Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/OOBjkmgFl9rx1uVCbH-vKXhyhQw.roa
File: OOBjkmgFl9rx1uVCbH-vKXhyhQw.roa (raw, json)
Hash identifier: d26RDSvCMrabWt8goiRrmImyfu9vkUTNxq1dhaFO+YI=
Subject key identifier: 38:E0:63:92:68:05:97:DA:F1:D6:E5:42:6C:7F:AF:29:78:72:85:0C
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2EC7AC1132394940869D27D722407E
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/OOBjkmgFl9rx1uVCbH-vKXhyhQw.roa
Signing time: Sun 01 Jan 2023 07:14:43 +0000
ROA not before: Sun 01 Jan 2023 07:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 141.98.45.0/24 maxlen: 24
2a07:6f46:4500::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:c7:ac:11:32:39:49:40:86:9d:27:d7:22:40:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38e06392680597daf1d6e5426c7faf297872850c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:4e:2c:09:d1:ce:f2:f5:47:03:ad:08:f6:
2f:02:10:7d:99:29:80:78:51:9c:4e:45:ba:2a:10:
0e:3c:40:42:dc:f8:65:fb:99:b4:8a:59:9b:ba:c3:
91:02:6e:b6:33:1e:df:d4:8d:11:dc:26:1d:7f:6d:
8f:c6:10:1e:1a:48:fc:f8:66:c8:47:81:6d:e8:10:
4b:01:43:04:5d:fb:76:6a:7a:e8:88:ff:16:95:1e:
dd:cf:16:99:4d:52:26:9f:de:18:71:d0:ae:d0:a6:
b5:2b:d3:49:ad:e4:d1:64:79:f6:0f:66:49:86:25:
d6:4c:6c:c7:41:74:55:98:fb:5c:45:53:ca:24:5b:
52:93:e6:4a:57:ea:5a:41:2c:96:7c:c1:a9:e5:78:
75:76:fb:51:e7:30:3f:0c:9e:2e:20:8c:88:05:c7:
8f:03:c3:aa:5d:52:1b:a2:3b:da:8e:45:47:b0:12:
ab:c9:38:cb:e6:30:f0:fe:3d:27:99:81:b5:f6:94:
7b:48:07:94:f2:9a:28:74:72:66:a0:0e:90:a9:c9:
ad:5c:f5:1a:53:54:43:69:7d:72:f3:02:00:dd:1a:
48:3f:b1:77:b8:9e:64:20:85:80:59:d4:f2:5d:2a:
01:38:52:9b:f5:7e:cf:86:40:dc:84:3c:dc:9a:5d:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E0:63:92:68:05:97:DA:F1:D6:E5:42:6C:7F:AF:29:78:72:85:0C
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/OOBjkmgFl9rx1uVCbH-vKXhyhQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.45.0/24
IPv6:
2a07:6f46:4500::/40
Signature Algorithm: sha256WithRSAEncryption
86:3c:aa:90:94:ff:9d:49:ca:c5:7f:1a:a8:7e:ec:36:f3:ce:
88:ae:4a:10:c7:06:fb:7a:5a:36:3c:d3:0f:0a:38:19:9d:90:
98:e7:6e:05:32:f1:3e:f6:72:37:f8:dd:da:a9:13:c8:55:8a:
fc:4d:5e:8b:6e:9e:79:60:8a:af:ea:d6:c7:1f:7f:2a:af:0e:
e6:49:f1:d8:46:d9:2e:9f:a3:eb:4f:dc:19:9a:73:64:7c:54:
eb:36:24:bb:66:d7:21:1f:b4:27:5c:fc:71:7f:27:ee:aa:55:
8d:11:b0:92:c7:f6:a5:c7:19:b4:42:1e:e1:ee:af:e5:f3:fd:
23:b2:11:d2:f2:80:b3:2e:8d:fb:49:90:2d:7a:15:0e:93:54:
bb:12:6f:b4:17:2a:01:bd:10:19:9c:cf:28:75:13:df:71:e7:
28:bc:6f:d8:00:50:71:9f:b5:5f:50:5d:d6:b4:26:1a:a9:ee:
cf:22:4f:95:63:8c:27:c0:ff:b0:39:b1:69:f0:95:85:2e:4c:
cf:16:bc:f4:94:f5:35:cc:20:fa:7a:13:6a:c9:3a:8d:8a:27:
4d:e1:5a:2b:98:06:a0:49:8c:50:f5:dd:cb:b7:a4:e9:69:6e:
07:b9:68:4b:67:a7:73:77:2b:24:cd:80:ae:98:ab:43:e6:94:
be:9b:ba:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org