Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/iRiPBfBrNPUTdwgbkuoWsKVf8dQ.roa
File: iRiPBfBrNPUTdwgbkuoWsKVf8dQ.roa (raw, json)
Hash identifier: ifpFgf+joaHUmnU0RtnGmlv7nOwd2ZeVAHa684Hr1b8=
Subject key identifier: 89:18:8F:05:F0:6B:34:F5:13:77:08:1B:92:EA:16:B0:A5:5F:F1:D4
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 01856CA5CE3882ECC0D2CFAF75D1E51ABD39
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/iRiPBfBrNPUTdwgbkuoWsKVf8dQ.roa
Signing time: Sun 01 Jan 2023 09:24:43 +0000
ROA not before: Sun 01 Jan 2023 09:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14061
IP address blocks: 141.0.170.0/24 maxlen: 24
141.0.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:a5:ce:38:82:ec:c0:d2:cf:af:75:d1:e5:1a:bd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Jan 1 09:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89188f05f06b34f51377081b92ea16b0a55ff1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:c6:07:68:da:f1:8e:df:8e:65:b2:a1:6f:
ca:07:0e:de:89:9e:db:70:2f:11:8b:8c:40:3c:db:
3d:d9:1b:a9:2a:73:28:35:25:8b:c9:06:22:9f:7f:
d2:45:df:0e:0c:2c:00:df:19:ba:d8:a9:c8:27:2a:
42:9e:e6:8b:c0:bc:f7:45:c2:f7:30:09:99:46:89:
91:23:ea:3f:c2:19:a5:36:89:f7:84:be:4e:54:a0:
e7:2d:30:74:d9:9d:12:fb:4b:ac:d7:a2:09:6d:41:
12:36:37:5c:10:8e:2b:97:75:2c:d5:85:14:bd:24:
a5:79:13:24:5a:31:ec:78:67:ca:7e:2c:28:05:fe:
d6:56:57:4e:18:fa:c9:ec:7b:b4:a3:2c:57:1a:97:
c6:15:1e:38:a8:e5:31:f3:8e:fb:cd:98:92:fa:df:
5b:15:56:b6:1e:a8:74:e4:23:df:1e:c2:b1:c6:48:
50:52:40:39:7b:88:e4:c1:59:4b:5e:6d:21:04:8d:
87:04:39:4f:59:20:65:37:d5:b0:48:6a:36:9f:88:
7d:c2:3a:0c:3a:b2:93:25:53:c9:b8:51:23:01:31:
38:76:0b:96:ff:fc:fb:03:bd:44:81:4b:62:43:e6:
ef:1e:38:6e:f6:8e:ac:ee:d3:21:4f:dc:5a:c4:42:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:18:8F:05:F0:6B:34:F5:13:77:08:1B:92:EA:16:B0:A5:5F:F1:D4
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/iRiPBfBrNPUTdwgbkuoWsKVf8dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.169.0-141.0.170.255
Signature Algorithm: sha256WithRSAEncryption
32:af:e7:94:9f:a1:af:86:0e:a4:53:c9:f7:88:b5:db:c2:5e:
71:6d:76:e3:ad:40:40:85:04:23:b6:9f:14:9c:a8:97:32:2c:
5a:bd:b1:27:5d:9b:2d:21:85:15:e5:c2:63:8a:70:72:f2:19:
be:14:cd:4f:c4:23:a3:23:a1:19:ca:77:ae:c9:4c:3b:51:3b:
eb:e8:58:85:2d:de:4c:94:1f:86:aa:91:79:f3:eb:2f:87:ea:
31:7f:bd:68:24:31:a0:99:cb:57:a8:f3:cc:d8:73:3e:10:3b:
eb:49:2f:8d:51:18:3f:39:1a:84:48:d2:90:ac:a7:a1:dc:92:
b5:a0:e8:75:09:e3:19:4d:8c:cc:11:9c:6e:31:21:52:3a:f2:
fa:ee:d0:b7:ac:b8:0e:d2:66:e8:01:9b:42:0b:bf:03:26:fb:
e8:f1:6c:31:02:d4:21:20:06:47:53:ea:a9:77:a2:a1:48:9e:
dc:e7:a6:89:57:a3:a4:16:83:c0:2d:1e:40:9a:76:33:10:23:
36:21:68:77:81:38:08:ba:1c:58:7d:0e:d5:7e:9c:0d:d2:e6:
5f:90:90:92:71:36:5d:1e:62:42:06:52:1e:5e:66:97:4d:fa:
75:24:a0:f5:de:86:05:7e:9f:58:25:13:61:19:1b:46:9c:94:
14:43:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:45 2024 by rpki-client on console-fra.rpki-client.org