Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/tSX5GoDlPyNe8C2LSY1OpcALecs.roa
File: tSX5GoDlPyNe8C2LSY1OpcALecs.roa (raw, json)
Hash identifier: nrN4wdPH6q8Ln7N+shsw0TDErNjLrPLVnR7LFRU5mq0=
Subject key identifier: B5:25:F9:1A:80:E5:3F:23:5E:F0:2D:8B:49:8D:4E:A5:C0:0B:79:CB
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018886FBD9EC8C006DBCB7EC57CF07BC6522
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/tSX5GoDlPyNe8C2LSY1OpcALecs.roa
Signing time: Sun 04 Jun 2023 15:17:12 +0000
ROA not before: Sun 04 Jun 2023 15:17:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57494
IP address blocks: 141.98.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jul 2023 09:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:86:fb:d9:ec:8c:00:6d:bc:b7:ec:57:cf:07:bc:65:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jun 4 15:17:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b525f91a80e53f235ef02d8b498d4ea5c00b79cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:a5:59:74:ba:16:be:0e:d9:3c:dd:71:71:
47:7a:ba:1b:28:ac:ee:ce:f7:a1:79:4a:4a:48:29:
f9:82:f0:23:f8:af:5b:a0:69:bd:ac:3d:0f:a7:62:
5e:7a:67:a7:ba:db:d6:5d:1c:96:ca:e9:d0:33:64:
52:64:58:11:f7:9c:38:67:4b:a3:2f:0a:86:f7:c4:
6d:78:b7:70:77:ef:43:a1:dd:d9:b7:05:ae:30:74:
b1:96:f8:e2:b7:b4:a7:9b:29:ff:b4:38:58:5e:b8:
08:e3:f6:55:e1:dd:91:49:13:ae:69:c0:ed:6c:5c:
e6:ea:62:d7:9e:de:ad:9b:18:28:3a:da:50:e5:2b:
15:7f:81:c1:03:f7:67:24:4e:dd:17:f5:b7:84:62:
7b:e8:df:9d:76:1e:70:aa:9d:83:8d:fd:36:c9:9b:
54:4e:87:3a:40:cd:03:c9:af:9d:3d:c9:a2:43:c4:
a1:d2:07:3a:bc:83:f2:69:e1:a1:41:f3:70:86:94:
11:ac:aa:30:91:6d:b3:62:ca:e3:da:29:c4:c0:ae:
55:15:be:e1:13:87:e7:24:b6:ad:eb:b6:ff:7a:ac:
46:df:c4:5e:b8:63:d8:81:c6:1a:21:26:ea:19:3d:
c1:05:47:6a:e3:c0:e5:ba:42:9c:e7:8e:5a:a8:e1:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:25:F9:1A:80:E5:3F:23:5E:F0:2D:8B:49:8D:4E:A5:C0:0B:79:CB
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/tSX5GoDlPyNe8C2LSY1OpcALecs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.233.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8b:d1:3b:d5:e7:ae:04:6e:93:c6:03:b1:2c:66:fa:84:c9:
3c:12:c4:11:dd:49:a9:cf:bf:8b:9b:a1:9e:ac:4b:54:30:a5:
b1:fd:bf:84:51:e7:c9:7b:2c:93:44:8e:8d:c4:5b:35:2e:3e:
e9:c1:15:93:a7:e7:61:c5:d2:91:c0:70:67:8d:c8:c2:56:c8:
19:d0:b8:4a:92:a8:36:14:7b:96:96:f4:ae:38:8d:7b:c1:9f:
c9:6d:97:e6:8f:15:cc:d1:2a:01:d2:ee:61:06:3c:c1:c1:bf:
cc:ec:a4:54:b6:8b:50:a0:e1:06:5f:3a:da:77:7c:ac:c4:11:
44:61:93:0a:ca:e8:69:79:65:fb:ec:93:30:fa:2d:f4:b3:5c:
c1:88:5b:98:15:dc:07:4a:d9:79:ea:51:75:15:b7:58:f3:a4:
d6:7a:c0:f0:5e:f9:e9:04:5e:99:1f:99:1b:e7:a6:53:bc:b3:
c6:2a:09:90:41:b7:1e:80:4d:7d:e2:b6:91:04:64:17:c0:a3:
b8:7f:3e:fe:e4:2d:1d:50:e1:7f:cd:5b:6a:c0:49:48:a8:07:
ac:26:ac:96:7a:39:7c:79:4a:22:db:37:92:1a:85:ac:3e:1c:
eb:4a:39:ac:8e:68:77:a7:f0:e8:28:1a:18:dc:d6:ae:dd:92:
d5:e1:98:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:55 2024 by rpki-client on console-fra.rpki-client.org