Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/adDtRF-JuX3sXkaJCXbAyWhaeZM.roa
File: adDtRF-JuX3sXkaJCXbAyWhaeZM.roa (raw, json)
Hash identifier: LqcXZtLqgws98KtiCk2dkoGJS70DA3SJwLCrXjZC1rY=
Subject key identifier: 69:D0:ED:44:5F:89:B9:7D:EC:5E:46:89:09:76:C0:C9:68:5A:79:93
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190E877D375167835A3B8273FEAAF50B213
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/adDtRF-JuX3sXkaJCXbAyWhaeZM.roa
Signing time: Thu 25 Jul 2024 05:58:05 +0000
ROA not before: Thu 25 Jul 2024 05:58:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 141.98.7.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 09:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:77:d3:75:16:78:35:a3:b8:27:3f:ea:af:50:b2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 25 05:58:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69d0ed445f89b97dec5e46890976c0c9685a7993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:6b:07:cc:2c:49:a7:7f:99:1d:cc:86:f5:
40:e6:1c:11:cf:ff:d7:74:ca:26:39:76:ae:9a:4a:
71:ae:95:f1:05:1c:93:0a:10:92:2e:40:f2:30:b5:
cf:51:55:5b:37:37:c3:39:64:0f:d8:7b:81:9d:48:
93:7c:10:c3:de:08:81:2b:80:fc:19:df:68:98:60:
e4:31:17:bf:e3:1d:4f:d7:9e:da:e4:14:87:54:e1:
7e:df:94:aa:24:85:47:80:97:85:b0:da:89:55:82:
98:00:2a:e7:e5:a2:9c:1c:b4:27:65:ad:dd:32:e1:
76:d6:24:4e:17:e5:bc:f4:e5:37:e1:8e:9b:a1:f2:
ae:b6:f5:d9:22:d6:1f:df:de:7e:c0:dd:f8:59:bf:
ae:dd:5f:e5:ce:c7:ca:3d:70:91:25:11:bf:df:be:
ae:5c:df:3b:d4:87:85:71:72:4f:1a:91:b0:22:a0:
f8:ee:32:82:7f:ac:73:57:47:13:08:ef:5f:36:ed:
fb:06:5f:43:55:16:19:d2:d8:47:68:c7:8e:86:d4:
8f:ad:38:b6:95:5b:91:4a:1e:49:0d:e3:74:ef:a2:
3a:b8:1e:67:fc:45:e0:59:d4:1b:c8:0d:eb:03:f9:
6d:13:e7:c9:dd:fe:39:fe:75:77:96:ae:1c:e1:29:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D0:ED:44:5F:89:B9:7D:EC:5E:46:89:09:76:C0:C9:68:5A:79:93
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/adDtRF-JuX3sXkaJCXbAyWhaeZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
185.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:36:f4:ec:9d:96:84:e4:db:57:12:57:8f:00:8f:56:42:7f:
14:ef:76:ef:7a:91:9f:89:bf:e3:87:8e:11:bf:83:62:0e:71:
74:48:1a:4a:68:be:d3:d8:2c:c8:35:90:91:92:79:54:99:fd:
dc:a5:f5:67:39:cb:dc:55:03:d7:42:07:c6:9a:dd:41:59:14:
a0:bd:a7:2f:ee:16:aa:9d:a2:f7:91:36:1d:f8:88:a2:ec:69:
ea:40:c1:87:63:5e:87:7d:80:c5:db:a3:0e:93:f1:4f:01:c2:
d5:ca:57:e7:89:b0:43:1b:14:ee:0c:85:db:ff:a3:08:83:a2:
4b:5d:7d:49:1e:f3:ea:b6:0a:dd:23:f5:e4:3b:4d:25:ba:c4:
b4:2e:a4:5a:ab:9f:c4:cc:1a:75:96:4a:d7:a2:c6:85:80:8b:
06:9f:ba:c4:68:44:76:0d:11:2c:d8:52:b3:ef:83:86:8f:ed:
22:a5:cd:00:c8:6c:6e:c6:eb:49:3c:56:cc:ba:ab:e3:95:99:
2f:d7:da:f2:8e:7a:31:28:52:a8:f4:80:b0:66:c2:67:26:7a:
fb:7b:c1:ff:6b:47:e0:3f:25:62:17:e5:9d:2c:1f:6a:32:d8:
76:3e:b9:4a:63:c6:b5:ee:2c:d0:b1:50:96:d9:0a:6b:1d:fd:
49:61:ca:2d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZDod9N1Fng1o7gnP+qvULITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNzI1MDU1ODA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWQwZWQ0NDVmODliOTdkZWM1ZTQ2ODkwOTc2YzBjOTY4NWE3OTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtllrB8wsSad/mR3MhvVA5hwRz//X
dMomOXaumkpxrpXxBRyTChCSLkDyMLXPUVVbNzfDOWQP2HuBnUiTfBDD3giBK4D8
Gd9omGDkMRe/4x1P157a5BSHVOF+35SqJIVHgJeFsNqJVYKYACrn5aKcHLQnZa3d
MuF21iROF+W89OU34Y6bofKutvXZItYf395+wN34Wb+u3V/lzsfKPXCRJRG/376u
XN871IeFcXJPGpGwIqD47jKCf6xzV0cTCO9fNu37Bl9DVRYZ0thHaMeOhtSPrTi2
lVuRSh5JDeN076I6uB5n/EXgWdQbyA3rA/ltE+fJ3f45/nV3lq4c4SnRjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGnQ7URfibl97F5GiQl2wMloWnmTMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYWREdFJGLUp1WDNzWGthSkNYYkF5V2hhZVpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWIHAwQA
udhHMA0GCSqGSIb3DQEBCwUAA4IBAQC1NvTsnZaE5NtXElePAI9WQn8U73bvepGf
ib/jh44Rv4NiDnF0SBpKaL7T2CzINZCRknlUmf3cpfVnOcvcVQPXQgfGmt1BWRSg
vacv7haqnaL3kTYd+Iii7GnqQMGHY16HfYDF26MOk/FPAcLVylfnibBDGxTuDIXb
/6MIg6JLXX1JHvPqtgrdI/XkO00lusS0LqRaq5/EzBp1lkrXosaFgIsGn7rEaER2
DREs2FKz74OGj+0ipc0AyGxuxutJPFbMuqvjlZkv19ryjnoxKFKo9ICwZsJnJnr7
e8H/a0fgPyViF+WdLB9qMth2PrlKY8a17izQsVCW2QprHf1JYcot
-----END CERTIFICATE-----
Generated at Sun Sep 8 11:35:53 2024 by rpki-client on console-fra.rpki-client.org