Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/N5BEhTUQj7Fm2rQBfCp_dSrRadA.roa
File: N5BEhTUQj7Fm2rQBfCp_dSrRadA.roa (raw, json)
Hash identifier: vUWqFo6CFT760PYhf1LMwFLw9c3yQBpEd4ULvx/sbUQ=
Subject key identifier: 37:90:44:85:35:10:8F:B1:66:DA:B4:01:7C:2A:7F:75:2A:D1:69:D0
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01894674DFD9614D44059B6D8D385F9D2587
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/N5BEhTUQj7Fm2rQBfCp_dSrRadA.roa
Signing time: Tue 11 Jul 2023 19:36:51 +0000
ROA not before: Tue 11 Jul 2023 19:36:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 141.98.139.0/24 maxlen: 24
141.98.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:74:df:d9:61:4d:44:05:9b:6d:8d:38:5f:9d:25:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jul 11 19:36:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3790448535108fb166dab4017c2a7f752ad169d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:6d:ef:03:a8:93:f0:97:22:55:89:4b:83:
02:ee:52:59:e0:aa:e8:20:a7:19:1c:f4:09:ac:75:
51:0b:b9:dd:fb:d7:9c:9a:2e:c2:59:9a:44:85:68:
16:1f:f4:98:4b:59:31:9f:71:e2:08:69:5b:f6:d1:
b2:95:cc:76:10:78:0b:f5:b0:f9:31:07:86:85:a7:
c8:10:4e:25:2f:cb:f8:4a:f7:bc:f2:00:dd:76:da:
df:75:e7:2f:e9:c1:37:47:dc:f0:60:50:67:19:6d:
a9:78:03:a6:12:dc:20:00:03:0b:8c:fe:33:03:f6:
0b:ff:76:73:f9:f9:57:36:46:1d:a7:8b:85:50:74:
be:6b:ac:94:e8:e6:7f:a3:cc:73:7a:9c:65:2f:58:
e4:e1:a8:42:4b:c0:12:4a:7d:e0:af:6b:f6:91:e4:
46:15:8f:8c:ef:8e:ab:54:ce:5f:fa:cb:2b:82:2a:
2c:46:9f:ae:e8:43:a7:45:fe:a4:c6:1d:af:a9:e8:
3c:bf:c7:1f:b4:d8:0d:4b:5b:bb:c2:e8:ec:20:5b:
ea:df:b8:05:c9:0e:c9:af:ec:42:a5:f7:b9:d2:e0:
b7:c0:49:55:10:e4:40:b8:d6:6e:2c:eb:98:8c:12:
bf:6a:ba:f7:95:c8:84:0e:f1:44:d0:95:20:ce:3e:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:44:85:35:10:8F:B1:66:DA:B4:01:7C:2A:7F:75:2A:D1:69:D0
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/N5BEhTUQj7Fm2rQBfCp_dSrRadA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.137.0/24
141.98.139.0/24
Signature Algorithm: sha256WithRSAEncryption
14:29:49:59:d0:69:47:91:de:d4:8e:f8:f9:17:fa:86:6a:d2:
7f:d3:2c:e3:46:bc:bc:37:7f:2e:1c:5f:bd:e1:18:36:35:86:
38:f8:85:3c:6a:8b:5b:02:c6:0d:e0:88:7c:5a:15:e0:98:bd:
1b:7d:2e:93:ac:83:7d:74:22:21:d9:6f:09:5e:cd:30:7e:94:
42:18:1b:94:7c:aa:6d:57:92:6b:13:9e:74:69:ea:95:d3:42:
93:e8:ed:35:69:26:16:52:07:cc:9e:44:ba:4d:b4:dd:72:e5:
6c:f7:71:10:72:d1:4f:c4:4a:b9:48:0f:88:eb:8f:66:14:7e:
96:37:c8:92:7a:33:a2:08:9a:e3:22:6e:c7:1e:89:6e:08:09:
24:e9:37:21:66:1e:ff:54:1f:38:aa:e3:3f:73:a3:5d:b5:49:
ca:b9:eb:8f:c5:28:74:9f:2a:6a:60:ac:a5:ad:f4:ee:53:b2:
e7:4b:bd:52:6e:42:49:8c:12:f6:d2:90:b6:a7:30:2e:30:40:
75:8b:b9:ab:c7:c6:21:15:f0:8c:08:b2:2a:27:44:4b:bb:50:
eb:84:63:12:36:7c:f5:11:6e:cd:48:db:ab:4e:12:61:c9:d1:
d7:d6:0f:56:67:3a:dc:57:06:21:b2:a0:73:ad:fc:6f:48:58:
7a:9d:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-ams.rpki-client.org