Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/md8ymsv2ys-K1Gj2L0lbYlAqHFE.roa
File: md8ymsv2ys-K1Gj2L0lbYlAqHFE.roa (raw, json)
Hash identifier: iAF6xNE5tDfsFSR9lnglCZVNQt22Jb5FZRvFlyTHKwc=
Subject key identifier: 99:DF:32:9A:CB:F6:CA:CF:8A:D4:68:F6:2F:49:5B:62:50:2A:1C:51
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01860D1E44C62FD240E52B20B2BE384AB9C3
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/md8ymsv2ys-K1Gj2L0lbYlAqHFE.roa
Signing time: Wed 01 Feb 2023 13:15:32 +0000
ROA not before: Wed 01 Feb 2023 13:15:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57489
IP address blocks: 141.101.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:1e:44:c6:2f:d2:40:e5:2b:20:b2:be:38:4a:b9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Feb 1 13:15:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99df329acbf6cacf8ad468f62f495b62502a1c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:99:ed:39:ae:fb:bb:db:a1:eb:e7:7e:7f:
ed:9f:39:1a:d6:c7:df:00:3a:85:cc:75:75:5c:e0:
12:d4:45:e8:f5:97:ec:eb:6c:6c:5e:29:8c:05:7a:
d1:18:33:42:01:60:96:a4:0d:cf:3f:f6:58:f3:17:
c4:3b:7a:30:68:61:01:7e:9c:ba:1a:0b:8d:83:de:
e2:2b:40:07:db:20:aa:b9:b4:12:9d:51:05:50:ec:
4a:62:4f:e4:80:61:18:e7:6e:b3:80:f7:b4:4c:64:
f6:43:a9:21:72:67:b4:27:dc:e5:a4:6f:93:8a:a3:
3e:70:f9:97:8b:bb:cb:3b:b8:e6:ca:74:c1:ff:02:
94:c0:ba:b7:71:83:c6:4d:1e:a2:25:72:9e:df:ec:
16:2a:eb:99:d5:af:8b:02:f6:a2:32:77:bb:10:e7:
82:73:e9:d2:d4:f1:af:9a:d7:66:c0:9f:79:93:30:
e8:8a:6a:08:1e:41:d8:0d:c0:fd:b9:1e:ba:f6:e5:
be:29:40:b1:e7:ae:dc:c2:bd:15:09:4e:e6:6a:7c:
3f:a4:fe:7d:d5:f2:df:94:2c:27:85:b6:99:ab:ec:
4b:ff:e1:73:8b:b2:a7:19:d1:6d:db:d3:4c:7e:99:
5c:c3:bb:9c:66:6e:c1:5d:0c:dc:ab:95:36:c3:6c:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DF:32:9A:CB:F6:CA:CF:8A:D4:68:F6:2F:49:5B:62:50:2A:1C:51
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/md8ymsv2ys-K1Gj2L0lbYlAqHFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.236.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e8:9a:23:27:a6:7c:5b:8d:c1:ba:ea:ab:bf:6e:0d:71:ca:
fa:d9:24:8d:30:18:a9:02:71:dc:51:18:11:74:02:7b:78:eb:
5b:0c:72:24:6a:c3:0e:be:95:78:39:0a:a7:fc:15:e5:24:6e:
f4:00:d6:25:37:87:e0:59:6d:64:1d:3c:46:d2:c4:27:ad:87:
b1:a0:b3:38:eb:57:04:7f:04:31:77:7f:19:94:01:47:3f:e3:
23:80:19:0a:70:35:87:da:f9:d1:b5:f7:6f:f3:6e:ed:aa:c5:
04:a0:62:9b:4f:09:80:d7:3f:4c:c9:0e:88:d3:b1:12:dc:b4:
39:19:4f:49:c3:e5:55:ca:06:15:35:8e:bb:52:bd:3a:05:df:
8c:de:60:de:67:74:7e:03:54:2f:fd:11:02:90:e4:a9:2b:f6:
8a:44:5c:8b:96:d8:2d:95:eb:46:56:a8:dc:e6:16:fa:3d:f7:
39:05:4e:84:94:51:31:8f:e8:d1:a8:66:26:14:42:49:37:b0:
51:bb:8d:b1:1d:d2:24:50:d8:91:12:8a:50:91:50:ff:b2:a4:
7d:49:97:4e:c8:a8:96:a3:d2:bb:44:34:1e:35:42:2a:ee:a1:
78:38:a1:36:70:1b:c1:77:34:20:b3:4a:4a:22:8c:49:63:53:
bf:fc:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org