Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/tC42icqLvanU9Wj4WPm4bGDX414.roa
File: tC42icqLvanU9Wj4WPm4bGDX414.roa (raw, json)
Hash identifier: JVRbUajcCQ5RjoSlQ53WxzeTTyXzkJICMv1ajN1Vx1k=
Subject key identifier: B4:2E:36:89:CA:8B:BD:A9:D4:F5:68:F8:58:F9:B8:6C:60:D7:E3:5E
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 01869383AD14D33CAFA1B899A9C6FC1267BF
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/tC42icqLvanU9Wj4WPm4bGDX414.roa
Signing time: Mon 27 Feb 2023 15:35:25 +0000
ROA not before: Mon 27 Feb 2023 15:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61357
IP address blocks: 141.93.11.0/24 maxlen: 24
141.93.10.0/24 maxlen: 24
141.93.10.0/23 maxlen: 24
141.93.0.0/16 maxlen: 24
2a0d:f0c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 27 Feb 2023 15:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:83:ad:14:d3:3c:af:a1:b8:99:a9:c6:fc:12:67:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Feb 27 15:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b42e3689ca8bbda9d4f568f858f9b86c60d7e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:6a:26:d1:d1:3d:2d:9b:3e:d2:9a:4a:15:
72:1a:23:2d:34:87:11:ed:3b:07:40:96:05:a0:f7:
fe:73:38:6e:d1:88:d8:f6:26:e5:9f:36:bd:f7:69:
9d:1b:40:e2:88:1c:68:32:dc:9f:9a:97:d8:75:74:
8c:11:00:88:8a:aa:8c:02:f5:56:71:03:9e:b5:4d:
d8:87:a3:c0:4a:0f:81:fd:7b:ff:c9:22:68:54:a9:
1c:b3:53:59:d2:a1:22:e9:19:bc:62:6a:6f:9c:53:
c7:94:08:e6:5d:ed:e9:43:eb:08:1f:14:ca:b5:cb:
cc:d6:94:3f:c8:2d:92:ed:97:2c:72:f2:43:e0:a3:
ba:bb:dd:e7:0c:7d:de:93:66:2d:0c:c1:0a:c2:65:
e2:ed:20:0e:d4:7d:a8:18:5c:f1:e0:19:2b:44:55:
1d:c4:8b:e3:e2:b7:d8:4f:b5:80:bf:0a:2a:21:cb:
97:7d:a1:25:54:a6:3a:a7:87:e0:3b:73:3d:ed:b1:
cd:27:d7:85:4e:f0:24:e3:8c:82:91:17:8a:06:21:
f6:36:d5:95:18:4d:a2:05:e0:4d:e5:39:bd:ec:52:
7d:85:d7:c0:83:ca:b9:7e:d8:9b:0e:ce:12:ee:99:
e3:0a:87:b7:0c:6b:e0:e5:12:5d:ca:47:a9:45:ac:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2E:36:89:CA:8B:BD:A9:D4:F5:68:F8:58:F9:B8:6C:60:D7:E3:5E
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/tC42icqLvanU9Wj4WPm4bGDX414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.0.0/16
IPv6:
2a0d:f0c0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:95:9f:24:c8:b1:54:d8:58:36:2d:ea:61:0a:e4:e9:35:d9:
39:75:2e:d1:2d:36:c6:85:1d:bf:7e:3c:f3:b5:9f:67:b1:4a:
ac:67:11:32:41:7d:36:d1:1f:10:8d:b7:e6:43:1d:ce:31:80:
a0:b3:dc:b5:fc:f1:2e:b9:26:a3:48:d2:c1:16:11:c0:d7:5a:
8c:18:7d:f3:a9:d5:2f:50:79:bb:0d:c1:56:56:97:f2:fe:1b:
0c:74:2e:cb:d3:56:9d:26:8a:4f:5b:25:1f:3b:7c:61:c6:c8:
fe:ea:a4:84:35:83:8f:12:66:90:9d:e6:01:32:49:c9:50:d4:
d8:06:35:28:7e:30:15:b0:3e:cb:c7:84:73:3e:cc:86:15:d1:
92:64:c8:bf:c5:8f:d0:ff:70:18:4f:f7:9a:3a:35:86:36:3b:
74:02:5d:f5:1b:64:dd:23:40:ac:8f:92:23:22:d9:70:a7:ae:
54:fd:9d:70:83:9a:b5:b7:d5:1d:35:dd:12:18:28:73:1f:26:
93:f8:fb:ae:61:2b:be:df:7b:05:53:82:75:95:0d:ab:d8:99:
8d:09:1e:cb:11:89:cf:87:20:1c:5a:ac:9d:d6:ad:c2:3c:58:
55:5a:86:2b:35:94:3e:d5:0c:92:90:60:93:52:30:44:bc:9b:
79:1e:3d:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org