Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/JPq-YP0brrV449VBUwSgLOsid0s.roa
File: JPq-YP0brrV449VBUwSgLOsid0s.roa (raw, json)
Hash identifier: /o7ZLoDEQmE5M/3l90P7qc/VgG3f9nz1osy/aSNrXw8=
Subject key identifier: 24:FA:BE:60:FD:1B:AE:B5:78:E3:D5:41:53:04:A0:2C:EB:22:77:4B
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01856E142508860FC4C0D8F2436F586D4248
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/JPq-YP0brrV449VBUwSgLOsid0s.roa
Signing time: Sun 01 Jan 2023 16:04:51 +0000
ROA not before: Sun 01 Jan 2023 16:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212249
IP address blocks: 141.98.113.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:25:08:86:0f:c4:c0:d8:f2:43:6f:58:6d:42:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 16:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24fabe60fd1baeb578e3d5415304a02ceb22774b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:da:17:bb:7b:f0:eb:14:72:d4:8a:09:4f:
16:15:61:eb:83:d3:53:44:39:e3:56:bf:99:c6:14:
44:04:9e:27:5c:39:55:19:8e:45:f8:5f:31:dd:a2:
5c:f2:e4:13:86:55:40:46:68:7d:20:28:88:d2:bd:
e1:ca:75:62:2e:01:2b:f5:c0:b9:e9:f7:53:db:b2:
82:d8:4c:5d:30:1e:cc:19:f3:26:02:dd:2c:99:83:
9d:17:8a:d0:c7:8c:37:c0:af:9a:1c:78:51:1a:2a:
a3:32:18:57:d6:57:64:1a:4a:38:b7:d8:9b:0d:ba:
f8:eb:dd:43:ce:47:39:de:9a:6e:04:6c:e0:00:3b:
60:83:73:46:4d:13:39:2b:09:e9:e3:7c:b8:f5:57:
63:39:e9:f8:5e:02:58:c2:40:98:9a:f3:cf:06:96:
18:28:f0:82:ee:24:1a:70:6f:b8:28:45:ce:84:7a:
a9:f4:ff:c8:2e:59:f1:50:91:5b:b2:9e:bb:3f:89:
a7:56:5f:5a:89:9a:54:a9:b3:21:d0:87:2b:44:21:
86:60:5e:d8:8c:07:86:00:11:d6:b0:26:97:96:d8:
e0:89:b4:65:10:3a:b9:e2:f4:18:0e:d2:57:31:72:
13:2a:d5:b5:2d:4b:f5:d8:68:8f:44:48:f2:0c:ec:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FA:BE:60:FD:1B:AE:B5:78:E3:D5:41:53:04:A0:2C:EB:22:77:4B
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/JPq-YP0brrV449VBUwSgLOsid0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.113.0-141.98.114.255
Signature Algorithm: sha256WithRSAEncryption
61:3c:75:73:b5:79:59:67:69:73:1c:25:ee:d8:2e:eb:cf:87:
ae:07:0f:50:fd:74:15:82:b5:49:bf:cf:f2:19:5d:8f:fe:e9:
d4:84:29:2d:7b:42:09:ac:31:e3:11:18:6e:6f:d3:2f:ae:ce:
e3:32:8c:9b:ac:9c:9a:dd:4a:07:98:d9:c9:da:2c:bc:ef:9a:
53:83:10:68:26:ac:bb:86:cc:3b:cc:56:b4:38:4f:3c:28:4a:
18:61:4d:4f:a4:50:e1:db:35:f1:e7:f1:04:93:97:7a:5c:a6:
6e:bd:84:59:01:69:b8:b3:63:db:61:80:64:f9:31:34:b9:ef:
22:51:1b:3b:74:77:be:7b:7c:86:31:0f:b2:5f:cb:98:d1:44:
8b:33:82:9a:9a:c5:c2:97:7d:11:42:7b:d9:33:95:28:7e:4e:
31:88:a1:27:23:cf:1b:33:c2:c7:e2:e2:d0:d2:9f:67:01:37:
dd:de:e3:45:8e:4a:fe:2a:c4:7c:80:01:8e:33:8c:9d:82:18:
79:cc:7c:1d:bb:65:e1:f9:d9:32:e4:53:37:08:ad:a5:ca:cc:
33:aa:b1:47:0d:61:dc:e7:ee:46:dd:45:3d:ce:7e:4a:ae:ec:
f8:8a:81:41:c4:94:62:87:ae:fb:c2:09:87:ad:bb:e5:fa:88:
d5:a4:3c:56
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVuFCUIhg/EwNjyQ29YbUJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjMwMTAxMTYwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGZhYmU2MGZkMWJhZWI1NzhlM2Q1NDE1MzA0YTAyY2ViMjI3NzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm/aF7t78OsUctSKCU8WFWHrg9NT
RDnjVr+ZxhREBJ4nXDlVGY5F+F8x3aJc8uQThlVARmh9ICiI0r3hynViLgEr9cC5
6fdT27KC2ExdMB7MGfMmAt0smYOdF4rQx4w3wK+aHHhRGiqjMhhX1ldkGko4t9ib
Dbr4691Dzkc53ppuBGzgADtgg3NGTRM5Kwnp43y49VdjOen4XgJYwkCYmvPPBpYY
KPCC7iQacG+4KEXOhHqp9P/ILlnxUJFbsp67P4mnVl9aiZpUqbMh0IcrRCGGYF7Y
jAeGABHWsCaXltjgibRlEDq54vQYDtJXMXITKtW1LUv12GiPREjyDOwUUwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCT6vmD9G661eOPVQVMEoCzrIndLMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvSlBxLVlQMGJyclY0NDlWQlV3U2dMT3NpZDBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACNYnED
BACNYnIwDQYJKoZIhvcNAQELBQADggEBAGE8dXO1eVlnaXMcJe7YLuvPh64HD1D9
dBWCtUm/z/IZXY/+6dSEKS17QgmsMeMRGG5v0y+uzuMyjJusnJrdSgeY2cnaLLzv
mlODEGgmrLuGzDvMVrQ4TzwoShhhTU+kUOHbNfHn8QSTl3pcpm69hFkBabizY9th
gGT5MTS57yJRGzt0d757fIYxD7Jfy5jRRIszgpqaxcKXfRFCe9kzlSh+TjGIoScj
zxszwsfi4tDSn2cBN93e40WOSv4qxHyAAY4zjJ2CGHnMfB27ZeH52TLkUzcIraXK
zDOqsUcNYdzn7kbdRT3Ofkqu7PiKgUHElGKHrvvCCYetu+X6iNWkPFY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org