Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xk2T31cvePCJJNG_Il4D_XJgq20.roa
File: xk2T31cvePCJJNG_Il4D_XJgq20.roa (raw, json)
Hash identifier: MjPEpccK2/O3xemq/CCvpCBazFNUlBH0oGaTsKGDbGU=
Subject key identifier: C6:4D:93:DF:57:2F:78:F0:89:24:D1:BF:22:5E:03:FD:72:60:AB:6D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D8DDF44BC21310E944E2F55C885AA454F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xk2T31cvePCJJNG_Il4D_XJgq20.roa
Signing time: Fri 09 Feb 2024 12:37:15 +0000
ROA not before: Fri 09 Feb 2024 12:37:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215987
IP address blocks: 141.98.7.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 14:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:df:44:bc:21:31:0e:94:4e:2f:55:c8:85:aa:45:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 9 12:37:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c64d93df572f78f08924d1bf225e03fd7260ab6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:5b:58:90:be:70:0f:d4:60:33:6e:fc:87:
3b:e3:44:d8:d2:c8:a8:24:dd:91:11:a5:86:86:c7:
c4:c6:43:c0:d3:f6:ab:8b:a9:5e:02:b0:5f:03:bb:
6d:b0:80:e6:69:df:b9:1c:da:3e:1b:40:49:a5:87:
93:cb:0c:dc:1f:4b:54:ac:43:bf:be:73:5e:b5:e6:
f8:2b:0c:ff:d1:5f:98:31:45:89:c5:d1:70:57:b0:
33:c2:3a:bc:9f:e1:8e:39:bd:e2:d0:32:44:30:a3:
ef:33:7b:eb:34:3b:bc:65:51:c6:38:0d:da:74:3d:
2e:6e:08:53:6d:63:40:24:dd:05:e2:82:78:9c:10:
50:78:a7:b8:ec:86:2d:18:8c:80:8c:5e:57:5f:79:
ea:a8:32:6d:9f:af:21:91:1f:8b:dc:7d:8c:fe:b6:
6c:10:04:eb:90:05:14:78:79:3f:63:4f:f5:86:7d:
05:c5:91:d5:97:e1:b2:58:83:12:11:fa:0c:ff:3b:
67:eb:9c:13:92:a6:18:b0:4c:81:9f:72:8d:e8:e0:
67:5b:1f:ae:63:14:4a:48:a0:3a:4a:2a:5b:e9:95:
09:a0:ef:c5:32:ce:c4:5d:f0:e3:a3:b1:8d:1d:8c:
12:35:87:de:de:5c:23:5a:6e:76:b7:d1:1c:9d:1d:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4D:93:DF:57:2F:78:F0:89:24:D1:BF:22:5E:03:FD:72:60:AB:6D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xk2T31cvePCJJNG_Il4D_XJgq20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
185.254.37.0/24
Signature Algorithm: sha256WithRSAEncryption
14:55:cf:e1:dc:fc:f4:2f:e6:87:dd:9b:ce:9f:c0:17:10:3c:
69:f4:af:48:da:11:1b:d3:ee:45:14:ca:2d:36:13:8b:b0:72:
40:8c:22:6c:c9:22:9c:d9:74:d4:1a:f1:47:27:92:31:c0:ee:
f2:7b:e7:c5:23:c3:24:7d:1f:ad:e2:e9:05:0d:76:86:22:34:
f1:53:47:6b:d8:c3:16:fd:e5:ec:ba:98:f6:68:25:45:72:02:
37:27:2b:ec:17:b9:c7:d6:83:73:3a:3a:69:31:d2:08:c6:88:
40:57:ac:ec:3c:83:be:3e:65:aa:a8:45:e0:d8:68:c9:0d:8c:
68:5b:6a:d9:87:df:e1:11:c1:37:e3:5e:35:e2:c1:7b:86:b9:
27:a9:97:ac:21:20:8b:76:39:1c:f9:b7:25:1c:3b:29:83:bb:
16:67:2b:85:6a:f5:31:01:29:45:a5:44:2c:1d:d0:ed:f8:e7:
d0:6f:2c:df:26:88:2d:5b:eb:d5:1e:fe:dc:70:40:5a:d5:be:
ce:ae:6a:cf:62:0e:49:18:2c:6a:3b:3b:c2:9b:2e:0b:a4:d7:
dd:90:8f:cd:d7:0e:e1:56:c8:82:8e:2f:bf:a2:2f:95:ee:cd:
81:1d:e7:94:88:bd:1f:02:59:06:20:ad:2c:64:2b:ea:40:13:
6d:39:31:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY2N30S8ITEOlE4vVciFqkVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMjA5MTIzNzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjRkOTNkZjU3MmY3OGYwODkyNGQxYmYyMjVlMDNmZDcyNjBhYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15xbWJC+cA/UYDNu/Ic740TY0sio
JN2REaWGhsfExkPA0/ari6leArBfA7ttsIDmad+5HNo+G0BJpYeTywzcH0tUrEO/
vnNeteb4Kwz/0V+YMUWJxdFwV7Azwjq8n+GOOb3i0DJEMKPvM3vrNDu8ZVHGOA3a
dD0ubghTbWNAJN0F4oJ4nBBQeKe47IYtGIyAjF5XX3nqqDJtn68hkR+L3H2M/rZs
EATrkAUUeHk/Y0/1hn0FxZHVl+GyWIMSEfoM/ztn65wTkqYYsEyBn3KN6OBnWx+u
YxRKSKA6Sipb6ZUJoO/FMs7EXfDjo7GNHYwSNYfe3lwjWm52t9EcnR1IvwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMZNk99XL3jwiSTRvyJeA/1yYKttMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEveGsyVDMxY3ZlUENKSk5HX0lsNERfWEpncTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWIHAwQA
uf4lMA0GCSqGSIb3DQEBCwUAA4IBAQAUVc/h3Pz0L+aH3ZvOn8AXEDxp9K9I2hEb
0+5FFMotNhOLsHJAjCJsySKc2XTUGvFHJ5IxwO7ye+fFI8MkfR+t4ukFDXaGIjTx
U0dr2MMW/eXsupj2aCVFcgI3JyvsF7nH1oNzOjppMdIIxohAV6zsPIO+PmWqqEXg
2GjJDYxoW2rZh9/hEcE341414sF7hrknqZesISCLdjkc+bclHDspg7sWZyuFavUx
ASlFpUQsHdDt+OfQbyzfJogtW+vVHv7ccEBa1b7OrmrPYg5JGCxqOzvCmy4LpNfd
kI/N1w7hVsiCji+/oi+V7s2BHeeUiL0fAlkGIK0sZCvqQBNtOTEz
-----END CERTIFICATE-----
Generated at Mon Mar 11 18:17:00 2024 by rpki-client on console-ams.rpki-client.org