Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Tpjp0f14hwWw6ReSgRWLL5J90x0.roa
File: Tpjp0f14hwWw6ReSgRWLL5J90x0.roa (raw, json)
Hash identifier: OjGQ8jdEOTtDEgeh3lN3rzNcrzh2gGdyRgFXVazw6hc=
Subject key identifier: 4E:98:E9:D1:FD:78:87:05:B0:E9:17:92:81:15:8B:2F:92:7D:D3:1D
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01856E14246C08F138EC2BA71B23F7799FC1
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Tpjp0f14hwWw6ReSgRWLL5J90x0.roa
Signing time: Sun 01 Jan 2023 16:04:51 +0000
ROA not before: Sun 01 Jan 2023 16:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210574
IP address blocks: 141.98.112.0/24 maxlen: 24
141.98.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:24:6c:08:f1:38:ec:2b:a7:1b:23:f7:79:9f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 16:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e98e9d1fd788705b0e9179281158b2f927dd31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:78:ec:e6:68:97:f1:4a:4c:13:31:06:fb:a1:
3f:d2:98:6c:60:b4:63:0d:33:f4:a4:c9:35:b3:8c:
c7:8a:46:86:26:87:5c:9b:e7:df:42:71:d5:b1:d2:
24:55:86:b7:b5:57:55:90:61:09:e9:3c:c1:9d:90:
d8:fc:95:2e:bf:e7:d1:af:07:1c:55:b5:c3:10:85:
e8:e4:83:82:4f:15:73:50:a8:cc:a0:35:41:d5:3c:
00:05:1c:2a:d1:fb:87:5e:20:bd:14:d8:f4:2e:89:
1b:2a:b6:71:1f:59:a1:08:bc:52:10:75:89:a9:00:
70:76:b6:ec:44:6e:66:ba:b7:35:b7:7e:d7:bc:a7:
ce:c6:ac:ae:bc:11:d2:bc:45:0e:8f:f6:2d:2d:14:
ae:be:99:d2:ab:43:7a:f7:28:c2:45:0b:fc:d7:a3:
af:72:ca:af:6e:ee:11:bd:ec:6b:f3:c6:7a:a8:1c:
34:9f:77:1d:84:fe:fc:49:02:d9:3c:fd:03:b6:05:
bd:cb:c3:0c:dd:cf:78:44:65:d5:b5:e1:13:45:fe:
0b:a3:0d:0a:2b:e7:32:37:32:91:1f:c4:6d:7c:02:
7e:a4:8c:e6:3f:7c:11:4e:cd:75:15:6f:ee:3c:ea:
91:e2:a7:9f:9f:11:fb:a6:e1:28:bf:53:a5:cf:9f:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:98:E9:D1:FD:78:87:05:B0:E9:17:92:81:15:8B:2F:92:7D:D3:1D
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Tpjp0f14hwWw6ReSgRWLL5J90x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0/24
141.98.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c6:ea:46:4c:ee:9f:0b:6e:ed:3b:a2:37:fd:f9:f5:bf:33:
fe:36:95:e5:ba:f4:4a:c3:d9:2c:2c:82:58:a0:f8:ce:0a:74:
66:a4:f5:1d:e6:4f:98:5c:54:2f:2b:10:05:10:73:76:dd:b6:
4b:c7:f7:44:05:af:69:8e:55:48:02:12:0d:5d:40:8d:bc:6a:
a6:1c:2c:82:8b:87:08:e2:07:f3:15:4f:c2:75:85:ae:dd:c6:
8c:28:cf:59:39:be:a1:92:bc:74:ff:22:66:fb:77:d6:a9:07:
57:99:5b:8b:24:80:1e:eb:56:46:23:c0:c6:56:7b:6d:5f:59:
f2:21:4e:7b:30:e4:c0:5b:cc:aa:ba:b8:33:a0:3e:fa:1f:e0:
e9:f2:e4:03:4c:b3:dc:dc:06:e5:25:c2:23:a2:2c:93:a4:f2:
fe:d4:23:b5:ef:22:14:5c:45:cb:1f:fd:18:fa:e8:9a:82:04:
33:9d:b5:7b:7c:8a:e8:18:6b:15:d6:4a:b4:4a:d9:0b:72:82:
e3:6a:3b:ed:91:aa:86:73:78:e1:49:df:53:20:28:6f:af:8d:
83:a1:91:03:de:02:c4:42:03:b2:3f:3d:88:a6:b8:41:15:7a:
44:72:e3:7c:af:3f:71:ef:26:79:e3:d9:c3:fd:1f:a2:dc:49:
e7:3c:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org