Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/shLzH4U53eJrqeVdh1EBLirnRSs.roa
File: shLzH4U53eJrqeVdh1EBLirnRSs.roa (raw, json)
Hash identifier: miLFGC8raQzDolLecfPcGce1HtTxcuNUdVn/hNrDGRA=
Subject key identifier: B2:12:F3:1F:85:39:DD:E2:6B:A9:E5:5D:87:51:01:2E:2A:E7:45:2B
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01891B3E09C30127D5A5884960DE8432595D
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/shLzH4U53eJrqeVdh1EBLirnRSs.roa
Signing time: Mon 03 Jul 2023 10:13:17 +0000
ROA not before: Mon 03 Jul 2023 10:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.246.0/24 maxlen: 24
141.226.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:3e:09:c3:01:27:d5:a5:88:49:60:de:84:32:59:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jul 3 10:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b212f31f8539dde26ba9e55d8751012e2ae7452b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:58:23:60:8f:57:b5:c4:8b:49:65:b0:59:
37:c6:16:30:be:4f:60:dd:5b:2c:ce:b6:a2:f7:4f:
7e:cc:46:ae:a7:5d:da:58:cf:c7:cf:ed:ad:0b:b7:
cd:ef:4e:71:63:74:bc:e0:89:23:a3:f7:3a:f4:d3:
62:7f:34:57:e9:bc:92:d1:eb:d1:6e:82:a0:79:11:
63:2b:1b:b1:30:50:2b:cc:18:1c:9d:77:64:b3:03:
92:f8:fa:4f:14:90:35:a1:0e:12:34:59:8f:57:06:
2d:48:7e:fa:9f:a0:69:77:43:f2:c3:74:dd:9e:3d:
a1:78:cd:cc:df:54:30:32:cf:7c:c6:4b:77:dc:d8:
b5:66:9e:38:df:4f:31:94:3c:bc:5d:9d:20:d9:c0:
35:53:d6:18:83:6c:aa:6f:93:ad:67:a7:ad:35:9e:
98:75:41:47:6a:a1:1d:fe:44:3b:01:4c:10:6a:8d:
f8:8a:0a:96:61:76:9f:ab:27:76:b0:d8:28:ac:db:
e9:1c:1b:00:37:64:3e:ac:b1:7b:a1:f2:b8:27:cc:
7c:56:eb:78:a5:56:72:68:e6:47:10:ba:f1:b3:c7:
0f:3a:5f:85:f2:0a:2d:1b:1e:88:29:5f:78:6b:3d:
39:18:08:a2:29:5f:3e:d1:d8:6e:31:b1:ec:1b:e5:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:12:F3:1F:85:39:DD:E2:6B:A9:E5:5D:87:51:01:2E:2A:E7:45:2B
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/shLzH4U53eJrqeVdh1EBLirnRSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
141.226.246.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:20:6f:f4:ab:c1:d3:5b:b2:dc:53:89:98:10:dd:38:5a:9c:
8c:47:1f:05:33:32:54:9b:df:5c:34:6f:5d:20:2e:81:18:12:
ca:94:40:6b:48:e9:b5:10:8b:8f:cd:4d:48:69:23:00:75:c2:
5d:78:e9:fa:93:18:61:85:47:a5:c4:aa:dc:ca:c7:79:15:f0:
9a:47:e4:45:2a:3f:1b:a6:e9:54:ca:74:38:db:0a:43:17:58:
2f:23:5f:37:b2:e9:d8:30:5c:cf:26:62:9f:df:e8:83:33:97:
0b:20:1b:29:df:8f:28:97:d9:1c:ae:d6:49:fc:3c:67:9b:d5:
64:11:3d:e1:ba:af:90:8f:a2:c5:31:0c:0d:0b:da:6e:a0:1f:
69:37:48:d1:39:67:dc:76:97:f0:15:eb:0c:a2:d8:d5:aa:0a:
6f:b7:53:46:1d:1b:cf:b0:30:f0:13:43:c7:93:d9:a2:26:87:
17:5e:bf:cd:34:59:54:35:73:75:ae:e2:c6:7a:21:e8:02:85:
60:08:a7:15:f1:bb:fa:55:89:16:95:fc:a6:ee:8a:10:13:af:
3b:80:2a:3a:97:07:69:a5:60:40:f7:ef:bb:c9:3a:8d:3b:90:
fa:58:73:1b:e4:15:83:dc:ce:fc:91:a1:a1:09:3f:8a:85:f4:
4c:00:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:26 2023 by rpki-client on console.sobornost.net