Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/nn1rKvN1zGVtdHL09RnAawfqvgE.roa
File: nn1rKvN1zGVtdHL09RnAawfqvgE.roa (raw, json)
Hash identifier: MmGQ4NMi9iKQrhafdFluXYjFWv0f25v08ItS3ZgUmt0=
Subject key identifier: 9E:7D:6B:2A:F3:75:CC:65:6D:74:72:F4:F5:19:C0:6B:07:EA:BE:01
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 01856E0AFAF080F0866227F17329C3DEDB63
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/nn1rKvN1zGVtdHL09RnAawfqvgE.roa
Signing time: Sun 01 Jan 2023 15:54:51 +0000
ROA not before: Sun 01 Jan 2023 15:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209588
IP address blocks: 141.98.82.0/24 maxlen: 24
141.98.83.0/24 maxlen: 24
2a10:9107:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:fa:f0:80:f0:86:62:27:f1:73:29:c3:de:db:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jan 1 15:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e7d6b2af375cc656d7472f4f519c06b07eabe01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:64:52:61:f7:4d:a1:e5:68:91:b1:d0:f9:
52:80:32:80:94:e9:ae:e8:95:b4:ee:73:12:7d:15:
24:13:cb:ad:44:15:40:b3:45:5f:af:86:75:a7:2b:
22:f1:3d:bc:70:0a:43:15:2a:98:e4:61:f5:53:ed:
47:56:b6:cf:db:ec:c1:1d:09:1b:f3:9f:fc:37:5f:
06:ee:ad:05:1e:3b:cc:c5:c3:40:de:7f:7f:7b:c6:
1c:c6:20:e6:44:fa:bd:e1:b1:87:e6:ca:1f:1c:52:
00:5f:9e:4d:0c:d5:48:3d:63:f2:b5:21:ce:d3:e1:
e0:73:ef:ba:33:fc:6d:3b:43:b3:ce:0e:c3:51:b2:
4d:18:2c:11:f8:f9:b7:c9:14:5e:b8:71:7f:fa:d3:
02:12:3e:75:f0:5c:f8:14:48:19:bf:8f:2e:7d:f8:
cb:e2:f1:62:ef:5d:21:00:02:ce:bb:f9:25:c8:96:
2f:c2:29:f6:d3:04:9d:69:28:42:0f:10:43:71:da:
a1:e3:ed:35:cb:90:42:a1:eb:d9:98:5e:e2:1c:c0:
c3:a1:44:74:df:1f:34:92:02:b7:6d:46:80:5a:40:
75:bf:e8:d0:e9:ab:21:bd:87:0e:32:fe:fa:b7:c8:
51:f3:14:1f:1e:eb:b6:10:4e:3f:b7:b3:4c:50:bd:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7D:6B:2A:F3:75:CC:65:6D:74:72:F4:F5:19:C0:6B:07:EA:BE:01
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/nn1rKvN1zGVtdHL09RnAawfqvgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.82.0/23
IPv6:
2a10:9107:f000::/36
Signature Algorithm: sha256WithRSAEncryption
4f:1a:f7:65:20:1a:a9:86:79:d6:54:3e:29:c7:60:08:3e:4b:
df:f3:23:95:99:77:8c:4b:c9:54:8d:2a:ff:99:74:14:47:9c:
78:b3:d3:c2:ca:d8:60:5b:62:b6:0b:8d:ad:f1:0c:92:3c:1d:
65:56:22:4d:e4:bc:ad:f8:2f:ba:33:e9:d8:23:38:32:fd:dc:
b1:74:de:ff:26:8d:95:62:10:c5:56:f6:23:1a:9f:f3:19:02:
52:20:d3:62:2c:48:8c:21:c2:31:c4:e2:15:f8:0e:55:6e:51:
72:1b:bd:68:d3:c2:8a:cb:e3:ed:40:9c:f9:27:a8:ea:58:76:
b5:fd:b7:38:47:d0:1c:ed:13:ca:2c:ef:74:85:d6:0f:52:cd:
a2:24:23:52:32:fd:b1:f4:3b:43:4a:c7:b6:7f:55:18:42:bb:
ee:65:8d:5b:17:e9:1c:a6:82:04:4f:22:28:90:ce:a5:49:b4:
14:12:20:e4:f7:d2:9d:32:5c:af:bf:dc:75:c5:89:e3:09:41:
c2:53:66:16:dd:8a:c9:6b:3d:6a:89:fa:f9:35:1a:87:26:65:
94:02:22:6e:34:f8:8e:6e:e2:f8:b8:85:35:23:f0:cf:ed:b7:
08:8d:cf:00:d0:f9:4f:2f:04:1d:b1:df:5d:fc:61:7b:2c:dd:
18:fc:85:2b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYVuCvrwgPCGYifxcynD3ttjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz
Mjc2N2QwHhcNMjMwMTAxMTU1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTdkNmIyYWYzNzVjYzY1NmQ3NDcyZjRmNTE5YzA2YjA3ZWFiZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3xkUmH3TaHlaJGx0PlSgDKAlOmu
6JW07nMSfRUkE8utRBVAs0Vfr4Z1pysi8T28cApDFSqY5GH1U+1HVrbP2+zBHQkb
85/8N18G7q0FHjvMxcNA3n9/e8YcxiDmRPq94bGH5sofHFIAX55NDNVIPWPytSHO
0+Hgc++6M/xtO0Ozzg7DUbJNGCwR+Pm3yRReuHF/+tMCEj518Fz4FEgZv48uffjL
4vFi710hAALOu/klyJYvwin20wSdaShCDxBDcdqh4+01y5BCoevZmF7iHMDDoUR0
3x80kgK3bUaAWkB1v+jQ6ashvYcOMv76t8hR8xQfHuu2EE4/t7NMUL3XMwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFJ59ayrzdcxlbXRy9PUZwGsH6r4BMB8GA1UdIwQY
MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt
NTFiZTJmOTYwOGJjLzEvbm4xckt2TjF6R1Z0ZEhMMDlSbkFhd2ZxdmdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj
LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBjWJSMA4E
AgACMAgDBgQqEJEH8DANBgkqhkiG9w0BAQsFAAOCAQEATxr3ZSAaqYZ51lQ+Kcdg
CD5L3/MjlZl3jEvJVI0q/5l0FEeceLPTwsrYYFtitguNrfEMkjwdZVYiTeS8rfgv
ujPp2CM4Mv3csXTe/yaNlWIQxVb2Ixqf8xkCUiDTYixIjCHCMcTiFfgOVW5Rchu9
aNPCisvj7UCc+Seo6lh2tf23OEfQHO0TyizvdIXWD1LNoiQjUjL9sfQ7Q0rHtn9V
GEK77mWNWxfpHKaCBE8iKJDOpUm0FBIg5PfSnTJcr7/cdcWJ4wlBwlNmFt2KyWs9
aon6+TUahyZllAIibjT4jm7i+LiFNSPwz+23CI3PAND5Ty8EHbHfXfxheyzdGPyF
Kw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:03 2024 by rpki-client on console-fra.rpki-client.org