Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/Dy2mEtB9PPp4q4jX4TKFxOL5q-g.roa
File: Dy2mEtB9PPp4q4jX4TKFxOL5q-g.roa (raw, json)
Hash identifier: ZIpkCe8MO6bHe8qR6PY77sCawkiMvop+T+QgJGJdgmM=
Subject key identifier: 0F:2D:A6:12:D0:7D:3C:FA:78:AB:88:D7:E1:32:85:C4:E2:F9:AB:E8
Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial: 01856DA65EF37F950CF3DCAA7A3F0B7B6071
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/Dy2mEtB9PPp4q4jX4TKFxOL5q-g.roa
Signing time: Sun 01 Jan 2023 14:04:57 +0000
ROA not before: Sun 01 Jan 2023 14:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29107
IP address blocks: 141.98.109.0/24 maxlen: 24
2a07:76c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:5e:f3:7f:95:0c:f3:dc:aa:7a:3f:0b:7b:60:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
Validity
Not Before: Jan 1 14:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f2da612d07d3cfa78ab88d7e13285c4e2f9abe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:39:41:6e:0b:1b:9f:53:e5:ae:ae:14:da:
f9:21:2d:64:c0:09:69:9d:3c:8b:41:0c:8d:34:1d:
18:19:0f:bf:03:34:20:54:03:61:da:48:00:2c:c9:
78:df:d8:9a:92:85:2c:69:28:98:8c:72:3d:00:e3:
49:52:84:75:73:ca:e1:86:d6:e3:ee:5c:87:46:9f:
df:b3:06:ab:2e:1b:21:fd:8b:06:14:c0:0b:5d:84:
da:90:ca:a1:0c:a6:87:62:62:b1:f4:bd:33:95:45:
8c:27:78:65:bf:0c:f6:8e:51:8c:af:ec:6b:6e:37:
86:f3:34:0d:4b:6a:28:04:27:3e:b0:32:a2:2a:55:
f9:de:31:cc:bd:82:97:30:e4:ae:4e:13:7a:66:c5:
4b:ce:dc:17:d7:52:67:45:a7:39:e9:2d:87:21:f4:
c9:7c:25:e2:66:d6:7c:c1:02:1b:ef:4f:13:a9:17:
86:be:42:d0:ae:c9:d2:e0:a8:4a:4c:90:f1:30:e0:
ac:e1:aa:ed:88:e1:ad:b2:1e:a3:c8:c5:00:1c:b6:
18:45:eb:88:21:77:68:3c:79:fe:1c:ce:e5:1e:16:
27:5d:4f:63:4b:49:b9:da:3f:fd:4e:52:44:14:aa:
22:7e:75:47:c1:2c:95:8d:6e:16:03:7c:ce:dd:a7:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2D:A6:12:D0:7D:3C:FA:78:AB:88:D7:E1:32:85:C4:E2:F9:AB:E8
X509v3 Authority Key Identifier:
keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/Dy2mEtB9PPp4q4jX4TKFxOL5q-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.109.0/24
IPv6:
2a07:76c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
36:40:47:fc:7e:c2:7a:71:e5:00:82:c7:79:ae:be:8c:b0:44:
ed:fa:34:11:e3:6a:af:5c:51:eb:3e:b4:4e:69:3f:ea:2a:67:
42:78:26:64:d8:78:e9:2f:0c:1a:06:d0:f2:fb:01:38:9e:9e:
d9:90:00:f5:fb:7b:92:8c:33:1b:58:ab:38:19:a3:c0:c0:1f:
a6:9a:cc:71:61:20:5f:45:5b:91:62:1b:f3:8f:b7:6b:40:4c:
64:db:d0:51:f3:5e:83:76:2e:da:a4:63:04:c5:e8:ab:84:5c:
c3:a5:48:58:16:81:4d:d4:0d:1d:eb:45:d2:ac:5b:09:7e:bf:
00:83:4a:3b:37:9f:85:77:de:ab:c0:df:fe:ee:fc:04:f4:ad:
7e:71:b7:2f:71:bf:77:12:e4:d6:db:ea:a1:3a:35:14:d2:3f:
bd:e5:08:b3:bd:2a:7e:91:43:59:88:4e:2b:0d:ff:a2:3d:d4:
5f:09:dd:1e:40:ef:63:72:5e:1d:e4:66:da:16:2e:ae:a1:21:
81:1d:40:89:c4:70:8b:c7:1c:39:30:59:83:a9:11:80:1e:07:
40:c2:e2:92:35:23:d5:97:f0:73:9e:2f:cc:85:b3:af:bb:48:
16:1d:de:f6:1b:6f:b4:32:33:32:a4:dc:7f:4d:05:8b:6f:9f:
bb:69:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:36 2024 by rpki-client on console-ams.rpki-client.org