Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kAXVntIcXPIHGKQDD_cpWhRrjHs.roa
File: kAXVntIcXPIHGKQDD_cpWhRrjHs.roa (raw, json)
Hash identifier: RHct9dVXj/IQ8rmASC/istb8TCQPRec21vMPLnort4M=
Subject key identifier: 90:05:D5:9E:D2:1C:5C:F2:07:18:A4:03:0F:F7:29:5A:14:6B:8C:7B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BD8B28CB52BC15E4194B13F367991FB53
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kAXVntIcXPIHGKQDD_cpWhRrjHs.roa
Signing time: Thu 16 Nov 2023 15:14:21 +0000
ROA not before: Thu 16 Nov 2023 15:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215987
IP address blocks: 141.98.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:b2:8c:b5:2b:c1:5e:41:94:b1:3f:36:79:91:fb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 16 15:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9005d59ed21c5cf20718a4030ff7295a146b8c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:aa:9a:eb:e7:c9:ed:99:97:73:35:65:62:
fe:6d:3f:31:d5:3a:a2:80:a5:59:10:fd:51:ad:33:
d3:63:d3:73:78:2f:e7:cf:c5:88:d2:98:d5:60:8f:
91:50:8b:1c:3c:5d:18:90:7e:52:ff:7f:b7:02:91:
d8:5c:bb:41:21:4d:59:31:d2:30:2d:dd:ad:f5:29:
02:d2:0e:4b:00:c3:ea:71:f5:8d:4a:e2:48:20:53:
b3:f0:4c:9c:38:30:4c:02:d2:d3:1d:8b:a6:4f:55:
42:40:b0:8d:fe:e4:9a:fd:1d:00:58:50:51:df:f1:
62:db:f2:38:bc:46:2e:6a:6e:da:ab:ad:d9:5e:9e:
8b:72:ae:ce:a5:f7:c5:ea:b3:5b:e2:9c:09:e0:ad:
cd:a6:02:c6:01:ba:2f:a5:a4:48:a6:7b:d0:7c:90:
9e:a5:bf:aa:95:ab:8d:ff:ce:3b:2e:e8:58:90:d5:
b3:87:3f:ee:da:c6:e0:3f:9e:7e:b7:0b:54:8d:a0:
78:7e:83:ec:e7:75:12:75:1a:08:22:d1:26:0e:f9:
67:1c:9e:3a:94:0e:5e:aa:7d:d0:82:81:4e:82:af:
4d:a6:ed:ed:21:09:9d:58:f9:c3:bf:ae:b6:ed:24:
ea:db:7f:e6:21:85:a5:20:3a:17:56:54:0b:53:1d:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:05:D5:9E:D2:1C:5C:F2:07:18:A4:03:0F:F7:29:5A:14:6B:8C:7B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kAXVntIcXPIHGKQDD_cpWhRrjHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
Signature Algorithm: sha256WithRSAEncryption
81:cb:c9:2b:13:f2:11:1f:db:94:fc:e4:26:d9:f6:5b:77:9e:
74:ee:4c:69:cd:ca:11:dd:81:6e:40:c1:7e:d7:72:39:0b:92:
55:25:be:e0:e4:3b:41:ca:9e:e3:76:da:37:2d:fa:6c:d6:18:
2b:79:d0:5d:07:44:7b:10:08:e9:f7:90:6b:21:9a:73:55:39:
d4:ca:3a:d7:cc:33:a9:c7:93:7f:fa:c9:ab:26:0f:18:f8:9d:
26:f8:a2:79:6f:0d:11:48:54:40:28:8f:20:71:7a:68:46:d7:
28:fa:ea:55:bd:03:1d:0e:fc:46:4a:a6:8f:dc:28:06:0d:0f:
02:f7:bc:a5:ee:71:9d:f3:d8:26:e0:6d:42:19:1d:0e:b6:99:
8d:03:90:2b:18:2e:97:b4:b9:97:0e:3f:02:ce:31:5c:18:ef:
49:0a:f3:ac:6f:af:fd:a4:ed:0c:19:f3:c9:ec:fd:05:d4:ed:
11:42:c9:cc:f0:b2:45:5c:00:aa:a4:dd:38:74:d4:8c:4d:ac:
4c:99:39:4d:e3:35:6e:73:eb:bf:5b:6b:0f:27:f9:40:b5:42:
7b:23:c1:d2:d9:0e:54:4e:32:fd:c7:ee:3c:f2:2d:7c:55:b9:
c8:a4:69:50:f3:26:53:34:7e:d9:1a:eb:95:79:74:87:21:99:
f9:05:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 15:07:51 2023 by rpki-client on console-fra.rpki-client.org