Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/XSL9QiIqJSDxSLRQZi0L6c0CjEE.roa
File: XSL9QiIqJSDxSLRQZi0L6c0CjEE.roa (raw, json)
Hash identifier: TPvxhkXjvaFVdoJVoCvigjhfK7zXoaMIPtbxsxnabV0=
Subject key identifier: 5D:22:FD:42:22:2A:25:20:F1:48:B4:50:66:2D:0B:E9:CD:02:8C:41
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 0191D10F3DE07046AC497A1DD45CD4BFCF8D
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/XSL9QiIqJSDxSLRQZi0L6c0CjEE.roa
Signing time: Sun 08 Sep 2024 09:55:22 +0000
ROA not before: Sun 08 Sep 2024 09:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25773
IP address blocks: 141.226.100.0/24 maxlen: 24
141.226.110.0/24 maxlen: 24
141.226.252.0/22 maxlen: 24
185.139.240.0/22 maxlen: 24
2a07:1980::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 14 Oct 2024 07:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d1:0f:3d:e0:70:46:ac:49:7a:1d:d4:5c:d4:bf:cf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Sep 8 09:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d22fd42222a2520f148b450662d0be9cd028c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:9e:55:32:c0:b5:06:e9:53:36:70:17:94:
31:c1:bf:05:27:b2:34:bb:cc:aa:49:be:e3:29:7f:
82:1c:98:28:46:33:35:e7:e4:31:7f:e3:cb:64:38:
8b:70:f2:0e:3e:77:78:60:3c:ec:0f:da:b5:19:56:
43:a4:5c:17:0e:c9:38:60:1b:39:1e:dd:83:af:8c:
b6:81:3e:09:29:d1:bd:7f:d1:a6:1e:67:68:73:b1:
94:f8:6e:f5:62:ea:9a:8d:b9:4f:5b:a5:20:7a:e9:
be:0b:ed:7b:75:9a:04:7b:15:cc:30:cf:c0:48:78:
8b:14:0b:d4:b1:1c:7e:cf:c3:37:65:5d:97:56:a8:
d3:dc:f4:ca:fa:17:66:aa:f0:a0:b6:37:76:3d:20:
d8:69:b1:33:13:a9:b7:48:33:f8:21:92:33:86:44:
82:43:7f:39:f8:76:07:c1:ed:41:4a:32:6c:f3:7f:
50:b4:89:1e:cc:b1:23:58:05:1d:4e:52:71:2b:a0:
52:0f:6b:8b:4c:16:2d:7c:64:b2:cf:df:f4:f6:a5:
81:33:75:5b:e9:83:cf:3c:a4:57:0c:38:27:40:70:
6e:b9:1c:a7:4c:bc:5b:6f:ce:d1:5c:45:d8:37:24:
34:c0:c8:af:14:da:2b:0d:48:96:fa:cf:da:82:26:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:22:FD:42:22:2A:25:20:F1:48:B4:50:66:2D:0B:E9:CD:02:8C:41
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/XSL9QiIqJSDxSLRQZi0L6c0CjEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.100.0/24
141.226.110.0/24
141.226.252.0/22
185.139.240.0/22
IPv6:
2a07:1980::/29
Signature Algorithm: sha256WithRSAEncryption
47:b7:5f:a7:7c:b8:9f:25:4f:80:9f:7f:3d:a8:8e:dc:49:e1:
cd:0d:46:dd:60:c5:b9:5c:b0:85:8d:45:91:03:0a:39:21:db:
67:0e:cd:30:ba:4c:ef:2b:2f:85:49:e5:4c:8d:25:f7:5c:6b:
9b:0f:f2:5b:f3:0c:d0:f4:e9:ab:54:74:75:0f:f5:9a:36:01:
54:6b:e5:26:58:3f:06:9e:ad:16:be:02:81:6e:d1:2d:af:22:
7f:8a:22:d1:d7:2d:aa:c9:03:6b:b2:f3:f2:4a:25:0f:9e:62:
0b:ca:83:b8:d9:d7:e3:d9:8d:fe:61:c2:d5:7b:6e:2b:15:9f:
7b:c9:f7:c0:39:0d:aa:cf:06:b4:5b:0b:ac:83:3a:d1:c3:cf:
b6:8c:99:6b:43:1d:6d:f9:54:56:4f:7e:d7:b9:e2:ae:01:31:
06:ad:8c:7d:1e:ec:10:80:79:ea:2c:8c:04:c5:f6:84:ba:b8:
fb:e4:cb:cd:1a:c7:a0:01:9c:77:00:36:71:4c:72:16:42:3f:
30:a0:06:b3:07:5f:66:c7:ab:d1:15:75:70:0a:27:c7:29:bc:
b4:38:35:bf:3c:04:cd:f2:bc:1e:aa:cf:f9:58:19:6d:f0:d7:
2c:4c:8b:e2:1c:3f:48:79:d8:2b:11:8a:72:db:d7:96:a5:6a:
12:a9:e4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 09:16:07 2024 by rpki-client on console-ams.rpki-client.org