Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/mYY1vqy-beP5Ls1MzIZJhjdAXzQ.roa
File: mYY1vqy-beP5Ls1MzIZJhjdAXzQ.roa (raw, json)
Hash identifier: I9CDf61fm4U3WHHjGAMyfCpFNt8DevRrdYF51JEJ4Tk=
Subject key identifier: 99:86:35:BE:AC:BE:6D:E3:F9:2E:CD:4C:CC:86:49:86:37:40:5F:34
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 018CC3B733B6BF24E44E2239982DFACD9D36
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/mYY1vqy-beP5Ls1MzIZJhjdAXzQ.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31898
IP address blocks: 141.93.24.0/24 maxlen: 24
141.93.28.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 13:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:33:b6:bf:24:e4:4e:22:39:98:2d:fa:cd:9d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=998635beacbe6de3f92ecd4ccc86498637405f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:94:05:64:f7:ac:d6:7f:4c:f9:fe:89:30:
b2:8c:ba:7a:bc:cd:cb:87:e7:31:66:6a:00:ec:f9:
7a:36:de:0f:1a:f8:d2:00:15:6a:fa:a8:17:50:ba:
51:40:52:1a:98:2d:ce:8f:90:c4:54:43:e8:bb:5b:
2e:ef:c7:d9:82:71:c1:0c:26:58:b5:17:69:ee:de:
75:65:0d:41:33:00:79:39:2c:52:05:09:3e:f3:44:
83:71:1f:c3:9b:bb:18:85:75:ce:16:17:cc:85:6a:
6a:ec:b8:55:bb:bf:9a:9e:5b:13:8b:ac:71:c6:a7:
b0:44:9e:29:a5:d2:7e:b8:eb:26:93:2c:7f:28:d7:
e4:fc:da:bf:ea:5c:7c:11:15:fb:70:e1:df:c9:0e:
af:00:66:ca:92:9b:4d:aa:72:d5:97:48:37:89:b2:
6e:2f:92:01:bb:17:b3:00:ec:01:19:0f:2b:37:3f:
3a:7e:a8:e8:c1:31:84:e5:a0:a6:07:0c:5c:4c:33:
a0:a2:c2:53:c3:cf:7d:9c:ef:e2:b3:01:ff:e4:27:
de:a7:05:9b:da:eb:bb:31:eb:76:62:16:21:dd:fe:
bc:9c:da:fc:f9:f6:8c:3f:d4:77:00:ed:40:b9:cf:
2e:df:15:31:44:44:0e:8e:18:30:2f:1e:8d:14:e5:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:86:35:BE:AC:BE:6D:E3:F9:2E:CD:4C:CC:86:49:86:37:40:5F:34
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/mYY1vqy-beP5Ls1MzIZJhjdAXzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.24.0/24
141.93.28.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:7f:b1:cb:f1:06:22:28:98:bf:f9:d4:03:43:60:da:ed:12:
16:ab:90:f0:2f:75:7f:33:c7:f5:54:b1:6c:a5:30:b2:50:72:
20:15:6d:35:91:e0:2e:95:4c:16:76:cc:c5:9b:78:1a:01:26:
d6:ea:2a:8c:96:6c:3a:dd:f6:07:e5:b9:11:81:76:9a:de:9c:
4a:6e:62:aa:5a:ae:6f:ba:f5:cd:2b:41:d9:20:bb:19:ab:78:
96:89:b4:4c:d4:fd:59:55:71:b8:d8:84:8e:f1:76:73:13:7c:
62:dd:a2:3c:ca:ec:d2:ae:4d:7b:e1:59:68:cc:fb:ae:88:92:
6f:60:bd:4a:25:af:5c:f4:e9:b6:69:bf:5d:e7:3a:da:4d:80:
30:99:23:8a:2f:2a:b1:c6:64:c1:1d:03:86:47:34:a6:76:f7:
17:f7:49:95:c2:3d:65:af:e5:ba:d7:12:33:a7:21:bc:38:83:
cc:c6:d1:02:8c:66:93:06:a7:b0:06:81:b2:e2:09:13:b6:eb:
0a:99:7a:83:cb:2a:1c:3d:10:34:c5:a8:ac:bd:71:42:aa:e0:
72:e7:c9:47:35:1f:95:72:21:b7:18:88:29:0a:a2:b6:db:21:
2d:28:6f:87:79:83:72:48:7a:d2:69:80:c8:51:e0:01:a0:4a:
88:d2:01:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 18:15:42 2024 by rpki-client on console-ams.rpki-client.org