Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_T2KHWsaC5mKUN__mtNcfmxv5jQ.roa
File: _T2KHWsaC5mKUN__mtNcfmxv5jQ.roa (raw, json)
Hash identifier: YOG104F/vdvlwSePyH+ZyH88vUcdE/eHjP34V+nniIw=
Subject key identifier: FD:3D:8A:1D:6B:1A:0B:99:8A:50:DF:FF:9A:D3:5C:7E:6C:6F:E6:34
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2EC5CDFE89832C359CE7BC620439C4
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_T2KHWsaC5mKUN__mtNcfmxv5jQ.roa
Signing time: Sun 01 Jan 2023 07:14:42 +0000
ROA not before: Sun 01 Jan 2023 07:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 141.98.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:c5:cd:fe:89:83:2c:35:9c:e7:bc:62:04:39:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd3d8a1d6b1a0b998a50dfff9ad35c7e6c6fe634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:39:fb:9c:6e:cd:13:54:3a:2c:fa:cc:50:ff:
84:9b:d4:1b:38:9b:a0:8b:49:8a:2c:b5:e5:d5:a3:
73:3e:b8:11:6b:92:d1:45:6d:f9:94:f5:b6:44:df:
54:db:82:ff:1f:30:70:10:d8:2f:aa:fa:41:83:40:
8a:5f:a4:7e:88:27:98:93:b2:7b:24:ea:ca:18:7c:
61:d5:b4:af:e3:53:f0:25:68:81:55:7a:61:50:49:
b0:ca:e8:59:92:18:e9:91:cb:cd:86:72:f5:14:ef:
b3:9e:d8:07:14:6e:e9:de:c5:55:32:89:c3:5f:41:
96:22:5d:99:60:5a:a9:de:35:b8:fc:e0:74:53:ca:
ce:e9:35:a9:2d:4a:f7:13:e3:5d:01:6f:ec:fe:cb:
b4:3f:2f:4f:19:dd:b8:e6:09:0c:db:2c:01:1b:36:
10:d1:94:0b:cc:73:76:e0:50:3a:27:a1:f0:65:09:
e1:c7:8f:a2:5e:62:6a:e5:35:65:4d:16:82:69:7f:
a0:d4:b4:ca:5a:4b:55:d9:01:80:67:ac:b9:3c:17:
fe:d0:b0:47:fa:39:b6:99:f0:31:e6:8c:92:9f:21:
b8:5e:0c:75:e6:1d:e5:37:6a:8e:88:73:de:cb:8a:
61:cd:87:13:6a:33:c2:48:80:09:a4:0a:da:4b:0e:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3D:8A:1D:6B:1A:0B:99:8A:50:DF:FF:9A:D3:5C:7E:6C:6F:E6:34
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_T2KHWsaC5mKUN__mtNcfmxv5jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.44.0/24
Signature Algorithm: sha256WithRSAEncryption
54:71:73:6d:29:d1:6a:ea:b9:ac:8e:60:c8:2a:6f:85:5b:4d:
c8:d8:34:8d:4d:fd:42:0a:c2:ce:b0:90:4e:c2:76:ab:d3:b4:
ed:bc:21:63:d4:b0:7e:0c:e7:3c:71:d3:93:7b:0e:ca:ec:06:
e9:38:a9:d5:47:5d:69:b8:26:21:03:62:dd:57:e9:16:91:ef:
75:d9:b7:94:d9:8f:ea:49:a3:1d:e9:a4:de:d9:d1:04:6b:b1:
74:0d:f9:55:09:ec:92:52:44:2e:b4:83:24:71:ff:c8:8f:c0:
e4:99:ba:f0:61:7c:fa:7e:3e:fa:81:f1:1d:1a:38:f7:cb:3a:
a5:83:91:7b:d2:e1:3d:0b:0f:fb:86:28:d9:ae:d9:b9:2b:3a:
df:43:bb:c7:31:9e:e6:40:96:cc:70:01:cd:62:ea:27:b1:3b:
97:a6:bc:6e:2a:18:ca:b0:ad:a2:33:cd:bf:3f:fb:7f:33:6d:
74:5d:ca:eb:9a:11:0d:bd:9d:bb:1e:0a:60:9d:f3:c4:bb:65:
3c:27:91:4a:be:f2:6c:f8:d9:73:83:c7:57:1d:a0:c2:09:73:
b5:98:af:89:ba:13:82:27:2d:3c:c0:8d:0d:b3:5e:c3:16:22:
98:9b:e9:be:90:5e:fc:de:3d:91:16:81:9e:e8:11:f8:58:33:
03:b1:8d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org