Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c1vt4HmsLl4yqeJxQZXn7cZF7dw.roa
File: c1vt4HmsLl4yqeJxQZXn7cZF7dw.roa (raw, json)
Hash identifier: 4yf0XTT9eHKLoC06s7/5L0JT0Plsyv6nPva1Gw+vLTU=
Subject key identifier: 73:5B:ED:E0:79:AC:2E:5E:32:A9:E2:71:41:95:E7:ED:C6:45:ED:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E2E66139C9EB856012B85535696FD551E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c1vt4HmsLl4yqeJxQZXn7cZF7dw.roa
Signing time: Mon 11 Mar 2024 16:43:45 +0000
ROA not before: Mon 11 Mar 2024 16:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 141.98.7.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Apr 2024 08:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:66:13:9c:9e:b8:56:01:2b:85:53:56:96:fd:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 11 16:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=735bede079ac2e5e32a9e2714195e7edc645eddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:e1:28:f9:c3:cd:c3:13:f6:ca:9f:7e:87:
8a:20:54:92:cc:5f:29:bf:a3:60:81:b4:f2:9f:97:
5f:b7:19:2d:0a:b7:39:97:8f:64:8c:3b:00:e9:88:
63:b2:05:c8:63:ea:63:25:e8:f6:87:da:54:3c:4f:
c9:64:01:13:e4:6a:de:53:d7:b1:85:c6:78:92:5b:
10:98:eb:4b:9d:06:86:4c:51:72:e1:f5:25:da:72:
bd:4b:e0:81:8b:73:e0:1a:ff:36:36:5a:b9:54:0f:
e9:23:ca:f6:7f:51:55:e0:57:4a:8c:11:65:bd:3f:
f9:f7:82:53:8e:d8:b4:81:10:5c:fe:50:b6:43:a3:
20:22:2a:f4:f5:c7:ec:3a:6f:d9:30:ab:5c:74:84:
db:59:ba:55:6a:19:ad:1c:ef:5c:3b:d0:ca:59:70:
31:be:ee:33:f7:87:53:8d:1e:e8:c5:2c:91:61:34:
a5:9c:0f:ce:51:c5:74:03:e0:3f:34:b9:7d:bb:5d:
35:89:6b:b5:e0:b3:1e:8b:63:4f:72:09:d6:3f:14:
eb:66:b7:1e:c0:d2:18:97:62:fb:13:0a:5f:d3:07:
8a:f1:75:4d:49:4f:b2:26:1b:5c:97:0a:22:eb:be:
ef:59:ef:af:02:17:8c:dc:47:08:96:66:a7:d3:36:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:ED:E0:79:AC:2E:5E:32:A9:E2:71:41:95:E7:ED:C6:45:ED:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c1vt4HmsLl4yqeJxQZXn7cZF7dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
185.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:2a:12:cf:d1:a0:0e:98:8b:b5:de:06:12:2c:cf:f8:e3:57:
9a:18:da:b7:12:45:1d:5c:82:7a:79:df:a3:21:6a:ad:37:02:
df:28:e3:5b:32:43:89:85:60:52:fa:ae:f9:68:37:46:0c:2e:
b6:88:77:c7:ed:d2:f3:3b:54:41:31:f5:3e:ed:38:80:40:11:
15:0c:82:4d:b3:0e:12:ee:72:30:3e:38:09:d6:6c:57:06:a8:
14:37:79:5a:9c:35:6f:b8:3c:74:0b:5e:f2:5a:8f:22:16:05:
4d:b6:db:08:f6:fe:36:d1:6d:13:87:7f:96:c4:12:14:26:51:
b7:b5:81:f0:1b:f1:8a:d2:3f:4d:87:ce:7c:7a:ff:9e:a6:53:
9c:bc:df:7f:a7:9a:86:15:e9:f9:fb:5b:cf:64:71:f1:05:96:
4f:7d:dd:ad:e2:ce:e6:d8:c3:9a:f0:9e:a5:a8:95:31:3e:b2:
08:5c:c7:78:d7:e2:4f:a5:bc:10:46:04:ca:96:fc:89:26:26:
fa:5d:5e:01:c1:22:ad:ac:61:a7:d6:64:83:2e:50:db:3a:e6:
59:03:ac:2d:ab:48:31:08:4f:d3:10:df:54:db:56:12:c9:49:
f9:b3:59:91:98:ed:eb:35:a5:94:a7:08:e2:11:94:5f:a5:71:
ee:02:6d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 11:32:10 2024 by rpki-client on console-ams.rpki-client.org