Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/ngqXn9e7WKz48sGjdw6mbP_b4Pk.roa
File: ngqXn9e7WKz48sGjdw6mbP_b4Pk.roa (raw, json)
Hash identifier: WTFhewgsd5lWfGnWD42ukWbzmVarsEm0Pi8uml+ANLI=
Subject key identifier: 9E:0A:97:9F:D7:BB:58:AC:F8:F2:C1:A3:77:0E:A6:6C:FF:DB:E0:F9
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 018CC425417729EFF1506C5182C8510718DE
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/ngqXn9e7WKz48sGjdw6mbP_b4Pk.roa
Signing time: Mon 01 Jan 2024 08:30:25 +0000
ROA not before: Mon 01 Jan 2024 08:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 185.81.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 10:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:41:77:29:ef:f1:50:6c:51:82:c8:51:07:18:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e0a979fd7bb58acf8f2c1a3770ea66cffdbe0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:2b:c5:19:de:f1:df:0d:0e:8e:46:0f:c0:
a7:c5:c1:0e:04:2c:b1:79:ff:77:7e:62:7b:99:9f:
15:3f:a4:92:1e:91:f1:43:b1:03:a6:ca:6e:a0:5e:
02:61:c4:cf:15:99:3c:71:91:07:fa:45:43:6d:cc:
b3:e2:26:90:0a:6a:b9:2e:02:97:16:4f:35:2f:6b:
1a:66:35:a7:f7:bc:f2:ef:d7:6d:7e:97:ed:82:8f:
d1:c0:3f:0b:4c:7a:3e:30:64:49:8e:ad:c0:06:56:
9d:27:59:3e:2b:b6:7d:6c:67:bb:dc:a1:2f:8f:72:
ea:dc:6f:34:ff:04:51:43:70:e3:90:d7:fd:46:a0:
64:6c:02:3e:af:d9:aa:ac:b8:bb:3d:1c:0a:7b:2f:
f9:2b:6b:21:14:c7:10:03:c9:9f:6c:73:f5:dc:f6:
07:67:37:c8:e2:86:fc:75:d7:f0:cc:3c:f1:42:5e:
5c:9e:97:b2:5b:94:ce:8e:04:f8:28:f6:7e:2e:fa:
9b:64:2d:ed:fd:7c:00:9a:49:f3:0b:6f:54:90:39:
ad:dc:50:0a:2d:9c:3a:aa:b7:77:32:55:b0:68:0a:
0a:02:37:f8:73:ac:8c:48:1c:c8:e7:bd:2c:61:5d:
60:03:06:fc:2d:28:23:02:bb:8b:06:ff:40:06:b5:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:97:9F:D7:BB:58:AC:F8:F2:C1:A3:77:0E:A6:6C:FF:DB:E0:F9
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/ngqXn9e7WKz48sGjdw6mbP_b4Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:49:f3:43:e4:9a:1f:b5:25:42:d1:4e:04:a5:d1:f7:57:57:
6d:95:a0:c2:2e:4e:87:0f:14:34:df:a5:11:58:05:0a:55:3e:
b5:da:8f:49:51:4d:7e:e7:de:45:4f:96:2b:cf:80:43:9c:a8:
96:45:73:87:a5:3f:de:a2:86:c4:b5:b2:00:a6:aa:7d:1b:d9:
6a:53:42:b8:da:70:86:78:62:ce:c0:74:9b:06:b5:f0:31:18:
5b:c2:4e:77:aa:ac:13:fd:2b:ee:54:e1:15:93:5b:23:5e:6f:
81:81:1d:a3:54:e1:b3:27:fe:72:0f:84:7b:0b:43:5a:10:45:
cd:4b:57:c6:56:dd:18:05:bf:9b:26:bd:15:b3:3c:45:53:94:
75:f6:df:ef:de:1e:f9:96:dd:4d:10:bb:bc:98:35:70:d3:1a:
3b:f1:0c:cf:e7:69:f2:e8:27:1f:50:bd:02:1f:27:ca:ee:a0:
7d:2e:66:38:a6:28:d1:38:b5:8d:85:91:f6:6d:5f:91:07:aa:
d0:8b:38:ce:38:f9:0b:b9:1e:fe:ca:08:27:65:66:93:f5:31:
2e:ea:08:b6:85:31:0f:d6:82:11:a4:22:98:2c:3f:3e:95:71:
3b:8d:85:eb:41:f4:d4:7c:47:3f:bd:df:92:47:18:4f:fd:d1:
ab:3c:9c:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJUF3Ke/xUGxRgshRBxjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZWEzN2E4ZTczZTc2NzlhOTMzZDcwZjdiOWM4NzIwODEw
MjQ0NTUwHhcNMjQwMTAxMDgzMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTBhOTc5ZmQ3YmI1OGFjZjhmMmMxYTM3NzBlYTY2Y2ZmZGJlMGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLorxRne8d8NDo5GD8CnxcEOBCyx
ef93fmJ7mZ8VP6SSHpHxQ7EDpspuoF4CYcTPFZk8cZEH+kVDbcyz4iaQCmq5LgKX
Fk81L2saZjWn97zy79dtfpftgo/RwD8LTHo+MGRJjq3ABladJ1k+K7Z9bGe73KEv
j3Lq3G80/wRRQ3DjkNf9RqBkbAI+r9mqrLi7PRwKey/5K2shFMcQA8mfbHP13PYH
ZzfI4ob8ddfwzDzxQl5cnpeyW5TOjgT4KPZ+LvqbZC3t/XwAmknzC29UkDmt3FAK
LZw6qrd3MlWwaAoKAjf4c6yMSBzI570sYV1gAwb8LSgjAruLBv9ABrVzVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4Kl5/Xu1is+PLBo3cOpmz/2+D5MB8GA1UdIwQY
MBaAFBbqN6jnPnZ5qTPXD3uchyCBAkRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWIt
NDcyYjBkMDcyZTgzLzEvbmdxWG45ZTdXS3o0OHNHamR3Nm1iUF9iNFBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWItNDcyYjBkMDcyZTgz
LzEvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVFiMA0G
CSqGSIb3DQEBCwUAA4IBAQAcSfND5JoftSVC0U4EpdH3V1dtlaDCLk6HDxQ036UR
WAUKVT612o9JUU1+595FT5Yrz4BDnKiWRXOHpT/eoobEtbIApqp9G9lqU0K42nCG
eGLOwHSbBrXwMRhbwk53qqwT/SvuVOEVk1sjXm+BgR2jVOGzJ/5yD4R7C0NaEEXN
S1fGVt0YBb+bJr0VszxFU5R19t/v3h75lt1NELu8mDVw0xo78QzP52ny6CcfUL0C
HyfK7qB9LmY4pijROLWNhZH2bV+RB6rQizjOOPkLuR7+yggnZWaT9TEu6gi2hTEP
1oIRpCKYLD8+lXE7jYXrQfTUfEc/vd+SRxhP/dGrPJxG
-----END CERTIFICATE-----
Generated at Tue May 7 13:15:04 2024 by rpki-client on console-ams.rpki-client.org