Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/IrWpPF4DPsUC84YNioyyPxRxv50.roa
File: IrWpPF4DPsUC84YNioyyPxRxv50.roa (raw, json)
Hash identifier: qcFWGbR1/XuVTHOrXD2cB6JBHkLUtK5jeZfYBtXi/MA=
Subject key identifier: 22:B5:A9:3C:5E:03:3E:C5:02:F3:86:0D:8A:8C:B2:3F:14:71:BF:9D
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 018CC5DC4426756322187D2B7CE0D49C8547
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/IrWpPF4DPsUC84YNioyyPxRxv50.roa
Signing time: Mon 01 Jan 2024 16:29:56 +0000
ROA not before: Mon 01 Jan 2024 16:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8559
IP address blocks: 141.98.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:44:26:75:63:22:18:7d:2b:7c:e0:d4:9c:85:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22b5a93c5e033ec502f3860d8a8cb23f1471bf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:43:7c:2c:fa:ce:af:c6:ab:11:1e:5d:a3:
e0:10:8b:72:83:0c:64:df:4c:c2:23:03:f0:7a:54:
1d:29:eb:84:33:6e:a3:ad:7f:8e:cf:b3:f6:26:cb:
de:34:e8:9d:4d:89:78:31:29:b6:25:02:bf:78:b2:
5d:9d:9b:c7:be:e1:4b:36:da:24:d7:e1:06:32:44:
f4:d2:39:bd:db:f8:26:b7:a9:dc:06:17:7e:33:07:
5c:af:f6:29:77:a2:89:01:9d:2a:f5:db:13:78:cc:
49:bd:a9:95:c1:8a:cc:ad:fc:3e:af:1b:9a:21:57:
bd:ea:12:50:ab:09:a7:67:e8:04:df:ab:50:75:62:
14:0e:22:91:e0:01:7d:d2:60:71:93:54:a2:0d:ee:
e0:00:01:41:8b:79:cf:e2:ff:68:e9:8f:b5:42:74:
2f:83:1b:1f:22:51:a3:6f:20:aa:c8:b5:43:b3:ab:
4f:84:3e:f0:bf:79:66:e0:f5:0b:1f:76:5a:90:c3:
39:c7:d2:0d:a3:be:04:b4:ca:37:10:1e:7c:68:96:
be:02:ee:d5:78:19:5d:72:43:c5:9a:34:22:7c:5c:
d3:d5:2b:51:12:8b:2d:c0:73:52:a0:2f:09:4b:1d:
cd:29:21:6e:df:19:16:35:ba:c9:f4:02:f3:d0:1e:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B5:A9:3C:5E:03:3E:C5:02:F3:86:0D:8A:8C:B2:3F:14:71:BF:9D
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/IrWpPF4DPsUC84YNioyyPxRxv50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:db:f6:90:c5:6e:ce:c3:d1:11:c2:38:0f:6e:db:4d:27:6f:
d3:2b:f2:b2:0f:b2:f2:aa:b4:93:4d:4c:d1:ad:75:fc:df:a9:
da:80:78:e4:55:fc:3b:09:22:01:29:46:b4:65:e4:9d:e9:71:
eb:b7:64:43:48:45:fd:35:26:f1:bc:14:2c:ae:9a:6f:62:80:
31:7d:ea:fe:58:5f:a6:ab:ec:10:51:f7:02:24:90:b9:c9:ab:
29:0a:dc:53:56:68:49:23:d0:06:03:b8:6e:e3:e1:94:a6:0c:
fc:b3:e2:8f:7c:85:64:3a:d5:7f:19:fa:d3:13:0c:e9:3e:53:
1e:1f:51:88:82:8a:0b:79:85:9e:f1:19:35:66:81:34:c9:0e:
61:ef:75:88:e2:92:52:c5:44:c8:77:1e:59:fe:03:0c:16:b0:
37:c1:ce:d2:bd:bd:2a:6d:94:e4:14:84:48:4a:56:f4:86:bc:
ad:b8:8f:11:36:30:da:20:61:24:f5:c7:59:68:16:89:9d:6e:
da:0a:bc:38:50:10:cd:83:bd:0d:20:a0:77:9b:8c:12:4e:b6:
b5:c3:ac:8c:14:61:6a:47:45:60:2b:9d:6e:be:35:77:aa:b9:
8b:93:d1:44:ff:dc:c4:52:9f:cf:47:b4:f8:2a:c6:be:39:77:
f0:4c:be:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:29:28 2025 by rpki-client