Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Pcv_6e25qFLpivVviZtaTAiY_9w.roa
File: Pcv_6e25qFLpivVviZtaTAiY_9w.roa (raw, json)
Hash identifier: fsKQSGBIGPlA9GHuNQQ6p8eXXIFkPNNwbc7zrsY6ESM=
Subject key identifier: 3D:CB:FF:E9:ED:B9:A8:52:E9:8A:F5:6F:89:9B:5A:4C:08:98:FF:DC
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01896D509DC9E7919A2E13A99531139E0392
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Pcv_6e25qFLpivVviZtaTAiY_9w.roa
Signing time: Wed 19 Jul 2023 08:42:27 +0000
ROA not before: Wed 19 Jul 2023 08:42:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 141.98.139.0/24 maxlen: 24
141.98.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:50:9d:c9:e7:91:9a:2e:13:a9:95:31:13:9e:03:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jul 19 08:42:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dcbffe9edb9a852e98af56f899b5a4c0898ffdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fa:fb:06:6c:a4:6e:12:fa:81:81:a0:39:cc:
97:76:d4:d5:d5:b3:9c:19:c9:5c:43:a9:bc:1d:37:
c6:2f:ef:74:58:5c:ba:3b:57:db:04:e8:ce:27:97:
31:2f:8a:12:60:e2:64:6a:92:dd:ee:61:32:6e:0b:
51:4c:e7:2a:4c:5c:ec:34:14:6c:c7:14:c2:4d:7a:
ff:a0:40:2a:8d:5b:a6:4c:6f:a6:d9:56:d5:63:45:
69:ce:c9:3e:fb:4d:44:50:11:fa:73:fc:51:4a:91:
3e:3a:a7:da:18:c1:1a:47:9d:9d:e6:aa:2a:f0:f2:
27:be:cd:85:81:db:3a:14:f2:a7:88:71:09:ee:8b:
f6:9c:72:a4:6e:72:1c:2d:43:e1:f8:3e:4b:8f:cb:
d7:83:82:82:5b:7e:30:89:16:da:ea:ef:a6:b8:14:
91:96:de:71:8b:a3:62:2a:21:66:99:93:c2:36:22:
d5:f8:54:cf:38:14:71:ec:5b:00:28:27:14:85:a8:
ba:56:e3:6c:43:8d:4c:fd:ab:b2:3d:f1:d5:f0:0c:
52:40:8e:d8:36:cc:fa:68:68:42:e6:67:61:2a:bf:
31:4a:5d:b6:ac:68:19:fe:13:0f:88:90:71:c2:bd:
e4:75:55:0d:1c:6e:bc:b7:69:f1:83:db:0f:e3:30:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CB:FF:E9:ED:B9:A8:52:E9:8A:F5:6F:89:9B:5A:4C:08:98:FF:DC
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Pcv_6e25qFLpivVviZtaTAiY_9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.137.0/24
141.98.139.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fb:8d:97:7b:37:92:bb:95:5c:4f:82:61:5d:a3:eb:7c:30:
56:e1:84:86:1e:ec:d4:4a:3f:79:cf:40:58:c6:2f:e1:fe:b2:
c5:b9:f0:be:d7:f6:0f:2a:6f:dc:17:ba:27:09:ab:a6:f0:a5:
1a:5f:2e:fd:b6:9c:5e:a4:ec:0f:64:f6:e8:be:b4:a1:99:e2:
4f:29:71:6d:8c:ba:42:43:58:26:cb:bd:c3:af:da:c2:c1:68:
3a:43:f2:a5:4e:3f:73:a5:58:df:ea:6b:32:0b:48:6a:0b:85:
e6:ad:8d:48:13:1d:ce:54:32:c1:7c:a5:6f:16:30:7d:e8:3e:
6e:73:f8:bf:89:44:88:7b:f0:e8:67:c3:39:5c:77:f6:e9:a1:
6a:ad:14:ff:6a:9c:78:ea:6a:89:b0:00:ab:6c:70:7f:b5:02:
ee:a2:dd:95:f6:23:72:db:9d:ff:5f:ff:c6:34:9c:47:3f:df:
43:f3:3d:f9:b1:60:0a:00:3b:f5:99:8c:20:ca:3f:46:f5:a9:
98:8c:b1:a4:15:90:a5:09:80:b6:70:88:67:15:53:95:1f:20:
ca:03:5c:ac:fe:bc:a1:d2:c2:9a:4b:b2:d1:b4:ec:8c:2c:23:
12:70:84:29:88:75:af:4e:98:49:a1:73:c5:64:68:fd:cf:58:
4d:dd:50:bf
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 28 06:40:48 2023 by rpki-client on console-fra.rpki-client.org