Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2cuu14AoxIf583DjpsJ6VF7yKjI.roa
File: 2cuu14AoxIf583DjpsJ6VF7yKjI.roa (raw, json)
Hash identifier: PPsqWsXqO0z1LY/BeL6WcN6i3t8ScWdd4KjiczXxYhs=
Subject key identifier: D9:CB:AE:D7:80:28:C4:87:F9:F3:70:E3:A6:C2:7A:54:5E:F2:2A:32
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D7EB7D929D512B254E898A3BB6171CE80
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2cuu14AoxIf583DjpsJ6VF7yKjI.roa
Signing time: Tue 06 Feb 2024 13:59:54 +0000
ROA not before: Tue 06 Feb 2024 13:59:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215987
IP address blocks: 141.98.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 12:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:b7:d9:29:d5:12:b2:54:e8:98:a3:bb:61:71:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 6 13:59:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9cbaed78028c487f9f370e3a6c27a545ef22a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:7b:49:6a:75:a9:e4:15:a0:5c:33:6b:fd:
a0:e9:f5:6f:bf:d3:b2:bb:d1:7f:30:50:3f:6c:31:
db:06:d3:18:3e:15:e4:2f:c9:44:c8:a4:39:42:ed:
52:de:7f:44:7c:68:5b:0a:cd:37:ad:21:c8:23:69:
e6:c1:c4:46:81:46:2a:c2:e7:33:e8:94:54:3b:e5:
f3:31:55:8e:bf:10:85:9b:ca:e7:04:e5:8b:a1:0a:
c8:3d:b6:d8:8d:22:88:10:d3:09:31:79:c1:d3:4f:
a5:3e:dd:aa:6b:91:38:5f:36:af:04:bd:51:78:fe:
3f:74:5d:c9:b8:3b:ff:56:60:8d:92:39:d4:4b:5b:
93:92:6b:d1:7b:a5:9d:98:98:68:41:84:fb:d4:70:
27:06:15:8a:e6:00:4d:c1:ed:a0:d1:f6:4f:a7:a8:
9f:d7:08:89:6e:06:5d:95:47:b5:67:0d:9b:0e:fb:
59:2c:95:3a:99:e0:05:9a:fd:db:eb:87:db:dc:14:
1b:df:46:ee:38:b9:fc:7b:70:6a:91:fe:02:ca:46:
9d:7e:e5:33:9b:72:0e:a6:6a:20:22:7a:de:08:04:
c3:7d:6f:d0:4a:7f:77:80:40:ec:1b:24:36:48:5c:
33:55:2d:ed:59:3d:21:aa:22:e9:38:0c:a6:62:48:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CB:AE:D7:80:28:C4:87:F9:F3:70:E3:A6:C2:7A:54:5E:F2:2A:32
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2cuu14AoxIf583DjpsJ6VF7yKjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:78:63:e4:21:ac:c7:1b:18:37:5d:24:69:b4:fc:be:21:de:
d5:ce:cb:2d:07:e9:c8:47:5c:cb:cf:d0:a5:5f:9e:06:ac:8d:
bb:28:ce:6a:58:0d:55:5d:8c:ae:23:a8:49:ec:f6:53:65:30:
97:8d:f2:ba:0a:11:08:14:a2:65:bd:df:e5:d9:eb:b7:7e:bc:
42:a5:dc:79:c5:45:9b:49:b8:f8:1e:38:7d:c5:41:db:86:31:
1b:d1:97:d5:bf:ef:5f:a4:ab:37:f4:b4:89:3f:52:9b:cc:0d:
0a:0f:1b:38:a6:cd:c1:28:46:3a:c9:6a:99:4a:10:dc:a3:87:
ac:96:97:58:ec:ac:46:85:74:d5:44:f6:2a:e7:d0:2f:ef:3f:
d4:74:cd:da:7c:b2:e4:05:0f:8f:1f:e8:5e:8f:ef:58:fe:0f:
ae:7b:b3:71:12:31:7c:14:fc:f3:27:62:cf:e9:d8:d7:ed:e3:
10:00:d9:92:e8:50:9c:b7:fa:b8:e7:ad:dd:f3:08:24:9d:5f:
ba:5a:f6:67:72:5b:7b:94:3b:e6:42:8f:8e:6c:80:31:d0:03:
b6:54:99:98:81:96:5e:6f:68:3b:f5:28:63:b7:bd:a8:5d:9f:
c2:27:42:2a:f3:93:2b:96:03:e6:49:36:bf:c6:6e:5c:3a:60:
38:b6:cc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 18:27:17 2024 by rpki-client on console-ams.rpki-client.org