:f6:d7:1c:cf:83:4b:74:f0:1f:6b:92:a5:
59:67:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 22:10:01 2024 by rpki-client on console-fra.rpki-client.org