Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/s4B4M9804RUWHKJm3nm_iCTO3mY.roa
File: s4B4M9804RUWHKJm3nm_iCTO3mY.roa (raw, json)
Hash identifier: 4k3N5KRfUVKsQ3o53Zutd9a2gGa/pFSkJTn6Ma58/80=
Subject key identifier: B3:80:78:33:DF:34:E1:15:16:1C:A2:66:DE:79:BF:88:24:CE:DE:66
Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial: 0192E35833E32E351BA98BE23754D81575AD
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/s4B4M9804RUWHKJm3nm_iCTO3mY.roa
Signing time: Thu 31 Oct 2024 16:11:01 +0000
ROA not before: Thu 31 Oct 2024 16:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32611
IP address blocks: 141.113.144.0/21 maxlen: 21
141.113.152.0/21 maxlen: 21
141.113.160.0/21 maxlen: 21
141.113.168.0/21 maxlen: 21
141.113.171.0/24 maxlen: 24
141.113.176.0/21 maxlen: 21
141.113.184.0/21 maxlen: 21
2a03:9e41::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 07 Nov 2024 08:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:58:33:e3:2e:35:1b:a9:8b:e2:37:54:d8:15:75:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
Validity
Not Before: Oct 31 16:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3807833df34e115161ca266de79bf8824cede66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:28:8b:8d:f1:a1:9f:0c:3a:81:ba:fe:76:
4a:61:62:14:52:bd:a7:ce:ff:e4:d6:00:f7:55:a8:
a6:b8:be:40:98:45:1f:03:79:61:7b:8d:0e:a5:76:
5d:f7:99:b0:10:1a:f2:3c:dd:33:29:64:cd:fb:93:
ab:1b:ef:2f:aa:e1:a4:c0:67:e9:82:c3:5e:e6:91:
4e:4f:f9:e5:50:37:1d:62:5e:fc:4f:87:f1:7a:e0:
11:8c:ee:9e:85:4a:2a:e2:24:1d:d1:e7:5b:ef:89:
4d:c0:61:fb:60:18:5d:a2:64:49:c2:79:bc:f2:69:
04:e1:d0:43:37:6e:1b:c5:8d:0f:9b:d4:18:39:b2:
f4:0d:81:b6:cc:b5:19:13:47:65:a8:b6:67:ff:47:
4e:18:d0:af:28:da:d0:dc:c2:4d:4f:d1:03:34:4b:
84:d7:54:36:40:f0:0c:b4:ae:b4:df:16:73:d2:04:
3b:c7:6a:7e:49:82:02:8e:22:72:bd:18:08:74:6e:
bc:a3:04:1c:97:05:d6:13:6e:a3:56:e2:9f:ae:06:
83:d4:69:30:9a:bc:20:62:07:15:fc:36:a9:34:32:
8f:57:0c:df:ac:c9:74:2b:8e:7b:fd:14:24:27:3f:
c4:b2:89:c0:45:ad:24:52:82:09:f8:0b:55:21:92:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:78:33:DF:34:E1:15:16:1C:A2:66:DE:79:BF:88:24:CE:DE:66
X509v3 Authority Key Identifier:
keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/s4B4M9804RUWHKJm3nm_iCTO3mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.113.144.0-141.113.191.255
IPv6:
2a03:9e41::/32
Signature Algorithm: sha256WithRSAEncryption
3f:11:af:c7:53:9e:15:9b:56:d2:90:61:ca:b3:08:39:6e:dc:
a1:a4:e5:76:ae:34:d7:2e:13:44:c2:5a:04:31:2c:6b:5f:2f:
e8:39:a5:fb:2f:32:d7:2e:e4:4f:72:c0:74:99:d1:60:9d:2a:
b6:86:d3:b4:a3:32:e5:29:9d:3d:41:57:3e:12:1e:71:ff:df:
6b:77:4c:57:33:e3:38:f7:0e:f0:3e:55:65:eb:49:a0:75:32:
6e:c9:35:d8:a1:c2:45:e4:95:3f:79:67:91:fb:d6:ea:11:20:
02:fe:ce:c7:ba:64:59:c3:b2:cd:7f:11:a1:db:8c:43:38:0e:
46:e2:03:03:c7:85:0a:ff:ca:d6:a7:f7:58:d4:76:66:72:af:
03:a6:ca:86:cc:b1:ef:29:a6:2c:19:9b:84:6b:37:7b:06:78:
dd:93:ff:ed:ec:9f:b6:6b:98:5c:85:0b:69:88:98:3e:67:cd:
2b:8d:b6:5b:ed:23:ec:30:3e:89:0d:bf:d9:be:5a:ba:ce:8a:
e1:fb:45:8f:49:63:70:91:d3:61:28:e2:8f:f0:8f:e1:fd:c3:
79:47:86:e7:78:24:24:ad:87:4e:6c:ff:29:84:f1:c8:7e:0d:
79:ec:00:4b:6d:a3:7f:0e:44:a5:5d:bb:7d:0e:fb:65:ce:eb:
28:6f:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 10:45:02 2024 by rpki-client on console-ams.rpki-client.org