Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/y7P4QW2XHsRE_1IfClaVCkPMVok.roa
File: y7P4QW2XHsRE_1IfClaVCkPMVok.roa (raw, json)
Hash identifier: Qc33BFsAvznwPYZQSEhslvBB6JGjJW4qfFRkcilYjec=
Subject key identifier: CB:B3:F8:41:6D:97:1E:C4:44:FF:52:1F:0A:56:95:0A:43:CC:56:89
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC4936A8DADE692A8B9837BAAD10623E1
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/y7P4QW2XHsRE_1IfClaVCkPMVok.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12312
IP address blocks: 141.98.44.0/24 maxlen: 24
2a07:6f46:4400::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6a:8d:ad:e6:92:a8:b9:83:7b:aa:d1:06:23:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbb3f8416d971ec444ff521f0a56950a43cc5689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:0f:80:37:aa:d9:bc:3b:18:d3:d5:6b:cc:
8e:7c:7b:35:a2:d0:cb:2c:9a:4e:c6:53:3b:f4:9e:
56:9e:bb:ba:65:ac:3f:98:fd:ef:5d:fd:a4:04:ac:
12:6b:36:49:d5:5c:a8:c4:12:cf:95:38:2f:5c:be:
2a:44:34:24:2d:7b:97:30:96:db:7f:af:de:ed:f8:
0d:f1:cf:bc:99:3a:92:ff:5f:44:69:e0:16:1f:7f:
96:c3:7c:d1:8f:54:27:52:6e:68:87:dd:a4:48:9a:
50:c9:1e:65:2b:92:4b:34:7c:51:15:58:2d:90:32:
b3:83:8c:ae:3b:60:fb:6a:48:ab:8d:58:88:8b:46:
e8:35:b1:9c:de:4f:32:de:4b:02:92:6a:a0:0f:ae:
ec:44:1d:15:18:15:e7:c0:12:d1:6e:1d:92:9c:a0:
19:19:1a:4a:ee:2f:8f:78:18:e5:34:8b:28:cd:c0:
54:9b:3b:a7:01:34:53:9e:9c:ee:79:f2:68:00:6d:
92:9a:59:89:81:92:86:6b:e4:00:aa:77:ee:66:6d:
33:af:b0:4b:c7:ec:12:d0:7d:c3:63:04:76:37:34:
68:17:3e:e4:8d:70:db:61:8c:8e:bc:7d:f0:67:81:
51:12:ea:a8:b3:ca:cc:14:65:d3:d3:d2:04:7d:5c:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B3:F8:41:6D:97:1E:C4:44:FF:52:1F:0A:56:95:0A:43:CC:56:89
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/y7P4QW2XHsRE_1IfClaVCkPMVok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.44.0/24
IPv6:
2a07:6f46:4400::/40
Signature Algorithm: sha256WithRSAEncryption
bb:43:b6:83:7c:b7:6c:ee:76:41:de:b5:29:1b:91:9b:40:80:
93:4a:7b:87:13:94:43:fa:92:ed:44:e0:ee:ed:80:f2:fb:e1:
f5:59:c3:48:38:28:e4:db:d2:52:8f:89:3f:02:f0:c5:b7:6f:
f9:b7:29:36:49:8c:ee:fa:1d:dc:cb:1b:f3:ce:e0:d7:f4:5a:
09:00:03:20:90:29:78:c8:47:67:87:38:3b:a4:2c:5a:4d:61:
5c:1f:7c:62:40:ba:32:a7:fb:c7:d4:d1:70:57:2e:7b:4e:9a:
00:b2:3f:06:6b:3b:8a:2c:c2:79:89:f7:d5:41:2f:ad:00:19:
67:d4:54:cb:85:dd:78:f2:de:e0:47:09:00:50:dc:d4:b1:05:
b8:b0:4f:87:41:b7:1c:42:33:44:74:ac:86:91:d6:69:dd:78:
e6:d2:55:1b:2e:a5:78:34:50:65:39:4f:bd:bf:ae:34:1f:d6:
dd:e2:f6:e2:71:22:7c:5f:c8:1b:43:d0:2f:bb:ab:da:1b:e6:
23:11:26:b5:ce:87:f0:20:16:e6:85:7f:e9:81:9e:06:32:1b:
c1:a1:36:44:a2:d2:93:c9:38:fa:40:7c:c9:8d:14:eb:3c:24:
a6:24:72:2f:49:1e:2d:bc:75:3c:f7:d2:f7:6c:35:57:24:04:
1a:ce:82:b5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYzEk2qNreaSqLmDe6rRBiPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjQwMTAxMTAzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmIzZjg0MTZkOTcxZWM0NDRmZjUyMWYwYTU2OTUwYTQzY2M1Njg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc4PgDeq2bw7GNPVa8yOfHs1otDL
LJpOxlM79J5Wnru6Zaw/mP3vXf2kBKwSazZJ1VyoxBLPlTgvXL4qRDQkLXuXMJbb
f6/e7fgN8c+8mTqS/19EaeAWH3+Ww3zRj1QnUm5oh92kSJpQyR5lK5JLNHxRFVgt
kDKzg4yuO2D7akirjViIi0boNbGc3k8y3ksCkmqgD67sRB0VGBXnwBLRbh2SnKAZ
GRpK7i+PeBjlNIsozcBUmzunATRTnpzuefJoAG2SmlmJgZKGa+QAqnfuZm0zr7BL
x+wS0H3DYwR2NzRoFz7kjXDbYYyOvH3wZ4FREuqos8rMFGXT09IEfVx4RQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFMuz+EFtlx7ERP9SHwpWlQpDzFaJMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEveTdQNFFXMlhIc1JFXzFJZkNsYVZDa1BNVm9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAjWIsMA4E
AgACMAgDBgAqB29GRDANBgkqhkiG9w0BAQsFAAOCAQEAu0O2g3y3bO52Qd61KRuR
m0CAk0p7hxOUQ/qS7UTg7u2A8vvh9VnDSDgo5NvSUo+JPwLwxbdv+bcpNkmM7vod
3Msb887g1/RaCQADIJApeMhHZ4c4O6QsWk1hXB98YkC6Mqf7x9TRcFcue06aALI/
Bms7iizCeYn31UEvrQAZZ9RUy4XdePLe4EcJAFDc1LEFuLBPh0G3HEIzRHSshpHW
ad145tJVGy6leDRQZTlPvb+uNB/W3eL24nEifF/IG0PQL7ur2hvmIxEmtc6H8CAW
5oV/6YGeBjIbwaE2RKLSk8k4+kB8yY0U6zwkpiRyL0keLbx1PPfS92w1VyQEGs6C
tQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:20 2025 by rpki-client