Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qITtVDyhMAngyYbFWUGvG2oevWM.roa
File: qITtVDyhMAngyYbFWUGvG2oevWM.roa (raw, json)
Hash identifier: mLIsy6wfM9aiRWnD/tTJfv+EcNmg4l9PDqc8D4NhHF8=
Subject key identifier: A8:84:ED:54:3C:A1:30:09:E0:C9:86:C5:59:41:AF:1B:6A:1E:BD:63
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A63D9119A2B7C23F84A4C5AC9FB5EDEAD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qITtVDyhMAngyYbFWUGvG2oevWM.roa
Signing time: Tue 05 Sep 2023 05:38:04 +0000
ROA not before: Tue 05 Sep 2023 05:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 141.98.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:63:d9:11:9a:2b:7c:23:f8:4a:4c:5a:c9:fb:5e:de:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 05:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a884ed543ca13009e0c986c55941af1b6a1ebd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:da:1b:e5:b1:48:34:e1:4e:f2:01:f2:ee:
d4:3d:e9:1b:95:51:4e:0d:41:96:de:69:6e:56:e3:
ac:26:ec:72:e9:5d:0a:b1:5f:c9:4c:5c:3d:7f:32:
4f:45:64:a1:07:c7:55:e3:0f:23:d6:d1:b6:02:ce:
0d:54:a6:06:39:fc:21:e7:c9:85:3e:29:82:71:3f:
dd:3f:db:e3:45:06:cb:64:db:14:a4:21:d0:cf:ac:
12:74:91:ed:f6:29:b0:42:5f:03:1d:fe:7f:d1:70:
d7:ba:14:10:99:3c:6d:e7:7e:c9:57:3c:64:68:23:
e2:96:96:b9:0f:47:4d:11:84:80:f9:3e:37:ee:28:
e1:b7:b6:17:55:84:84:3f:f8:c5:09:42:9b:88:67:
3e:ac:8c:9c:40:67:57:80:13:c4:d9:c2:93:a4:cb:
fa:5d:93:5d:36:eb:62:ae:6d:db:a3:74:f3:1f:4a:
0d:a9:1c:ed:53:23:16:9c:5c:88:cb:0f:d4:00:71:
d1:2d:18:c8:77:c4:91:15:d1:b5:a6:02:2a:12:cf:
92:84:56:c2:b0:64:19:2e:30:37:47:19:09:91:16:
8d:69:0a:6e:b7:c0:10:5f:2c:0b:d4:f9:ed:65:45:
11:1d:27:26:b0:c4:8d:64:2f:a7:2a:8c:22:23:ea:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:84:ED:54:3C:A1:30:09:E0:C9:86:C5:59:41:AF:1B:6A:1E:BD:63
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qITtVDyhMAngyYbFWUGvG2oevWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4c:f1:9d:b5:ec:49:14:51:aa:46:85:9d:81:9b:80:be:ab:
c6:2d:58:02:9d:6c:d5:18:cd:10:39:1a:2e:5f:01:9d:22:90:
d7:51:39:b4:db:a6:83:3d:a3:89:37:ab:e8:12:f2:5e:8c:71:
a8:d0:6a:6a:80:fb:ab:47:65:c9:a8:0e:d4:8c:7a:79:0c:86:
00:c4:78:00:9d:2a:62:f3:cd:08:d3:0b:77:e6:e6:7d:d4:9c:
1d:a0:f8:87:3b:1e:b1:e8:41:b1:43:c0:6c:9e:a0:35:36:da:
36:c2:c3:47:70:98:5c:92:7c:fa:e7:de:c9:72:54:09:7f:ad:
3e:4a:08:d3:1e:db:1e:b3:76:d7:b5:87:ce:57:e1:46:e1:9d:
d2:46:08:36:82:8f:02:7e:c9:9a:91:eb:fb:08:5b:51:05:f2:
27:5b:20:f4:89:30:c9:ac:10:ac:9a:bb:d3:79:b9:67:15:aa:
98:a9:73:44:78:bb:98:92:ac:f2:7f:38:7e:59:e5:89:1e:36:
78:a2:65:87:7a:35:a1:77:af:f9:de:81:85:f9:50:ec:33:67:
e6:fd:87:19:8b:3e:5a:c1:49:c3:9e:32:58:84:a1:7d:72:ca:
6e:28:1f:0d:58:aa:85:ef:1b:a2:36:77:c3:75:fa:c1:c8:1d:
99:26:40:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpj2RGaK3wj+EpMWsn7Xt6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwOTA1MDUzODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODg0ZWQ1NDNjYTEzMDA5ZTBjOTg2YzU1OTQxYWYxYjZhMWViZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqHaG+WxSDThTvIB8u7UPekblVFO
DUGW3mluVuOsJuxy6V0KsV/JTFw9fzJPRWShB8dV4w8j1tG2As4NVKYGOfwh58mF
PimCcT/dP9vjRQbLZNsUpCHQz6wSdJHt9imwQl8DHf5/0XDXuhQQmTxt537JVzxk
aCPilpa5D0dNEYSA+T437ijht7YXVYSEP/jFCUKbiGc+rIycQGdXgBPE2cKTpMv6
XZNdNutirm3bo3TzH0oNqRztUyMWnFyIyw/UAHHRLRjId8SRFdG1pgIqEs+ShFbC
sGQZLjA3RxkJkRaNaQput8AQXywL1PntZUURHScmsMSNZC+nKowiI+p5VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKiE7VQ8oTAJ4MmGxVlBrxtqHr1jMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcUlUdFZEeWhNQW5neVliRldVR3ZHMm9ldldNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWIHMA0G
CSqGSIb3DQEBCwUAA4IBAQCBTPGdtexJFFGqRoWdgZuAvqvGLVgCnWzVGM0QORou
XwGdIpDXUTm026aDPaOJN6voEvJejHGo0GpqgPurR2XJqA7UjHp5DIYAxHgAnSpi
880I0wt35uZ91JwdoPiHOx6x6EGxQ8BsnqA1Nto2wsNHcJhcknz6597JclQJf60+
SgjTHtses3bXtYfOV+FG4Z3SRgg2go8Cfsmakev7CFtRBfInWyD0iTDJrBCsmrvT
eblnFaqYqXNEeLuYkqzyfzh+WeWJHjZ4omWHejWhd6/53oGF+VDsM2fm/YcZiz5a
wUnDnjJYhKF9cspuKB8NWKqF7xuiNnfDdfrByB2ZJkB6
-----END CERTIFICATE-----
Generated at Wed Sep 6 10:39:39 2023 by rpki-client on console-ams.rpki-client.org